$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: ztid9lJaOMrX62dnicZOo/70mg4Ypg5TmmiZ+k7vWYQ= Subject key identifier: 7C:BC:59:FC:0E:D2:AD:72:AA:00:B3:33:0D:A8:9B:17:DE:92:7C:FF Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 7C1723A827B892F7434E9BA39124193C7CEB4F86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 18:26:58 +0000 Manifest this update: Wed 16 Sep 2026 18:21:58 +0000 Manifest next update: Thu 17 Sep 2026 19:10:58 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) 3: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: y/OKeH0J/a2Cl0j74ejFpZLUJym0vUbEABoS/kBrTZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:17:23:a8:27:b8:92:f7:43:4e:9b:a3:91:24:19:3c:7c:eb:4f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: Sep 16 18:21:58 2026 GMT Not After : Sep 17 19:10:58 2026 GMT Subject: CN=7CBC59FC0ED2AD72AA00B3330DA89B17DE927CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:45:57:6f:f8:13:d7:38:ab:bc:cb:4d:9e: 93:0d:fc:85:78:98:d4:f2:00:9e:f4:df:c1:a4:47: 37:fa:55:09:61:06:b7:b2:24:ce:09:45:9e:a2:0a: d5:17:70:f3:9b:b2:35:83:6a:3f:4c:44:3f:87:81: 25:22:4d:9d:d6:84:78:d4:3d:42:3d:12:1f:fb:07: e2:9e:39:e9:e6:8f:f2:f2:b9:6e:ee:1b:fe:a0:df: be:c2:77:99:60:88:17:c8:c1:97:72:7f:d6:b6:f2: 22:96:df:f0:e2:c2:c1:f2:01:d9:80:b2:f7:07:95: 0b:7a:ba:95:72:7f:68:7b:62:f5:eb:e4:39:bf:a8: 3a:25:18:51:33:73:b1:33:89:af:6c:fa:dd:c8:c1: 52:41:e8:12:db:c0:ec:c5:1e:e7:0e:34:10:61:6e: 1b:16:3c:9e:ee:fd:12:84:d9:b2:cf:aa:28:07:0f: bc:b5:46:66:6c:5a:91:4b:a2:d8:ea:ed:51:0c:37: 58:f0:8b:9c:10:f2:48:55:13:94:06:78:e1:dd:46: 5c:52:48:53:e1:3f:35:85:96:9c:5b:5e:6d:97:e7: c9:2a:12:f2:84:64:a6:9e:23:fb:b7:d1:fc:d8:47: ba:4d:84:c9:28:4f:ca:5f:21:27:75:ba:02:dc:08: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BC:59:FC:0E:D2:AD:72:AA:00:B3:33:0D:A8:9B:17:DE:92:7C:FF X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:75:e0:6a:3b:fc:b6:e6:27:d1:14:32:56:db:f1:db:78:eb: a6:ef:d8:28:c4:a3:39:58:8b:89:09:df:b3:10:d4:0f:36:4f: 5d:c6:9b:36:40:cd:dd:c9:d2:b9:74:46:c2:28:13:fd:f2:e0: a7:17:69:d3:e5:a0:6e:2d:7f:f9:3d:1d:e0:77:75:31:2e:de: e7:77:ea:0e:bb:5f:6d:ca:0a:03:40:0e:3a:bc:28:ef:c7:e2: 7b:07:1b:e7:7d:61:26:b1:a8:e7:81:a4:c8:10:8f:cd:23:62: 3a:fe:53:9c:66:8e:15:2a:04:c1:50:c8:16:60:d7:04:4f:88: aa:5e:4c:7a:f3:19:3c:b2:e8:10:29:21:50:3c:ab:fd:ad:f0: 83:22:a8:05:fe:4e:64:bc:9a:21:46:57:9e:48:26:ba:47:a1: c1:d1:16:5d:7e:6f:4a:74:6e:be:ec:bb:36:44:e2:19:06:71: 8f:6a:a8:a6:d0:81:8a:8b:22:c7:fb:2d:f2:f6:21:00:1d:50: 72:8b:34:38:7b:6a:55:4b:f7:63:36:18:9b:ce:aa:4c:f0:7a: a3:e3:95:5e:96:d7:85:61:2b:b9:e3:fe:df:40:4e:2e:9e:20: cf:14:11:b8:85:49:94:4a:02:43:43:5a:5b:17:6f:a2:c1:45: b2:e8:3c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBcjqCe4kvdDTpujkSQZPHzrT4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjA5MTYxODIxNThaFw0yNjA5MTcxOTEwNThaMDMxMTAvBgNV BAMTKDdDQkM1OUZDMEVEMkFENzJBQTAwQjMzMzBEQTg5QjE3REU5MjdDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EUVXb/gT1zirvMtNnpMN/IV4 mNTyAJ7038GkRzf6VQlhBreyJM4JRZ6iCtUXcPObsjWDaj9MRD+HgSUiTZ3WhHjU PUI9Eh/7B+KeOenmj/LyuW7uG/6g377Cd5lgiBfIwZdyf9a28iKW3/DiwsHyAdmA svcHlQt6upVyf2h7YvXr5Dm/qDolGFEzc7Ezia9s+t3IwVJB6BLbwOzFHucONBBh bhsWPJ7u/RKE2bLPqigHD7y1RmZsWpFLotjq7VEMN1jwi5wQ8khVE5QGeOHdRlxS SFPhPzWFlpxbXm2X58kqEvKEZKaeI/u30fzYR7pNhMkoT8pfISd1ugLcCPqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLxZ/A7SrXKqALMzDaibF96SfP8wHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAER14Go7/LbmJ9EUMlbb8dt466bv2CjEozlY i4kJ37MQ1A82T13GmzZAzd3J0rl0RsIoE/3y4KcXadPloG4tf/k9HeB3dTEu3ud3 6g67X23KCgNADjq8KO/H4nsHG+d9YSaxqOeBpMgQj80jYjr+U5xmjhUqBMFQyBZg 1wRPiKpeTHrzGTyy6BApIVA8q/2t8IMiqAX+TmS8miFGV55IJrpHocHRFl1+b0p0 br7suzZE4hkGcY9qqKbQgYqLIsf7LfL2IQAdUHKLNDh7alVL92M2GJvOqkzweqPj lV6W14VhK7nj/t9ATi6eIM8UEbiFSZRKAkNDWlsXb6LBRbLoPF0= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:59 2026 by rpki-client