$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: N3jSFoDwNdALBhYzt9zJ1247E2kgb4PgVbKW2uPNQgs= Subject key identifier: 2E:86:DE:57:11:B5:D1:B3:84:D0:D8:47:5B:16:41:C4:AC:19:78:E8 Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 479244993AE035CF6DA7BA0552F6434145AECE88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:49:18 +0000 Manifest this update: Thu 23 Jul 2026 19:44:18 +0000 Manifest next update: Fri 24 Jul 2026 22:28:18 +0000 Files and hashes: 1: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 2: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: m/h3NFfzw5oBY7yvqoLfMIZzyE/LXeHzrnlql7qT6Pc=) 3: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) 4: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) 5: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:92:44:99:3a:e0:35:cf:6d:a7:ba:05:52:f6:43:41:45:ae:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: Jul 23 19:44:18 2026 GMT Not After : Jul 24 22:28:18 2026 GMT Subject: CN=2E86DE5711B5D1B384D0D8475B1641C4AC1978E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:6a:f2:64:19:a5:fe:8f:64:72:b2:5d:47: bf:91:3d:51:56:3f:c9:ea:72:3d:3c:34:54:f1:a3: 4e:04:ae:19:19:19:64:3e:c9:46:82:ff:66:1a:d4: 7a:2a:43:39:b2:f7:d1:d6:fd:63:fb:fb:5f:c6:f8: d9:31:1c:52:16:f6:7d:73:a8:c6:be:64:8a:d8:e1: a6:a2:32:91:8a:90:7c:34:1c:1e:33:f1:9f:66:25: 6d:79:79:01:49:d8:29:27:75:ea:55:73:d7:59:bb: 64:5c:6d:bf:a2:97:5a:4c:6c:f3:b2:cd:8b:fb:25: a8:e5:03:8b:98:0e:88:0e:e8:f9:d9:5b:3f:f8:99: 1e:32:f6:99:7c:bb:44:98:4e:be:23:71:7f:20:f0: 03:30:f2:cf:6f:1d:b0:19:12:23:fe:14:12:0a:ef: 85:65:5a:62:03:a0:81:e0:79:d7:77:c8:16:d3:d8: 76:d9:94:b0:5b:8f:98:6d:6c:02:a4:81:d2:bc:75: 21:85:c1:e5:95:f6:ea:d8:46:75:71:69:43:12:5b: e1:04:e4:8f:ff:f9:2d:73:00:54:a5:ab:30:cb:ec: 72:53:98:53:54:fc:ef:b8:2c:24:92:13:ef:6c:5c: 6b:6e:31:c6:f1:72:f6:f7:2a:e3:28:0c:08:10:66: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:DE:57:11:B5:D1:B3:84:D0:D8:47:5B:16:41:C4:AC:19:78:E8 X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d9:64:7e:02:42:51:bf:56:ef:5e:70:5c:37:9f:f0:8a:18: 02:7a:3e:9f:b5:f0:bf:5b:db:6d:eb:c8:7d:68:0a:f1:8f:fd: 8d:b0:bd:47:0d:26:89:d4:dd:13:4c:1e:24:f0:67:ef:14:a7: 40:cb:2d:e3:08:51:dc:98:3b:94:6e:04:19:ed:c9:0b:a0:12: ba:61:e5:20:e0:63:37:49:39:0f:7b:9d:bb:32:fd:82:d0:05: 96:97:ba:97:1d:98:44:dc:39:19:66:0b:84:ca:25:ec:e6:e2: dc:0b:8f:a0:02:94:a0:92:92:48:15:a2:29:52:c1:5c:d1:3f: b5:aa:88:8b:73:50:7f:40:6d:01:9f:cf:b8:01:fb:7b:a5:25: c2:93:79:a6:ab:b0:7a:14:15:ed:3d:f2:4f:12:db:45:3f:1b: df:fb:00:68:76:63:4b:c2:ce:9f:6a:94:ed:a2:ef:b2:f6:f6: 81:f3:bb:ce:e2:e8:e5:c7:6f:e9:69:d0:16:37:5f:be:f1:2e: cb:69:d5:0c:a6:a7:ba:a4:c6:75:1c:f8:9d:1f:51:6b:0a:80: 71:db:17:b4:ab:8a:42:c1:7f:7a:6f:9c:9c:12:19:00:ac:56: b7:98:45:0d:04:fc:56:27:99:87:b4:53:4f:4d:08:74:5b:cd: b2:d7:2b:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5JEmTrgNc9tp7oFUvZDQUWuzogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA3MjMxOTQ0MThaFw0yNjA3MjQyMjI4MThaMDMxMTAvBgNV BAMTKDJFODZERTU3MTFCNUQxQjM4NEQwRDg0NzVCMTY0MUM0QUMxOTc4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jGryZBml/o9kcrJdR7+RPVFW P8nqcj08NFTxo04ErhkZGWQ+yUaC/2Ya1HoqQzmy99HW/WP7+1/G+NkxHFIW9n1z qMa+ZIrY4aaiMpGKkHw0HB4z8Z9mJW15eQFJ2CkndepVc9dZu2Rcbb+il1pMbPOy zYv7JajlA4uYDogO6PnZWz/4mR4y9pl8u0SYTr4jcX8g8AMw8s9vHbAZEiP+FBIK 74VlWmIDoIHgedd3yBbT2HbZlLBbj5htbAKkgdK8dSGFweWV9urYRnVxaUMSW+EE 5I//+S1zAFSlqzDL7HJTmFNU/O+4LCSSE+9sXGtuMcbxcvb3KuMoDAgQZgwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULobeVxG10bOE0NhHWxZBxKwZeOgwHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7ZZH4CQlG/Vu9ecFw3n/CKGAJ6Pp+18L9b 223ryH1oCvGP/Y2wvUcNJonU3RNMHiTwZ+8Up0DLLeMIUdyYO5RuBBntyQugErph 5SDgYzdJOQ97nbsy/YLQBZaXupcdmETcORlmC4TKJezm4twLj6AClKCSkkgVoilS wVzRP7WqiItzUH9AbQGfz7gB+3ulJcKTeaarsHoUFe098k8S20U/G9/7AGh2Y0vC zp9qlO2i77L29oHzu87i6OXHb+lp0BY3X77xLstp1Qymp7qkxnUc+J0fUWsKgHHb F7SrikLBf3pvnJwSGQCsVreYRQ0E/FYnmYe0U09NCHRbzbLXK/4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:25:27 2026 by rpki-client