$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: pFYUXG90khv2nP/cdlrfjli2f0LPxVdGr3V1BVK0Alo= Subject key identifier: 43:65:32:91:BD:A0:A5:59:8B:97:FE:07:C0:55:37:1A:AC:76:36:1D Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 16FF91A919E6AD85A04753E3F584760A45FE57F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:35:03 +0000 Manifest this update: Tue 12 May 2026 08:30:03 +0000 Manifest next update: Wed 13 May 2026 10:28:03 +0000 Files and hashes: 1: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) 2: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 3: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: 0708W+QSCKnAnoEuHoO+DtBClknezwto0sFhD5cqcSE=) 4: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) 5: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ff:91:a9:19:e6:ad:85:a0:47:53:e3:f5:84:76:0a:45:fe:57:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: May 12 08:30:03 2026 GMT Not After : May 13 10:28:03 2026 GMT Subject: CN=43653291BDA0A5598B97FE07C055371AAC76361D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:89:77:ef:de:0d:eb:dd:7a:09:fe:52:80: 31:d4:ed:42:13:44:96:16:a2:e7:26:7b:33:26:d1: 9f:ac:95:a4:96:ff:31:94:eb:33:cc:0a:55:b6:12: c7:16:e8:ae:c1:ac:a4:37:96:eb:5a:53:5c:78:17: 15:4d:b1:0f:42:4a:cb:f8:e0:59:85:17:72:c6:65: d8:3f:ce:6e:77:6c:a1:53:84:ee:77:bc:54:23:e8: 9a:9d:cb:2b:a2:04:04:80:7b:97:a0:fe:51:d6:83: 49:65:d7:e8:97:7f:a5:a4:da:18:c0:80:f6:c1:ca: ca:f8:24:09:b2:0e:e2:2c:d6:00:71:a5:05:0a:c8: df:ec:62:ba:01:79:52:ed:8a:0f:92:14:67:d2:d1: 50:1b:0c:6b:3d:af:80:e2:22:73:ea:0f:9c:42:c3: 51:14:92:ab:00:13:ed:aa:2c:c2:c2:12:6f:7c:77: 64:e1:e5:e0:df:de:cf:83:8d:b6:eb:94:97:8b:88: c1:84:74:75:b9:50:fc:e5:c0:18:c6:cf:9c:6f:c9: 0e:00:1b:32:40:6e:bb:03:65:e8:1f:42:01:c8:a7: fb:56:4a:73:e8:af:5e:08:fe:b3:74:18:fe:90:8e: 96:4b:36:f1:df:19:52:82:7d:27:04:f4:c4:48:f6: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:65:32:91:BD:A0:A5:59:8B:97:FE:07:C0:55:37:1A:AC:76:36:1D X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9d:fc:36:36:5c:76:62:66:e5:dc:8e:62:c5:11:f5:6d:6b: f0:db:92:81:6a:e2:88:bf:6c:07:ef:f5:26:ef:4e:48:b8:0c: 4a:95:29:01:2f:e7:06:be:f4:4c:c6:b4:dc:62:b3:e8:23:26: 7b:1a:49:89:b3:a6:c9:7b:71:35:fa:16:cf:18:c7:29:77:2b: 95:0c:38:66:3b:f3:02:be:cb:23:a7:69:da:c1:c7:96:1f:2b: f9:92:61:c1:23:74:33:75:43:78:e8:ce:ee:f7:38:58:d9:c8: 53:f8:68:4c:ab:33:89:b9:06:d4:20:33:1f:2c:6e:be:60:7f: 95:3a:0b:4b:bf:ee:76:3e:9a:6f:f4:27:68:31:ce:82:60:eb: d7:db:42:4f:65:77:b1:bd:2e:c7:3e:b3:4c:cc:28:ed:5c:fd: 85:a7:44:0e:27:20:5c:c0:cb:bb:83:02:92:7b:0b:eb:fc:c5: 07:5f:00:33:29:85:96:4e:89:fa:90:67:24:b5:fe:a5:8d:be: 59:08:8f:c9:f1:84:de:2d:03:22:6b:c1:8e:97:46:37:96:34: 64:ff:0b:22:cf:f9:5d:c7:1b:24:0f:92:d9:ff:c2:93:a8:ff: e6:ea:10:6c:32:23:79:71:05:99:31:45:b3:53:94:6e:5c:4d: 3b:f6:59:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFv+RqRnmrYWgR1Pj9YR2CkX+V/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA1MTIwODMwMDNaFw0yNjA1MTMxMDI4MDNaMDMxMTAvBgNV BAMTKDQzNjUzMjkxQkRBMEE1NTk4Qjk3RkUwN0MwNTUzNzFBQUM3NjM2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuol3794N6916Cf5SgDHU7UIT RJYWoucmezMm0Z+slaSW/zGU6zPMClW2EscW6K7BrKQ3lutaU1x4FxVNsQ9CSsv4 4FmFF3LGZdg/zm53bKFThO53vFQj6JqdyyuiBASAe5eg/lHWg0ll1+iXf6Wk2hjA gPbBysr4JAmyDuIs1gBxpQUKyN/sYroBeVLtig+SFGfS0VAbDGs9r4DiInPqD5xC w1EUkqsAE+2qLMLCEm98d2Th5eDf3s+DjbbrlJeLiMGEdHW5UPzlwBjGz5xvyQ4A GzJAbrsDZegfQgHIp/tWSnPor14I/rN0GP6QjpZLNvHfGVKCfScE9MRI9oyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2Uykb2gpVmLl/4HwFU3Gqx2Nh0wHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSd/DY2XHZiZuXcjmLFEfVta/DbkoFq4oi/ bAfv9SbvTki4DEqVKQEv5wa+9EzGtNxis+gjJnsaSYmzpsl7cTX6Fs8Yxyl3K5UM OGY78wK+yyOnadrBx5YfK/mSYcEjdDN1Q3jozu73OFjZyFP4aEyrM4m5BtQgMx8s br5gf5U6C0u/7nY+mm/0J2gxzoJg69fbQk9ld7G9Lsc+s0zMKO1c/YWnRA4nIFzA y7uDApJ7C+v8xQdfADMphZZOifqQZyS1/qWNvlkIj8nxhN4tAyJrwY6XRjeWNGT/ CyLP+V3HGyQPktn/wpOo/+bqEGwyI3lxBZkxRbNTlG5cTTv2WQA= -----END CERTIFICATE-----Generated at Wed May 13 03:56:08 2026 by rpki-client