$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: ujYaQVWf/7tiYnIbSBFG5uMTMkPX/z6T2DnOtITiqvE= Subject key identifier: D3:E9:BF:04:2D:FB:87:5D:9B:F9:AC:EE:BE:C2:85:13:C0:F5:CF:6E Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 6933DC9D68FD7831787C23E2DC537BBBCAC8D8A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:22:31 +0000 Manifest this update: Wed 23 Sep 2026 21:17:31 +0000 Manifest next update: Thu 24 Sep 2026 21:43:31 +0000 Files and hashes: 1: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: QH2VyFAJER5+6an83BZnG1n+osMe4A1DLCD+ViYOx+I=) 2: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) 3: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 4: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) 5: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:33:dc:9d:68:fd:78:31:78:7c:23:e2:dc:53:7b:bb:ca:c8:d8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: Sep 23 21:17:31 2026 GMT Not After : Sep 24 21:43:31 2026 GMT Subject: CN=D3E9BF042DFB875D9BF9ACEEBEC28513C0F5CF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:ec:c3:0f:f2:a0:57:34:cb:d5:6b:78:ab: 0c:c4:9b:14:67:a1:b0:f8:32:4b:92:69:0d:70:8a: 94:fe:88:61:94:75:c8:c0:a7:92:2b:05:6c:dd:54: 5a:95:27:62:64:2d:e7:1f:d2:5f:5e:b2:6c:09:e8: 44:28:ee:6e:93:c3:7e:da:5d:34:0e:b7:67:80:1e: 72:88:e7:00:c6:19:88:50:0d:34:76:a2:50:83:75: 2a:eb:aa:1d:6b:ec:a8:bb:d0:e6:22:29:42:b3:72: 1f:4a:cc:c5:49:01:0e:cd:33:8b:14:99:59:d3:71: e5:89:5f:99:2a:3f:35:29:26:00:ef:49:18:64:8a: c4:36:ce:cf:39:2f:43:d4:4f:d8:62:4a:46:0a:b4: 82:b0:b3:19:aa:7e:2f:3d:6e:8d:6a:97:7d:d6:09: c6:02:0e:ca:7e:36:3f:4e:1c:82:f7:5d:6f:45:82: 69:4c:49:11:eb:4a:d4:73:5c:20:85:36:e9:cd:59: ff:4a:3f:f6:86:cf:3d:60:ac:c1:67:71:1b:0f:4a: 5a:c1:d6:f7:91:10:fb:d8:cd:1e:b9:23:d7:84:48: 1d:07:f3:41:0e:d3:b2:75:68:39:ae:be:8c:57:5a: 60:8f:da:6d:b2:4d:44:61:db:8f:3b:91:56:ac:28: f3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:BF:04:2D:FB:87:5D:9B:F9:AC:EE:BE:C2:85:13:C0:F5:CF:6E X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ae:7d:b1:11:3f:4e:53:40:0c:c1:53:dd:a6:a5:43:33:f9: c5:4b:f0:13:5c:b4:47:65:a6:eb:7c:91:c6:63:71:f0:99:78: c0:1f:0b:a5:74:dc:85:fc:30:bb:67:7b:e1:4f:7a:fa:c1:3e: 1f:cc:d8:4a:71:c3:77:1b:e2:14:c2:76:37:3b:85:80:b0:26: aa:89:75:3c:cd:13:94:d3:d7:ea:e0:3a:1b:99:23:18:ae:3c: e6:09:ef:aa:a2:eb:19:b6:f8:72:92:94:59:34:c9:0c:7c:f2: 69:43:b5:38:eb:14:c8:c3:7c:25:81:02:c2:c7:5f:c4:69:2e: ed:29:fe:9e:68:7d:97:f3:14:90:aa:35:f2:ba:59:b5:16:ec: c8:c8:82:74:11:c9:86:66:a8:52:39:cb:90:ca:8b:da:df:ca: f6:30:a9:58:07:04:63:38:e7:e6:ac:a1:cc:c8:da:50:5f:5a: 2e:ab:de:7d:ab:28:61:11:de:11:ca:b9:61:5c:9c:9f:fd:9c: 33:5d:2c:c2:f7:46:56:1c:bf:24:05:6d:86:7e:a3:2a:e1:64: 05:39:90:4d:02:39:d7:bc:bc:7e:96:3c:d3:28:b2:d4:43:03: 45:cd:fc:c9:db:b4:69:84:69:31:6b:83:24:98:66:ab:14:f4: 07:1f:26:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTPcnWj9eDF4fCPi3FN7u8rI2KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA5MjMyMTE3MzFaFw0yNjA5MjQyMTQzMzFaMDMxMTAvBgNV BAMTKEQzRTlCRjA0MkRGQjg3NUQ5QkY5QUNFRUJFQzI4NTEzQzBGNUNGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEOzDD/KgVzTL1Wt4qwzEmxRn obD4MkuSaQ1wipT+iGGUdcjAp5IrBWzdVFqVJ2JkLecf0l9esmwJ6EQo7m6Tw37a XTQOt2eAHnKI5wDGGYhQDTR2olCDdSrrqh1r7Ki70OYiKUKzch9KzMVJAQ7NM4sU mVnTceWJX5kqPzUpJgDvSRhkisQ2zs85L0PUT9hiSkYKtIKwsxmqfi89bo1ql33W CcYCDsp+Nj9OHIL3XW9FgmlMSRHrStRzXCCFNunNWf9KP/aGzz1grMFncRsPSlrB 1veREPvYzR65I9eESB0H80EO07J1aDmuvoxXWmCP2m2yTURh2487kVasKPM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+m/BC37h12b+azuvsKFE8D1z24wHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECufbERP05TQAzBU92mpUMz+cVL8BNctEdl put8kcZjcfCZeMAfC6V03IX8MLtne+FPevrBPh/M2Epxw3cb4hTCdjc7hYCwJqqJ dTzNE5TT1+rgOhuZIxiuPOYJ76qi6xm2+HKSlFk0yQx88mlDtTjrFMjDfCWBAsLH X8RpLu0p/p5ofZfzFJCqNfK6WbUW7MjIgnQRyYZmqFI5y5DKi9rfyvYwqVgHBGM4 5+asoczI2lBfWi6r3n2rKGER3hHKuWFcnJ/9nDNdLML3RlYcvyQFbYZ+oyrhZAU5 kE0COde8vH6WPNMostRDA0XN/MnbtGmEaTFrgySYZqsU9AcfJgo= -----END CERTIFICATE-----Generated at Thu Sep 24 00:40:51 2026 by rpki-client