$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft File: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft (raw, json) Hash identifier: dcVb6KcbqXfx0K06VAsBj+Gj613NfKVfR4kHwuXO+aM= Subject key identifier: D0:41:F8:DB:E6:D9:2C:D1:82:7D:50:93:37:B1:3F:EB:C7:78:BD:21 Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Certificate serial: 335B6EB36594D28FE1CBE0B8AE77B6AE1BC12F76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:39:13 +0000 Manifest this update: Wed 23 Sep 2026 14:34:13 +0000 Manifest next update: Thu 24 Sep 2026 17:07:13 +0000 Files and hashes: 1: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=) 2: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl (hash: A+f7iK0RZY/xKwLCmArd5cl+/+JL8+96udmHVKvV5Hk=) 3: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=) 4: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5b:6e:b3:65:94:d2:8f:e1:cb:e0:b8:ae:77:b6:ae:1b:c1:2f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Validity Not Before: Sep 23 14:34:13 2026 GMT Not After : Sep 24 17:07:13 2026 GMT Subject: CN=D041F8DBE6D92CD1827D509337B13FEBC778BD21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:d5:87:52:a0:47:4c:cb:24:73:b4:07:57: e7:a9:aa:13:bd:bd:bd:1c:6e:3e:5c:a0:8d:fd:55: 47:7b:6f:1d:cc:f1:84:28:42:29:8f:a1:ae:9a:c2: 74:24:ee:f7:84:06:30:3a:7b:32:a6:9b:58:96:17: 64:92:6e:6d:51:c6:f8:46:b4:ff:d4:da:26:58:c2: c6:c6:94:a4:92:f7:f3:08:43:87:a5:f2:be:21:b2: d0:25:04:9b:b0:69:1f:00:e2:7e:12:d5:f8:8f:10: da:16:b2:4c:42:d8:07:8d:02:73:fa:f8:a0:2c:05: 92:1b:6c:e5:86:08:1c:d0:9d:4c:9d:16:00:9b:3f: 6c:89:cc:52:cd:e4:28:2a:20:ca:4c:d6:53:39:5d: f9:71:51:65:87:79:54:66:95:73:a4:93:3f:fd:e0: 6c:9b:e7:cb:0c:e4:27:54:d9:1d:00:10:d4:9e:ba: e6:86:08:f3:0e:0d:42:e4:68:aa:e7:9b:33:db:a9: 53:e3:fc:1b:a1:dd:5f:2d:2a:8f:ef:02:c2:08:28: e2:e6:f5:d9:52:a6:2e:4c:82:fd:6a:a1:89:9c:72: f8:aa:32:01:14:74:bd:e0:2d:e4:0f:03:90:34:f9: 4d:49:c1:f8:69:9c:58:ec:23:08:fa:8e:38:34:79: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:41:F8:DB:E6:D9:2C:D1:82:7D:50:93:37:B1:3F:EB:C7:78:BD:21 X509v3 Authority Key Identifier: keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:55:31:c3:49:d7:f3:e9:86:5f:55:96:77:a6:e0:fd:23:b7: e6:3c:21:b6:7e:b3:3a:79:bd:1f:07:ce:94:3e:ab:de:dc:bf: 86:48:f0:4c:08:4e:ff:a5:9e:0c:7f:3f:7f:0b:0e:8d:5e:46: 99:3a:59:19:1a:9d:fc:fa:d9:f7:16:2b:b0:47:02:aa:a2:38: e2:88:33:4d:e4:fc:4c:55:2d:f2:9d:d5:b5:f7:30:c1:e2:51: 71:c3:4e:79:22:88:8b:ce:17:8c:04:2c:64:5f:b7:99:53:e8: fd:d9:01:d6:7e:d2:be:7b:69:39:2d:6c:b2:bd:40:3e:4a:52: df:e2:93:cd:8d:77:e7:c6:65:c6:6d:d9:8d:f6:b3:cc:43:07: 71:4e:0a:51:28:30:86:da:60:f5:a7:93:65:54:dc:6f:3a:e5: 48:23:fa:f1:db:7c:d0:30:cc:4c:fc:b9:46:16:ab:5b:06:2c: 34:1a:24:04:5e:42:45:91:99:4c:46:c3:e1:3a:65:c8:55:92: 7f:ce:ae:14:83:0a:00:33:ee:9e:dd:d0:6a:5e:2b:11:ea:b6: 7e:0c:08:63:9e:7e:49:8e:9d:92:f6:67:29:76:84:86:57:e4: 1e:be:4f:b4:67:9b:93:1a:b3:40:49:1a:4d:e7:cd:5e:b7:50: 81:1a:1f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1tus2WU0o/hy+C4rne2rhvBL3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB QTM3OUY3NTAeFw0yNjA5MjMxNDM0MTNaFw0yNjA5MjQxNzA3MTNaMDMxMTAvBgNV BAMTKEQwNDFGOERCRTZEOTJDRDE4MjdENTA5MzM3QjEzRkVCQzc3OEJEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCanNWHUqBHTMskc7QHV+epqhO9 vb0cbj5coI39VUd7bx3M8YQoQimPoa6awnQk7veEBjA6ezKmm1iWF2SSbm1RxvhG tP/U2iZYwsbGlKSS9/MIQ4el8r4hstAlBJuwaR8A4n4S1fiPENoWskxC2AeNAnP6 +KAsBZIbbOWGCBzQnUydFgCbP2yJzFLN5CgqIMpM1lM5XflxUWWHeVRmlXOkkz/9 4Gyb58sM5CdU2R0AENSeuuaGCPMODULkaKrnmzPbqVPj/Buh3V8tKo/vAsIIKOLm 9dlSpi5Mgv1qoYmccviqMgEUdL3gLeQPA5A0+U1JwfhpnFjsIwj6jjg0eUWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0EH42+bZLNGCfVCTN7E/68d4vSEwHwYDVR0j BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2 M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5 Rjc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4 MkNBQTM3OUY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFVMcNJ1/Pphl9Vlnem4P0jt+Y8IbZ+szp5 vR8HzpQ+q97cv4ZI8EwITv+lngx/P38LDo1eRpk6WRkanfz62fcWK7BHAqqiOOKI M03k/ExVLfKd1bX3MMHiUXHDTnkiiIvOF4wELGRft5lT6P3ZAdZ+0r57aTktbLK9 QD5KUt/ik82Nd+fGZcZt2Y32s8xDB3FOClEoMIbaYPWnk2VU3G865Ugj+vHbfNAw zEz8uUYWq1sGLDQaJAReQkWRmUxGw+E6ZchVkn/OrhSDCgAz7p7d0GpeKxHqtn4M CGOefkmOnZL2Zyl2hIZX5B6+T7Rnm5Mas0BJGk3nzV63UIEaHyU= -----END CERTIFICATE-----Generated at Thu Sep 24 05:04:49 2026 by rpki-client