$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft File: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft (raw, json) Hash identifier: OWB+1G6mAgoUJRiL/RcL8+m6lFyjHt3Ts/7Gk3WbAlk= Subject key identifier: 4B:46:D5:F3:B0:D3:D2:C7:0E:0A:9F:15:2E:71:15:EB:06:CA:F1:D5 Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Certificate serial: 565AC348A70FD3A6F3CBA636AD3722189D8ED942 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 04:40:05 +0000 Manifest this update: Sat 14 Nov 2026 04:35:05 +0000 Manifest next update: Sun 15 Nov 2026 07:50:05 +0000 Files and hashes: 1: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl (hash: nVtFE7G7USeF6STDRA4h9kDWVZDu8L/7Ox7KwQ9UqSM=) 2: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=) 3: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=) 4: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5a:c3:48:a7:0f:d3:a6:f3:cb:a6:36:ad:37:22:18:9d:8e:d9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Validity Not Before: Nov 14 04:35:05 2026 GMT Not After : Nov 15 07:50:05 2026 GMT Subject: CN=4B46D5F3B0D3D2C70E0A9F152E7115EB06CAF1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:e1:55:53:1c:1e:1d:42:4d:ad:c2:99:57: 3b:f8:3c:65:00:df:37:d0:fb:65:a7:92:8e:61:fc: f3:0d:db:78:1a:db:45:b7:41:98:b2:b8:fa:8b:bf: f0:1d:8a:cb:0c:2c:1d:a4:d8:18:67:a7:32:a9:21: 7e:7b:a7:46:9d:d6:99:c3:72:6c:2d:6f:36:b9:20: 0c:3f:cb:67:4a:79:a4:7f:a3:1d:50:1d:e1:36:39: d1:91:dc:f6:a8:fb:0b:f7:65:fe:6a:02:be:26:d5: 9c:c4:02:ce:61:bc:87:dc:11:88:f8:0b:89:82:a4: c7:f2:dd:54:c3:2c:0d:c5:eb:d6:c9:2e:13:7d:83: 43:30:18:56:eb:0c:c5:c5:a3:af:44:f7:c9:8b:2b: 56:da:b5:e5:8d:51:c2:f5:83:2a:d5:00:0f:54:09: 26:e2:0d:8d:ca:9d:d5:27:dd:dc:09:89:e9:c5:51: 40:56:59:60:2b:a7:1a:98:3b:54:7c:62:85:b8:6f: b0:04:b1:c2:54:87:b0:78:e8:02:7f:9d:b5:d6:98: cb:c8:b8:11:f4:da:d7:3f:8f:0a:53:e9:70:b6:5d: de:c2:9f:38:d7:c3:ff:65:8d:d9:5d:ae:9e:33:87: 46:0f:52:09:07:1e:6e:b5:ab:49:1c:41:51:14:5b: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:46:D5:F3:B0:D3:D2:C7:0E:0A:9F:15:2E:71:15:EB:06:CA:F1:D5 X509v3 Authority Key Identifier: keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:78:47:35:d8:7f:e6:67:8b:e4:b1:5c:e4:8e:fd:5e:35:e7: 0c:99:6b:b0:b8:d9:76:1a:2c:ae:5a:7b:90:c7:33:e7:ff:6e: a6:d4:3f:48:70:4a:91:fa:4e:16:a5:98:71:d6:58:c1:90:12: 7f:47:52:1a:2b:a8:3b:0d:a1:e7:f6:5f:2d:00:26:bd:ff:25: 32:66:50:ee:ce:a0:cd:8d:88:de:1e:d2:4e:5f:c7:7f:42:e0: fb:77:82:dc:dc:d9:1d:3c:87:68:41:3b:7e:3d:21:c6:16:04: 42:50:82:5b:d2:82:5e:f9:25:24:63:c3:ab:ab:25:ae:dd:79: dd:50:6e:32:66:20:1c:9c:b1:f8:e9:de:1f:9d:d5:40:b8:7e: 29:f0:c8:93:83:12:6c:41:b6:56:a4:ad:66:bd:73:f7:c4:27: 4e:8a:2d:4f:6a:45:55:66:5a:ec:44:02:dd:a0:89:a6:d5:7b: 9b:f2:6c:63:7a:6c:2b:87:f7:b5:0b:4b:70:0a:7b:c1:a3:6a: 8b:b3:8a:7e:7d:4f:87:cc:ad:6a:cc:00:cd:09:3a:5c:bc:08: 30:ef:bc:f7:ee:f1:2b:71:b7:22:21:f8:3d:7f:b3:2e:8f:b3: 94:e6:51:6e:56:ce:4c:50:0b:fa:4b:9a:ed:1e:17:4b:06:e1: 6a:0a:12:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlrDSKcP06bzy6Y2rTciGJ2O2UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB QTM3OUY3NTAeFw0yNjExMTQwNDM1MDVaFw0yNjExMTUwNzUwMDVaMDMxMTAvBgNV BAMTKDRCNDZENUYzQjBEM0QyQzcwRTBBOUYxNTJFNzExNUVCMDZDQUYxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XOFVUxweHUJNrcKZVzv4PGUA 3zfQ+2Wnko5h/PMN23ga20W3QZiyuPqLv/AdissMLB2k2BhnpzKpIX57p0ad1pnD cmwtbza5IAw/y2dKeaR/ox1QHeE2OdGR3Pao+wv3Zf5qAr4m1ZzEAs5hvIfcEYj4 C4mCpMfy3VTDLA3F69bJLhN9g0MwGFbrDMXFo69E98mLK1bateWNUcL1gyrVAA9U CSbiDY3KndUn3dwJienFUUBWWWArpxqYO1R8YoW4b7AEscJUh7B46AJ/nbXWmMvI uBH02tc/jwpT6XC2Xd7CnzjXw/9ljdldrp4zh0YPUgkHHm61q0kcQVEUW29XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0bV87DT0scOCp8VLnEV6wbK8dUwHwYDVR0j BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2 M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5 Rjc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4 MkNBQTM3OUY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt4RzXYf+Zni+SxXOSO/V415wyZa7C42XYa LK5ae5DHM+f/bqbUP0hwSpH6ThalmHHWWMGQEn9HUhorqDsNoef2Xy0AJr3/JTJm UO7OoM2NiN4e0k5fx39C4Pt3gtzc2R08h2hBO349IcYWBEJQglvSgl75JSRjw6ur Ja7ded1QbjJmIBycsfjp3h+d1UC4finwyJODEmxBtlakrWa9c/fEJ06KLU9qRVVm WuxEAt2giabVe5vybGN6bCuH97ULS3AKe8Gjaouzin59T4fMrWrMAM0JOly8CDDv vPfu8StxtyIh+D1/sy6Ps5TmUW5WzkxQC/pLmu0eF0sG4WoKEiw= -----END CERTIFICATE-----Generated at Sun Nov 15 00:24:54 2026 by rpki-client