$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json) Hash identifier: iIym1nVEuL4S7eWFLz0GRR2LsExfxkr5RoNJt97rKH0= Subject key identifier: 0B:13:D8:D3:F2:3A:79:6E:86:60:35:3C:DC:CC:1E:0A:60:AA:A1:D8 Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Certificate serial: 72FE4EBD03177AD9C1E264E8030A9FE49ADFD12C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:30:35 +0000 Manifest this update: Tue 12 May 2026 19:25:35 +0000 Manifest next update: Wed 13 May 2026 19:44:35 +0000 Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: FjmtR/aDuFbudHDz5DGbK286Ml3Ftdwc7uxEQ0+IFNE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fe:4e:bd:03:17:7a:d9:c1:e2:64:e8:03:0a:9f:e4:9a:df:d1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Validity Not Before: May 12 19:25:35 2026 GMT Not After : May 13 19:44:35 2026 GMT Subject: CN=0B13D8D3F23A796E8660353CDCCC1E0A60AAA1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:85:7e:ce:82:1c:40:29:83:89:2c:28:81: 1d:bd:f5:b0:d1:28:64:65:63:b8:7d:7e:9b:f6:48: 07:49:86:16:79:e8:ad:f5:72:a0:6a:fe:b5:45:ce: 9e:5f:be:b2:16:3f:13:f0:c8:95:0f:6b:39:da:da: 46:87:3a:46:c8:f1:fe:dc:fa:83:11:74:14:0d:06: c1:79:29:a9:7a:cd:2c:16:c4:0b:0e:54:62:2c:27: f3:9d:9e:db:7b:39:dc:f5:33:8d:2a:f6:b0:c4:cb: bb:75:6f:40:d7:a0:9e:a1:45:84:cb:63:ac:e3:f0: fb:67:78:f8:89:02:36:2c:2a:ae:16:f0:a3:56:96: 10:37:f1:a4:e6:c1:1b:15:54:98:99:4a:eb:17:e7: 47:47:b9:88:7c:53:d1:ab:0a:62:f7:21:e8:f5:44: 1d:7a:40:ef:e8:d5:8b:3f:7b:8f:ea:61:2d:12:a4: 72:bb:1b:ab:d3:a8:c5:c5:74:81:32:76:84:af:f2: 98:c1:e6:18:c9:af:30:fe:e3:29:1c:b1:49:c5:c6: 84:af:c6:a1:12:b0:7b:bb:4b:0f:a1:51:4f:0f:80: b6:12:f5:71:4b:fc:53:7b:62:31:55:e2:c2:03:89: 4a:a0:43:bb:b4:aa:11:6d:02:67:57:66:57:08:bc: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:D8:D3:F2:3A:79:6E:86:60:35:3C:DC:CC:1E:0A:60:AA:A1:D8 X509v3 Authority Key Identifier: keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:88:0e:61:de:ea:90:73:94:39:c4:81:55:9a:bf:3a:f4:56: 61:d9:0f:26:01:a8:04:85:73:fd:46:a0:21:d1:92:73:3f:67: d5:0d:b3:0e:dc:d1:e0:2e:b0:81:83:5c:58:71:3a:cb:f1:c3: 21:52:7c:d8:14:72:99:18:e9:c9:f9:7b:56:73:7b:75:16:e5: 4b:92:f3:de:33:25:c2:52:25:6c:aa:45:49:a4:5c:05:7f:e2: 01:4f:16:31:76:6c:83:ec:01:8b:c3:1b:f6:97:74:5c:e7:cc: 7a:e2:96:d2:54:02:00:dd:37:75:f0:17:9f:dd:49:16:1d:07: 16:b1:c0:2c:d6:c7:69:14:3b:ea:e2:f9:4d:c7:07:37:a4:ac: 7d:c2:0a:5f:b6:b6:65:98:5d:2b:62:be:2f:47:6f:12:5b:3f: 86:33:f3:0b:0d:3f:2e:54:ec:f0:d7:2f:49:a5:0e:92:9e:c2: 56:9c:b2:97:ad:e8:03:85:fe:73:36:3d:60:c4:41:e4:79:6e: aa:17:0a:e7:73:53:8e:ca:c2:7f:8f:34:9a:bc:7e:98:d4:a6: 2d:19:03:57:cb:d5:62:c9:ae:83:5c:88:3f:89:49:ff:dd:f1: f9:2f:79:b1:40:88:2a:22:7a:17:e4:23:9e:7a:3d:84:89:ad: 0d:a0:34:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcv5OvQMXetnB4mToAwqf5Jrf0SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4 NTY5OTVCNjAeFw0yNjA1MTIxOTI1MzVaFw0yNjA1MTMxOTQ0MzVaMDMxMTAvBgNV BAMTKDBCMTNEOEQzRjIzQTc5NkU4NjYwMzUzQ0RDQ0MxRTBBNjBBQUExRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mYV+zoIcQCmDiSwogR299bDR KGRlY7h9fpv2SAdJhhZ56K31cqBq/rVFzp5fvrIWPxPwyJUPazna2kaHOkbI8f7c +oMRdBQNBsF5Kal6zSwWxAsOVGIsJ/Odntt7Odz1M40q9rDEy7t1b0DXoJ6hRYTL Y6zj8PtnePiJAjYsKq4W8KNWlhA38aTmwRsVVJiZSusX50dHuYh8U9GrCmL3Iej1 RB16QO/o1Ys/e4/qYS0SpHK7G6vTqMXFdIEydoSv8pjB5hjJrzD+4ykcsUnFxoSv xqESsHu7Sw+hUU8PgLYS9XFL/FN7YjFV4sIDiUqgQ7u0qhFtAmdXZlcIvNqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxPY0/I6eW6GYDU83MweCmCqodgwHwYDVR0j BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0 NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5 NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2 MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCIDmHe6pBzlDnEgVWavzr0VmHZDyYBqASF c/1GoCHRknM/Z9UNsw7c0eAusIGDXFhxOsvxwyFSfNgUcpkY6cn5e1Zze3UW5UuS 894zJcJSJWyqRUmkXAV/4gFPFjF2bIPsAYvDG/aXdFznzHriltJUAgDdN3XwF5/d SRYdBxaxwCzWx2kUO+ri+U3HBzekrH3CCl+2tmWYXStivi9HbxJbP4Yz8wsNPy5U 7PDXL0mlDpKewlacspet6AOF/nM2PWDEQeR5bqoXCudzU47Kwn+PNJq8fpjUpi0Z A1fL1WLJroNciD+JSf/d8fkvebFAiCoiehfkI556PYSJrQ2gNPs= -----END CERTIFICATE-----Generated at Tue May 12 22:56:14 2026 by rpki-client