$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json) Hash identifier: SCHevy0F35AUJA0pJ6bITj5hO0FA9VKAMByClLeFU5E= Subject key identifier: E2:C9:8B:81:06:61:47:88:9B:FC:A7:3D:EA:3B:33:0A:4F:9F:D8:5E Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Certificate serial: 09E7C39769A72893B18EF074423AAD3D30839102 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:36:41 +0000 Manifest this update: Thu 23 Jul 2026 13:31:41 +0000 Manifest next update: Fri 24 Jul 2026 16:57:41 +0000 Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: /n5wMlUjC+rLwTYBYL7MD/v6FQqeUTOveOY4ozIZ0kE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e7:c3:97:69:a7:28:93:b1:8e:f0:74:42:3a:ad:3d:30:83:91:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Validity Not Before: Jul 23 13:31:41 2026 GMT Not After : Jul 24 16:57:41 2026 GMT Subject: CN=E2C98B81066147889BFCA73DEA3B330A4F9FD85E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:d3:3e:70:cd:03:fa:6a:ad:60:8c:83:c4: 88:7a:c4:7d:71:97:7a:32:1e:23:d3:2f:0e:ef:c0: a5:5e:45:f2:42:c9:a8:c5:1d:ae:e0:0e:7e:79:9c: f4:67:b1:bc:29:6d:b3:a6:d3:92:5e:f1:77:7b:95: d5:c8:f5:85:fc:d5:3b:28:99:04:66:84:80:2d:ed: f7:2d:ab:af:9b:65:06:92:eb:4d:ad:7a:2e:a3:3d: 07:0a:32:cc:6e:36:ac:b1:49:4d:54:df:9b:9f:1b: aa:06:66:3c:00:21:d9:87:22:f8:37:4f:26:ed:e8: 97:8f:32:1f:e2:c3:55:87:8e:aa:fc:d8:3b:23:38: 24:bd:f6:df:fb:9a:73:b8:bc:63:15:39:dc:c0:2e: 0c:81:d8:7d:6d:f8:85:e8:b8:07:0b:ff:95:c1:10: a1:b7:1a:b2:86:9a:dd:7b:d5:ea:a9:58:38:7c:c7: 51:8c:04:31:db:b6:c4:3b:04:03:8f:39:fd:0f:de: fd:a2:30:da:55:3d:07:cf:b4:25:e4:75:94:43:0a: d6:a2:89:cb:34:84:57:38:79:c6:5b:96:b9:dc:69: 5a:d5:f0:20:90:cc:07:b4:63:a3:a9:c9:2c:de:07: f7:cb:fb:d9:4a:16:b0:00:dc:5b:21:9c:48:d1:02: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:8B:81:06:61:47:88:9B:FC:A7:3D:EA:3B:33:0A:4F:9F:D8:5E X509v3 Authority Key Identifier: keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:2e:dc:3a:5c:e3:35:80:47:b0:4e:3f:49:c2:3d:0e:77: b6:0d:83:e1:b3:4c:b6:ca:ba:d7:6b:3e:f1:f2:2c:eb:bc:bd: b8:a3:74:be:1e:fb:4f:ee:67:b7:c3:36:e6:c5:79:51:2c:63: d0:8f:70:70:19:5c:d9:e5:e1:7b:43:e4:64:26:b4:17:0a:cb: f2:76:fb:ff:4d:03:b7:43:dd:49:48:b8:a4:e1:6d:62:ac:31: 3e:87:e7:51:9d:b5:cb:7e:4e:a3:6d:a2:ae:2a:83:07:41:df: 20:6b:f5:2d:09:08:b3:23:77:d6:d7:44:44:5a:7d:ee:71:37: f3:94:b8:27:04:80:a6:f7:c3:68:c8:20:02:5c:0a:d5:d7:83: 48:42:b1:de:82:1f:9c:12:14:40:53:17:bb:54:9d:72:37:cf: 47:17:ac:3d:11:a4:4a:f4:bd:a6:0d:8a:9e:05:fa:23:d8:65: a3:84:69:fa:c7:32:60:fd:09:64:e6:83:28:12:72:29:fe:3b: 8c:21:f9:54:fc:c3:3b:e2:2b:91:c1:6e:c1:06:a6:12:bc:08: 5a:71:da:ca:72:96:d0:f7:9d:a4:fd:a2:ab:21:d2:38:59:59: f5:6b:6b:d2:77:2a:85:60:d2:45:c6:36:3a:28:8e:6c:27:73: a7:61:58:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCefDl2mnKJOxjvB0QjqtPTCDkQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4 NTY5OTVCNjAeFw0yNjA3MjMxMzMxNDFaFw0yNjA3MjQxNjU3NDFaMDMxMTAvBgNV BAMTKEUyQzk4QjgxMDY2MTQ3ODg5QkZDQTczREVBM0IzMzBBNEY5RkQ4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7tM+cM0D+mqtYIyDxIh6xH1x l3oyHiPTLw7vwKVeRfJCyajFHa7gDn55nPRnsbwpbbOm05Je8Xd7ldXI9YX81Tso mQRmhIAt7fctq6+bZQaS602tei6jPQcKMsxuNqyxSU1U35ufG6oGZjwAIdmHIvg3 Tybt6JePMh/iw1WHjqr82DsjOCS99t/7mnO4vGMVOdzALgyB2H1t+IXouAcL/5XB EKG3GrKGmt171eqpWDh8x1GMBDHbtsQ7BAOPOf0P3v2iMNpVPQfPtCXkdZRDCtai ics0hFc4ecZblrncaVrV8CCQzAe0Y6OpySzeB/fL+9lKFrAA3FshnEjRAuglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4smLgQZhR4ib/Kc96jszCk+f2F4wHwYDVR0j BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0 NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5 NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2 MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaGLtw6XOM1gEewTj9Jwj0Od7YNg+GzTLbK utdrPvHyLOu8vbijdL4e+0/uZ7fDNubFeVEsY9CPcHAZXNnl4XtD5GQmtBcKy/J2 +/9NA7dD3UlIuKThbWKsMT6H51Gdtct+TqNtoq4qgwdB3yBr9S0JCLMjd9bXRERa fe5xN/OUuCcEgKb3w2jIIAJcCtXXg0hCsd6CH5wSFEBTF7tUnXI3z0cXrD0RpEr0 vaYNip4F+iPYZaOEafrHMmD9CWTmgygScin+O4wh+VT8wzviK5HBbsEGphK8CFpx 2spyltD3naT9oqsh0jhZWfVra9J3KoVg0kXGNjoojmwnc6dhWAE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:49 2026 by rpki-client