$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json) Hash identifier: wZveGzT3gjbA40wv7H7rEfejumMUJ1LqCdQZmlQOWrw= Subject key identifier: 3E:45:5A:95:7F:90:74:1E:63:DE:6A:EA:CE:A9:7E:AA:C7:75:23:D9 Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Certificate serial: 208F6359F5728BF7572A885FCAC97E8692125847 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:06:02 +0000 Manifest this update: Wed 23 Sep 2026 12:01:02 +0000 Manifest next update: Thu 24 Sep 2026 13:35:02 +0000 Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: OB6xjo4Eo/ZF6NZFznQJA+aXTQDEpdqLqBgZE1PKcl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8f:63:59:f5:72:8b:f7:57:2a:88:5f:ca:c9:7e:86:92:12:58:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Validity Not Before: Sep 23 12:01:02 2026 GMT Not After : Sep 24 13:35:02 2026 GMT Subject: CN=3E455A957F90741E63DE6AEACEA97EAAC77523D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:83:77:fe:2a:10:be:23:16:cf:a3:aa:91: ea:90:0a:5a:36:da:c7:b2:9e:23:b0:03:8a:e7:74: 1e:a2:f9:ed:16:d9:63:eb:84:1f:cc:15:3a:4a:e7: e5:24:f1:2a:17:c5:91:a5:b6:19:5d:64:27:3f:1e: b8:9b:83:5c:b1:42:f8:28:58:e4:5c:3a:1c:c0:d5: 61:c8:cd:67:99:2e:82:24:58:7c:cb:fe:2d:aa:ec: d1:36:bc:83:58:c4:ae:1c:90:5f:dd:39:3a:b6:62: 3d:cd:fd:97:f9:16:ef:25:b7:f0:41:87:6f:1d:3f: 9c:d5:c0:f1:77:ee:61:69:d0:0d:76:d8:14:e9:db: d9:7d:e1:5e:30:66:3c:2f:67:a8:13:04:4b:b2:96: 18:20:cb:c4:32:b1:7b:44:f7:60:0f:54:fb:94:80: 2b:32:9b:71:31:8f:46:ed:fe:cd:34:b2:d2:ae:7a: 4f:18:9b:16:72:2e:bb:70:49:77:d9:85:cb:34:8f: 09:26:ee:be:ea:78:61:d4:a9:b2:db:dd:c1:cc:f7: cf:b8:08:85:f4:42:53:7f:58:91:2d:54:86:bb:ca: 02:a9:44:d4:2f:f6:bb:50:d0:5d:08:78:02:fc:66: ea:89:a3:6e:51:b4:71:02:e6:c3:40:66:25:5b:d1: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:45:5A:95:7F:90:74:1E:63:DE:6A:EA:CE:A9:7E:AA:C7:75:23:D9 X509v3 Authority Key Identifier: keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b9:97:e4:92:a3:51:61:c9:1d:5b:d5:bd:39:22:d9:ab:60: e3:08:f6:f6:81:bc:54:eb:e8:9f:51:da:73:26:48:b3:0d:a8: 8d:a4:83:80:62:d0:8d:a4:33:5f:39:2d:d3:c9:c7:5f:26:27: 35:cc:42:68:c0:60:61:6a:f6:c0:7f:be:75:85:e4:01:65:af: ed:e0:e2:15:a2:0c:52:cb:ff:be:72:30:9f:ff:0c:e9:1c:88: e6:07:d0:cc:75:5f:90:d8:c2:47:9c:9d:c2:b4:f5:4f:5d:2a: 22:f0:25:cb:d8:c3:b7:13:80:48:83:3e:41:75:ec:06:cb:76: 36:53:20:7c:19:e7:b1:76:b6:86:db:65:27:70:e0:38:f1:4c: f7:2a:f3:63:54:a6:21:db:9e:db:71:a2:2b:ca:fb:63:cf:f0: a7:20:bc:2e:f0:83:c5:8f:bd:11:80:1a:d7:5f:6b:0b:aa:24: 9c:15:0a:8e:42:73:d0:0f:95:14:dc:c5:50:50:b0:15:46:d4: 70:76:cc:5f:e3:f1:cf:c5:d8:a2:fb:2e:52:cc:56:50:4b:15: 9d:a2:c5:a7:d8:0e:c5:57:85:a2:bf:98:b7:62:39:0e:1f:5c: 43:19:dd:cc:be:bf:d1:03:25:7a:3a:d0:3b:42:bb:02:ae:e0: 3d:53:82:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUII9jWfVyi/dXKohfysl+hpISWEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4 NTY5OTVCNjAeFw0yNjA5MjMxMjAxMDJaFw0yNjA5MjQxMzM1MDJaMDMxMTAvBgNV BAMTKDNFNDU1QTk1N0Y5MDc0MUU2M0RFNkFFQUNFQTk3RUFBQzc3NTIzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5IN3/ioQviMWz6OqkeqQClo2 2seyniOwA4rndB6i+e0W2WPrhB/MFTpK5+Uk8SoXxZGlthldZCc/Hribg1yxQvgo WORcOhzA1WHIzWeZLoIkWHzL/i2q7NE2vINYxK4ckF/dOTq2Yj3N/Zf5Fu8lt/BB h28dP5zVwPF37mFp0A122BTp29l94V4wZjwvZ6gTBEuylhggy8QysXtE92APVPuU gCsym3Exj0bt/s00stKuek8YmxZyLrtwSXfZhcs0jwkm7r7qeGHUqbLb3cHM98+4 CIX0QlN/WJEtVIa7ygKpRNQv9rtQ0F0IeAL8ZuqJo25RtHEC5sNAZiVb0dInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPkValX+QdB5j3mrqzql+qsd1I9kwHwYDVR0j BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0 NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5 NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2 MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu5l+SSo1FhyR1b1b05ItmrYOMI9vaBvFTr 6J9R2nMmSLMNqI2kg4Bi0I2kM185LdPJx18mJzXMQmjAYGFq9sB/vnWF5AFlr+3g 4hWiDFLL/75yMJ//DOkciOYH0Mx1X5DYwkecncK09U9dKiLwJcvYw7cTgEiDPkF1 7AbLdjZTIHwZ57F2tobbZSdw4DjxTPcq82NUpiHbnttxoivK+2PP8KcgvC7wg8WP vRGAGtdfawuqJJwVCo5Cc9APlRTcxVBQsBVG1HB2zF/j8c/F2KL7LlLMVlBLFZ2i xafYDsVXhaK/mLdiOQ4fXEMZ3cy+v9EDJXo60DtCuwKu4D1Tgl0= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:23 2026 by rpki-client