$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft File: E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json) Hash identifier: B12s9XXV0eq4fvSSPxPTk70/hlCHoosNSyG5ARIgh3M= Subject key identifier: E6:2E:56:D2:C0:26:E8:18:04:4F:17:41:CB:14:CA:DA:4E:C6:9E:76 Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 Certificate issuer: /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Certificate serial: 2ACFBE2C158173E3354D70A2EFBA13B99708210C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:24:50 +0000 Manifest this update: Thu 24 Sep 2026 15:19:50 +0000 Manifest next update: Fri 25 Sep 2026 15:35:50 +0000 Files and hashes: 1: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: MN/sjXm0mZIwpBtumrBQxM28EcDa+/31x8GgyMr+6IY=) 2: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cf:be:2c:15:81:73:e3:35:4d:70:a2:ef:ba:13:b9:97:08:21:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Validity Not Before: Sep 24 15:19:50 2026 GMT Not After : Sep 25 15:35:50 2026 GMT Subject: CN=E62E56D2C026E818044F1741CB14CADA4EC69E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:e2:00:a8:78:51:57:a0:89:eb:7e:1c:b4: a0:9d:98:d1:d6:4c:f6:84:48:9d:23:5e:90:96:2a: e0:e5:7e:91:30:76:2c:63:be:c7:16:32:53:ad:e9: a1:de:33:b2:c1:01:0f:68:c3:ba:cf:44:ac:42:d4: cf:78:f7:c0:fd:15:a4:80:6e:5f:0b:f0:14:f0:76: b1:54:45:06:94:23:ae:bd:30:31:d4:e0:85:db:8b: 83:34:3a:65:9c:ce:d0:e1:49:ea:5a:9b:b3:75:e7: a9:81:0c:68:42:85:5a:fb:0c:ac:f8:d5:7a:bc:98: f2:15:08:98:f7:e1:fe:1a:c5:f4:d6:d7:a7:d1:dd: 11:da:02:70:69:7b:97:07:8a:51:d9:57:f9:58:80: 4a:f3:82:3d:5f:38:d7:62:e9:ca:67:f9:5a:51:9f: f2:70:6d:40:37:52:6d:a7:8f:15:19:bf:a9:bb:26: 1c:37:42:ad:43:2c:ec:fb:a0:45:9e:e2:cb:58:db: dc:e7:60:2e:90:68:05:57:39:4a:4d:5e:9e:20:24: 52:82:dd:f0:64:cc:3a:d0:10:c8:c3:3e:82:a5:a1: 8f:87:0b:ea:9d:86:20:78:71:7b:c9:69:11:95:40: 0b:2a:96:02:dc:66:f0:62:f5:e3:85:b2:44:a2:d7: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2E:56:D2:C0:26:E8:18:04:4F:17:41:CB:14:CA:DA:4E:C6:9E:76 X509v3 Authority Key Identifier: keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:65:8e:3f:2c:02:ae:a0:0f:c3:0a:6b:db:62:65:41:3b: 26:19:f2:f5:db:28:c6:7d:4f:ac:7f:78:98:f8:99:64:b1:f2: c7:92:b1:ab:30:7a:63:e2:f9:a0:92:be:44:2d:99:65:08:f7: 11:f9:8f:33:4f:31:4b:e0:99:58:73:1f:6d:fd:ea:0b:39:9f: 11:9e:9b:e4:f7:66:89:b6:11:4c:06:fe:6d:cb:22:1f:e3:0c: 0b:31:2b:3e:34:c9:23:ae:e3:26:c1:42:ec:89:76:ae:5f:6a: 79:fe:1f:8f:4a:88:af:59:a5:61:5b:47:d8:98:7d:84:76:98: fd:b6:bb:1b:94:51:4f:ae:47:fd:36:81:65:26:95:fb:4c:d5: 0f:75:ed:81:13:70:00:9d:04:f0:9e:4b:80:33:d7:dd:48:46: b1:bd:b5:ba:e5:78:fa:28:aa:b5:bc:1b:18:85:2b:c9:5d:72: ec:41:d2:95:a2:6b:b4:f5:03:f4:f9:55:fd:f3:c4:b4:90:2a: 36:fd:52:c7:da:68:55:10:c8:c4:6e:01:52:00:87:3f:65:61: 83:ce:39:de:9c:99:df:d5:83:d7:5e:5d:60:90:ba:04:52:0c: dc:28:bf:8a:5a:b4:a1:16:f2:ef:28:4a:70:77:20:33:30:dc: c5:d1:11:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKs++LBWBc+M1TXCi77oTuZcIIQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNF QUFFQTYyNTAeFw0yNjA5MjQxNTE5NTBaFw0yNjA5MjUxNTM1NTBaMDMxMTAvBgNV BAMTKEU2MkU1NkQyQzAyNkU4MTgwNDRGMTc0MUNCMTRDQURBNEVDNjlFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNweIAqHhRV6CJ634ctKCdmNHW TPaESJ0jXpCWKuDlfpEwdixjvscWMlOt6aHeM7LBAQ9ow7rPRKxC1M9498D9FaSA bl8L8BTwdrFURQaUI669MDHU4IXbi4M0OmWcztDhSepam7N156mBDGhChVr7DKz4 1Xq8mPIVCJj34f4axfTW16fR3RHaAnBpe5cHilHZV/lYgErzgj1fONdi6cpn+VpR n/JwbUA3Um2njxUZv6m7Jhw3Qq1DLOz7oEWe4stY29znYC6QaAVXOUpNXp4gJFKC 3fBkzDrQEMjDPoKloY+HC+qdhiB4cXvJaRGVQAsqlgLcZvBi9eOFskSi19PjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5i5W0sAm6BgETxdByxTK2k7GnnYwHwYDVR0j BBgwFoAU5YzqF0HMEjQhu3swEvhV8+qupiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0 MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNFQUFFQTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNThDRUExNzQxQ0MxMjM0MjFCQjdCMzAxMkY4NTVGM0VBQUVB NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1 RjNFQUFFQTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv/ZY4/LAKuoA/DCmvbYmVBOyYZ8vXbKMZ9 T6x/eJj4mWSx8seSsaswemPi+aCSvkQtmWUI9xH5jzNPMUvgmVhzH2396gs5nxGe m+T3Zom2EUwG/m3LIh/jDAsxKz40ySOu4ybBQuyJdq5fann+H49KiK9ZpWFbR9iY fYR2mP22uxuUUU+uR/02gWUmlftM1Q917YETcACdBPCeS4Az191IRrG9tbrlePoo qrW8GxiFK8ldcuxB0pWia7T1A/T5Vf3zxLSQKjb9UsfaaFUQyMRuAVIAhz9lYYPO Od6cmd/Vg9deXWCQugRSDNwov4patKEW8u8oSnB3IDMw3MXREc4= -----END CERTIFICATE-----Generated at Thu Sep 24 22:15:09 2026 by rpki-client