$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft File: E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json) Hash identifier: ZSOV3IrcysiyveIT0xXBg7HREMNYD8hpfdllFsbw/dU= Subject key identifier: 8B:69:EA:7D:2E:C3:50:EB:F6:D8:61:B0:D8:A2:E1:45:D9:DA:8C:B4 Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 Certificate issuer: /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Certificate serial: 557820B5E1AE8A4566A96F36C9E3138DD80AED73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 19:23:56 +0000 Manifest this update: Sat 14 Nov 2026 19:18:56 +0000 Manifest next update: Sun 15 Nov 2026 21:53:56 +0000 Files and hashes: 1: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=) 2: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: dS2MQIcRM7i1gWhieGRJeRMLaAlyXsUzoKKi3cdP4gY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:78:20:b5:e1:ae:8a:45:66:a9:6f:36:c9:e3:13:8d:d8:0a:ed:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Validity Not Before: Nov 14 19:18:56 2026 GMT Not After : Nov 15 21:53:56 2026 GMT Subject: CN=8B69EA7D2EC350EBF6D861B0D8A2E145D9DA8CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:bc:c3:4f:cb:79:14:76:b9:10:08:04:97: 23:93:41:9f:66:9c:04:3c:aa:2d:00:e7:61:a6:04: 85:0f:cb:2d:c3:b7:c8:3b:89:b4:a9:b4:92:c9:5d: 47:d2:34:e4:ff:c9:42:dc:74:86:82:78:99:51:1a: f5:ad:66:6d:08:0a:26:6f:9c:08:ad:91:b1:49:6e: 80:4f:03:7f:1e:72:0f:c2:5d:bd:34:fe:97:20:0c: 2e:26:f9:15:5a:6d:10:e2:b2:bd:43:1b:46:2e:dc: 54:67:db:d8:4a:81:eb:df:d2:9d:4d:c6:aa:e7:14: 0e:38:39:00:0d:79:39:ca:68:62:cc:12:3d:e8:13: 5d:40:43:a7:c4:34:85:6c:d0:c9:d8:8d:3d:94:e3: 46:de:5b:a9:52:27:10:44:85:ae:d4:28:d4:aa:77: b7:42:30:b5:6a:19:c9:d8:0e:ac:2d:be:4e:9a:c5: ad:04:ca:19:aa:57:1e:42:c8:d6:63:6c:e9:5b:cb: 8a:91:c0:9c:6d:83:12:a0:30:d8:74:53:fa:ce:35: eb:35:2b:21:66:89:46:29:9c:27:24:24:8f:3d:66: ba:7a:8c:64:f1:46:43:1f:89:28:6e:11:72:19:b0: 80:f6:be:82:59:99:0f:41:ed:90:b9:4b:6b:74:0d: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:EA:7D:2E:C3:50:EB:F6:D8:61:B0:D8:A2:E1:45:D9:DA:8C:B4 X509v3 Authority Key Identifier: keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:12:2d:7b:c0:b7:d8:ff:5a:fc:76:2f:99:97:4c:29:46:8e: 98:4f:e1:4c:ee:11:8a:70:42:72:bd:ce:22:28:a0:5c:1d:3d: 38:c8:19:39:81:6b:9a:dc:fd:ef:be:cf:6d:8e:6e:45:8e:a2: 7b:a3:a9:a5:7c:af:23:62:32:b5:7c:d0:ab:7d:d9:69:64:a3: 59:6f:fe:c3:40:c0:37:8f:58:f1:99:2e:fc:e6:e5:4f:5e:9a: 6e:4f:b2:20:dc:3c:ec:38:8c:0a:53:e2:93:3a:7d:c9:c2:5a: 6e:4c:dd:ef:5d:07:8b:69:9e:8e:51:f2:c1:db:b3:24:d0:57: a8:69:a0:59:6c:4a:ea:9b:45:b2:22:5f:81:66:d8:48:a3:c0: 7b:72:d7:c6:60:86:ca:f0:b6:91:b7:e0:be:5d:ba:02:6c:05: 1f:56:42:d4:77:58:0a:26:ec:ae:48:f2:92:92:ed:19:e2:6d: 87:c8:21:78:cd:f6:45:db:00:51:89:ff:26:bb:99:54:77:70: 49:d8:2b:5d:e6:87:0b:0d:62:c8:6d:4f:64:86:db:1d:78:4e: bf:f6:6d:97:8d:d8:21:ed:c0:f9:48:5a:54:91:18:e2:5b:43: dd:3b:73:73:c3:bd:6f:9b:a8:a9:a4:0f:de:1e:09:e1:06:d9: dc:e6:a3:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXggteGuikVmqW82yeMTjdgK7XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNF QUFFQTYyNTAeFw0yNjExMTQxOTE4NTZaFw0yNjExMTUyMTUzNTZaMDMxMTAvBgNV BAMTKDhCNjlFQTdEMkVDMzUwRUJGNkQ4NjFCMEQ4QTJFMTQ1RDlEQThDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTrzDT8t5FHa5EAgElyOTQZ9m nAQ8qi0A52GmBIUPyy3Dt8g7ibSptJLJXUfSNOT/yULcdIaCeJlRGvWtZm0ICiZv nAitkbFJboBPA38ecg/CXb00/pcgDC4m+RVabRDisr1DG0Yu3FRn29hKgevf0p1N xqrnFA44OQANeTnKaGLMEj3oE11AQ6fENIVs0MnYjT2U40beW6lSJxBEha7UKNSq d7dCMLVqGcnYDqwtvk6axa0EyhmqVx5CyNZjbOlby4qRwJxtgxKgMNh0U/rONes1 KyFmiUYpnCckJI89Zrp6jGTxRkMfiShuEXIZsID2voJZmQ9B7ZC5S2t0DRl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi2nqfS7DUOv22GGw2KLhRdnajLQwHwYDVR0j BBgwFoAU5YzqF0HMEjQhu3swEvhV8+qupiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0 MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNFQUFFQTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNThDRUExNzQxQ0MxMjM0MjFCQjdCMzAxMkY4NTVGM0VBQUVB NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1 RjNFQUFFQTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKISLXvAt9j/Wvx2L5mXTClGjphP4UzuEYpw QnK9ziIooFwdPTjIGTmBa5rc/e++z22ObkWOonujqaV8ryNiMrV80Kt92Wlko1lv /sNAwDePWPGZLvzm5U9emm5PsiDcPOw4jApT4pM6fcnCWm5M3e9dB4tpno5R8sHb syTQV6hpoFlsSuqbRbIiX4Fm2EijwHty18ZghsrwtpG34L5dugJsBR9WQtR3WAom 7K5I8pKS7RnibYfIIXjN9kXbAFGJ/ya7mVR3cEnYK13mhwsNYshtT2SG2x14Tr/2 bZeN2CHtwPlIWlSRGOJbQ907c3PDvW+bqKmkD94eCeEG2dzmo00= -----END CERTIFICATE-----Generated at Sun Nov 15 10:06:20 2026 by rpki-client