$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: lKCCRN3GeWJS3r8Cg45dNMOt9g37wQO8eLOOMBTFk1w= Subject key identifier: 5E:6A:C9:15:5A:51:5F:71:0C:BF:15:D4:F0:29:63:CC:03:1D:8F:46 Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 2A03CFC1B901928484895945CE35B5EC31F6AA9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 07:01:50 +0000 Manifest this update: Thu 08 Oct 2026 06:56:50 +0000 Manifest next update: Fri 09 Oct 2026 07:27:50 +0000 Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) 2: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: wiMgM9HXvf+ZpRsqZjGxUkeU08dslCl1elPtYBM8a3A=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 07:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:03:cf:c1:b9:01:92:84:84:89:59:45:ce:35:b5:ec:31:f6:aa:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: Oct 8 06:56:50 2026 GMT Not After : Oct 9 07:27:50 2026 GMT Subject: CN=5E6AC9155A515F710CBF15D4F02963CC031D8F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:5b:8f:e8:7d:e5:75:69:12:ad:79:03:70: bb:59:c7:b5:de:1b:4f:ec:82:4f:5f:64:73:5d:ff: a4:20:b9:d3:8d:bf:15:4d:9b:71:a9:34:1e:8c:b6: 5c:9d:a5:b1:f8:8b:b6:14:01:af:29:4d:6d:c6:5b: e8:81:59:f7:0d:b7:3a:f7:ba:2c:1c:2e:8a:92:8e: e3:af:34:64:b6:46:c1:e0:83:85:39:2b:d5:75:f5: 8d:ee:dd:e2:94:13:cd:3d:c0:83:73:ff:15:0f:78: 4e:44:c0:21:bb:91:40:a9:bb:52:9e:f0:3c:00:4a: 9c:26:a6:4a:b3:87:80:57:76:17:89:02:9b:f2:ad: 32:72:83:e4:35:72:28:b6:d1:52:08:bf:9e:06:73: d1:23:5f:69:94:87:0d:b8:85:f5:df:2e:8b:2a:b6: 44:2f:fc:1e:eb:5d:e5:73:02:92:4c:dd:75:51:41: c8:c6:a1:6e:70:f9:44:f0:73:06:3c:14:e8:94:99: f7:a8:ac:cc:b9:0c:59:13:a4:12:3d:0f:61:1e:28: f6:16:23:bb:1a:1a:f5:a3:05:50:0e:13:8f:05:9b: 33:fa:37:f0:7a:a9:da:ea:83:cb:ef:39:10:44:11: 8d:e3:14:53:01:89:e5:d6:63:19:71:51:9a:04:b3: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6A:C9:15:5A:51:5F:71:0C:BF:15:D4:F0:29:63:CC:03:1D:8F:46 X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:0c:ce:d4:fd:5e:96:09:3f:07:da:89:f4:0b:7b:f8:2f: 0f:f9:ce:96:79:95:d3:d3:83:20:17:f8:e7:2d:6b:33:97:56: 41:fa:46:22:47:3f:e2:9b:7b:51:8f:5f:20:b2:e5:6d:a7:f1: b5:68:67:27:98:49:ed:88:0d:c3:8d:3a:d6:59:99:81:6b:c1: aa:3b:66:ca:e9:28:af:68:64:e4:58:70:aa:c3:d0:d9:bf:d6: 69:57:b8:a1:09:a3:60:a8:f3:de:d8:48:9b:b6:53:34:46:0e: d1:ba:82:85:3f:f9:75:12:de:d4:c5:aa:b0:59:92:b0:3e:61: 6d:44:2e:94:e0:97:a2:fc:f8:c1:f2:1a:83:5f:65:cf:1e:00: c1:1f:7b:93:70:1a:ee:86:28:55:1b:ae:17:20:ec:7a:3d:ad: 65:71:f5:78:0b:ad:a0:60:12:20:30:17:83:4d:bb:de:31:cd: 4f:46:a9:26:ab:00:49:e6:70:ce:86:d3:48:f5:99:b2:0b:49: 40:f5:86:84:9d:d8:ec:e8:0f:9f:11:17:9e:5e:8e:3f:26:73: 7d:45:29:cb:13:69:94:05:c0:91:8e:98:60:a6:6b:4d:c5:80: b7:62:12:0b:9d:31:61:cb:8e:42:d1:5e:07:00:25:9a:8b:ac: 90:93:f7:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgPPwbkBkoSEiVlFzjW17DH2qpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjEwMDgwNjU2NTBaFw0yNjEwMDkwNzI3NTBaMDMxMTAvBgNV BAMTKDVFNkFDOTE1NUE1MTVGNzEwQ0JGMTVENEYwMjk2M0NDMDMxRDhGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDDFuP6H3ldWkSrXkDcLtZx7Xe G0/sgk9fZHNd/6QgudONvxVNm3GpNB6MtlydpbH4i7YUAa8pTW3GW+iBWfcNtzr3 uiwcLoqSjuOvNGS2RsHgg4U5K9V19Y3u3eKUE809wINz/xUPeE5EwCG7kUCpu1Ke 8DwASpwmpkqzh4BXdheJApvyrTJyg+Q1cii20VIIv54Gc9EjX2mUhw24hfXfLosq tkQv/B7rXeVzApJM3XVRQcjGoW5w+UTwcwY8FOiUmfeorMy5DFkTpBI9D2EeKPYW I7saGvWjBVAOE48FmzP6N/B6qdrqg8vvORBEEY3jFFMBieXWYxlxUZoEs9RBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXmrJFVpRX3EMvxXU8CljzAMdj0YwHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjCDM7U/V6WCT8H2on0C3v4Lw/5zpZ5ldPT gyAX+OctazOXVkH6RiJHP+Kbe1GPXyCy5W2n8bVoZyeYSe2IDcONOtZZmYFrwao7 ZsrpKK9oZORYcKrD0Nm/1mlXuKEJo2Co897YSJu2UzRGDtG6goU/+XUS3tTFqrBZ krA+YW1ELpTgl6L8+MHyGoNfZc8eAMEfe5NwGu6GKFUbrhcg7Ho9rWVx9XgLraBg EiAwF4NNu94xzU9GqSarAEnmcM6G00j1mbILSUD1hoSd2OzoD58RF55ejj8mc31F KcsTaZQFwJGOmGCma03FgLdiEgudMWHLjkLRXgcAJZqLrJCT99k= -----END CERTIFICATE-----Generated at Thu Oct 8 17:15:56 2026 by rpki-client