$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft File: 58775F16B86C66299D9AF904F73786CD365D8787.mft (raw, json) Hash identifier: HQxnSu/ycWEL7BJtcwmCaFScrpI4JsiMOW3UwAr1v4s= Subject key identifier: BF:1D:6A:C7:FE:FC:E0:90:D4:D0:67:F4:2F:7A:10:6F:1F:83:18:71 Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787 Certificate serial: 3CCDC9A421994939EC2F93231FA653A123CB24B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 08:34:52 +0000 Manifest this update: Sun 15 Nov 2026 08:29:52 +0000 Manifest next update: Mon 16 Nov 2026 09:10:52 +0000 Files and hashes: 1: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c=) 2: 58775F16B86C66299D9AF904F73786CD365D8787.crl (hash: 5wfffzLm3vcJCmFC4Ryy+BVysM6s3pObQJYcJ2dns+s=) 3: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: 8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=) 4: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=) 5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: g14LcNrrW54yrzbA/vRmcLiMXBlSRO/YFYlVg+H2Jjk=) 6: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cd:c9:a4:21:99:49:39:ec:2f:93:23:1f:a6:53:a1:23:cb:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787 Validity Not Before: Nov 15 08:29:52 2026 GMT Not After : Nov 16 09:10:52 2026 GMT Subject: CN=BF1D6AC7FEFCE090D4D067F42F7A106F1F831871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:35:7b:ca:93:c8:6b:58:58:4c:38:cd:a6: 76:6c:0d:0f:16:60:1d:43:c9:2c:ff:14:dc:01:ad: 77:d6:51:88:94:bb:5a:90:a6:55:04:39:b6:7e:b9: c5:82:aa:df:c7:fa:00:8c:7d:56:c1:a6:ca:bd:a9: 6d:39:36:b7:08:9b:b8:59:53:8c:44:26:59:e4:d0: 60:1f:3b:1b:47:8d:9c:0f:3e:3e:96:8f:49:7a:89: 97:7d:9e:7f:f2:9b:75:66:d1:9c:f9:17:38:7e:d8: 67:28:66:4a:d1:ee:52:41:a0:11:db:ad:a3:95:27: 8c:ea:c0:bb:fc:48:49:47:12:e4:e0:b0:9a:d9:d2: c3:07:93:b2:77:70:67:99:c9:65:4b:7b:cf:b7:73: da:f0:6e:f0:af:3b:17:0d:71:90:d1:04:35:0d:b0: a1:2d:5b:8e:11:48:f9:41:fc:11:55:33:10:83:34: e7:20:a8:83:31:e4:29:40:17:97:45:94:02:d6:1c: 32:99:32:03:e5:58:1e:07:27:24:f7:35:23:61:09: 5a:82:05:fd:a8:9d:77:e6:4d:2f:51:6b:8a:cc:86: 68:50:6a:a8:d9:84:06:b1:10:97:8a:d2:d8:b8:5d: 09:3c:7e:62:b2:9b:a0:aa:b1:3b:12:a9:33:c0:34: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:6A:C7:FE:FC:E0:90:D4:D0:67:F4:2F:7A:10:6F:1F:83:18:71 X509v3 Authority Key Identifier: keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:79:ce:99:d6:a5:c2:7f:c4:64:d2:6b:65:7a:05:68:18:f6: dc:01:e0:06:96:04:ae:7a:35:90:34:ac:aa:16:1d:6d:02:a7: bc:43:25:cd:e3:60:6a:75:f1:94:bd:6a:71:df:2c:bf:aa:06: ce:03:aa:d3:d4:fe:b3:f8:7a:5f:96:57:5b:53:e8:72:14:70: 9f:38:fa:28:41:32:ef:fe:41:2c:ea:80:9e:2b:bc:bf:a9:42: f6:91:47:02:75:93:0c:6a:d1:04:eb:8d:d4:c8:79:36:e8:c9: a9:b2:f6:aa:13:09:96:10:ba:15:64:e7:05:67:15:94:7c:a6: 2b:11:59:6f:83:b3:bd:02:1b:b6:dc:b7:e0:b1:24:e9:d6:42: 59:5a:78:26:b1:f1:25:6b:7a:ca:36:fa:b1:48:66:fe:13:e1: c2:8b:f3:f9:33:3c:27:89:fd:df:5e:67:0c:d4:a8:f6:3b:61: 8b:9c:9c:0a:14:4b:06:2a:d6:f9:c6:b4:4f:5a:e2:71:14:03: 8a:44:c8:fb:11:f8:7a:b0:33:47:a1:91:34:98:d8:9b:91:ff: 72:28:8c:14:e4:7e:52:c2:ef:d5:3f:55:10:b4:0f:30:ac:15: f7:25:88:f3:ae:e1:31:8c:a9:01:3e:66:f9:0f:75:02:c8:9e: 30:d9:fa:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPM3JpCGZSTnsL5MjH6ZToSPLJLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3NzVGMTZCODZDNjYyOTlEOUFGOTA0RjczNzg2Q0Qz NjVEODc4NzAeFw0yNjExMTUwODI5NTJaFw0yNjExMTYwOTEwNTJaMDMxMTAvBgNV BAMTKEJGMUQ2QUM3RkVGQ0UwOTBENEQwNjdGNDJGN0ExMDZGMUY4MzE4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2jV7ypPIa1hYTDjNpnZsDQ8W YB1DySz/FNwBrXfWUYiUu1qQplUEObZ+ucWCqt/H+gCMfVbBpsq9qW05NrcIm7hZ U4xEJlnk0GAfOxtHjZwPPj6Wj0l6iZd9nn/ym3Vm0Zz5Fzh+2GcoZkrR7lJBoBHb raOVJ4zqwLv8SElHEuTgsJrZ0sMHk7J3cGeZyWVLe8+3c9rwbvCvOxcNcZDRBDUN sKEtW44RSPlB/BFVMxCDNOcgqIMx5ClAF5dFlALWHDKZMgPlWB4HJyT3NSNhCVqC Bf2onXfmTS9Ra4rMhmhQaqjZhAaxEJeK0ti4XQk8fmKym6CqsTsSqTPANAktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvx1qx/784JDU0Gf0L3oQbx+DGHEwHwYDVR0j BBgwFoAUWHdfFrhsZimdmvkE9zeGzTZdh4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNhMjkyYjItNGFlNC00MWRmLTg4N2EtYzE3MmMzZTFhZTczLzAvNTg3NzVGMTZC ODZDNjYyOTlEOUFGOTA0RjczNzg2Q0QzNjVEODc4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODc3NUYxNkI4NkM2NjI5OUQ5QUY5MDRGNzM3ODZDRDM2NUQ4 Nzg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNhMjkyYjItNGFlNC00MWRmLTg4 N2EtYzE3MmMzZTFhZTczLzAvNTg3NzVGMTZCODZDNjYyOTlEOUFGOTA0RjczNzg2 Q0QzNjVEODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGN5zpnWpcJ/xGTSa2V6BWgY9twB4AaWBK56 NZA0rKoWHW0Cp7xDJc3jYGp18ZS9anHfLL+qBs4DqtPU/rP4el+WV1tT6HIUcJ84 +ihBMu/+QSzqgJ4rvL+pQvaRRwJ1kwxq0QTrjdTIeTboyamy9qoTCZYQuhVk5wVn FZR8pisRWW+Ds70CG7bct+CxJOnWQllaeCax8SVreso2+rFIZv4T4cKL8/kzPCeJ /d9eZwzUqPY7YYucnAoUSwYq1vnGtE9a4nEUA4pEyPsR+HqwM0ehkTSY2JuR/3Io jBTkflLC79U/VRC0DzCsFfcliPOu4TGMqQE+ZvkPdQLInjDZ+kE= -----END CERTIFICATE-----Generated at Sun Nov 15 19:15:00 2026 by rpki-client