$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft File: 58775F16B86C66299D9AF904F73786CD365D8787.mft (raw, json) Hash identifier: zud9RK/5PFxr8e8RR0kTdA63qVcfDd4/39JnXN7NXLo= Subject key identifier: 42:41:A8:6F:48:1C:4A:5D:DB:77:D8:B6:0A:95:4D:A6:75:3B:52:BD Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787 Certificate serial: 1B3E2A9DE30F6D62D592EBD8D564D52215C0F742 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:38:29 +0000 Manifest this update: Mon 21 Sep 2026 01:33:29 +0000 Manifest next update: Tue 22 Sep 2026 03:20:29 +0000 Files and hashes: 1: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: g14LcNrrW54yrzbA/vRmcLiMXBlSRO/YFYlVg+H2Jjk=) 2: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o=) 3: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=) 4: 58775F16B86C66299D9AF904F73786CD365D8787.crl (hash: 1UM/VLoKxsmZHGHTMQPT2YkjEQul7OmNNBq9XOtiGMI=) 5: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: 8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=) 6: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3e:2a:9d:e3:0f:6d:62:d5:92:eb:d8:d5:64:d5:22:15:c0:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787 Validity Not Before: Sep 21 01:33:29 2026 GMT Not After : Sep 22 03:20:29 2026 GMT Subject: CN=4241A86F481C4A5DDB77D8B60A954DA6753B52BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f4:7a:e0:c1:53:55:f3:bf:a2:8a:c3:2e:a6: 81:2a:d4:28:70:84:d5:0b:11:23:12:95:05:73:35: 60:05:ef:e9:f1:90:7c:5a:2d:8c:68:38:50:00:59: 21:53:1c:c8:31:3d:9b:38:44:da:7e:2d:83:f2:e3: 45:c8:76:60:73:2c:e6:5e:7a:8e:9b:14:01:f3:a8: 55:ed:0e:f8:d0:50:fd:7d:58:5c:6d:42:16:49:cc: f0:2f:9a:0e:aa:fb:0e:8a:96:37:3b:26:17:ea:18: 4b:1d:61:05:68:f0:1e:05:e3:38:5c:99:52:a3:f8: 51:23:ae:56:04:7b:26:60:92:89:e4:10:0d:d1:59: a5:71:25:2b:a0:19:1f:7f:00:2d:d4:cb:01:c3:ce: c4:2b:a5:70:e0:bb:4a:7a:f3:af:3c:28:65:50:81: 84:01:68:fa:18:e8:a1:58:fe:e2:f3:82:67:04:1a: 29:1e:49:03:6f:b9:29:ba:f6:25:44:e0:03:33:cc: ed:4d:2d:56:7f:d2:cf:be:70:10:48:7c:b7:8d:c7: 3e:1c:8e:0c:13:c3:54:ba:78:2c:5c:f6:20:e7:3a: bf:86:5e:e8:78:e5:cc:4e:66:dd:56:c1:4d:8e:3f: 0c:9a:0e:7f:6e:48:74:47:42:15:6a:20:ec:da:e9: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:41:A8:6F:48:1C:4A:5D:DB:77:D8:B6:0A:95:4D:A6:75:3B:52:BD X509v3 Authority Key Identifier: keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e9:15:4e:17:47:b6:cb:51:2e:aa:7e:04:d3:6a:96:6a:43: 70:08:96:a4:84:68:18:af:51:0f:57:ad:a0:e3:38:04:49:7d: a1:6e:6e:a2:1b:c3:ae:b0:07:c9:eb:be:00:67:85:59:9a:81: 06:50:fa:45:70:73:3f:25:3d:8c:69:42:83:c8:0c:c9:01:83: 27:fa:c8:7b:59:14:d6:c6:53:11:3d:fe:0b:b8:f9:0f:57:7b: 93:0c:8b:b8:cf:34:f6:1a:39:50:db:54:93:87:23:df:36:b9: 2c:49:93:08:46:70:27:d1:0c:2a:ec:03:a5:6f:62:8f:ba:71: e1:df:e4:1f:c1:3b:6e:87:45:f2:e6:68:cb:e2:45:37:b5:39: d3:7c:03:49:a7:48:ff:48:c0:c2:67:d3:56:33:20:4a:6f:1d: 68:3f:46:aa:8c:93:a8:15:3c:eb:10:28:d2:14:11:eb:8f:05: 0e:e5:d6:37:dd:b5:08:62:4a:11:39:9b:96:54:e4:40:1c:5f: 0c:8f:52:20:56:bb:ac:a3:c1:35:a0:f1:70:81:aa:04:87:06: 67:ed:09:09:fc:91:67:f3:6a:c3:72:76:b0:c6:12:28:f9:8e: d7:a7:dd:95:a2:0f:af:fa:6d:ad:e3:5f:bf:38:c2:bd:f0:32: f4:7f:e9:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGz4qneMPbWLVkuvY1WTVIhXA90IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3NzVGMTZCODZDNjYyOTlEOUFGOTA0RjczNzg2Q0Qz NjVEODc4NzAeFw0yNjA5MjEwMTMzMjlaFw0yNjA5MjIwMzIwMjlaMDMxMTAvBgNV BAMTKDQyNDFBODZGNDgxQzRBNUREQjc3RDhCNjBBOTU0REE2NzUzQjUyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9HrgwVNV87+iisMupoEq1Chw hNULESMSlQVzNWAF7+nxkHxaLYxoOFAAWSFTHMgxPZs4RNp+LYPy40XIdmBzLOZe eo6bFAHzqFXtDvjQUP19WFxtQhZJzPAvmg6q+w6Kljc7JhfqGEsdYQVo8B4F4zhc mVKj+FEjrlYEeyZgkonkEA3RWaVxJSugGR9/AC3UywHDzsQrpXDgu0p68688KGVQ gYQBaPoY6KFY/uLzgmcEGikeSQNvuSm69iVE4AMzzO1NLVZ/0s++cBBIfLeNxz4c jgwTw1S6eCxc9iDnOr+GXuh45cxOZt1WwU2OPwyaDn9uSHRHQhVqIOza6SDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkGob0gcSl3bd9i2CpVNpnU7Ur0wHwYDVR0j BBgwFoAUWHdfFrhsZimdmvkE9zeGzTZdh4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNhMjkyYjItNGFlNC00MWRmLTg4N2EtYzE3MmMzZTFhZTczLzAvNTg3NzVGMTZC ODZDNjYyOTlEOUFGOTA0RjczNzg2Q0QzNjVEODc4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODc3NUYxNkI4NkM2NjI5OUQ5QUY5MDRGNzM3ODZDRDM2NUQ4 Nzg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNhMjkyYjItNGFlNC00MWRmLTg4 N2EtYzE3MmMzZTFhZTczLzAvNTg3NzVGMTZCODZDNjYyOTlEOUFGOTA0RjczNzg2 Q0QzNjVEODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHpFU4XR7bLUS6qfgTTapZqQ3AIlqSEaBiv UQ9XraDjOARJfaFubqIbw66wB8nrvgBnhVmagQZQ+kVwcz8lPYxpQoPIDMkBgyf6 yHtZFNbGUxE9/gu4+Q9Xe5MMi7jPNPYaOVDbVJOHI982uSxJkwhGcCfRDCrsA6Vv Yo+6ceHf5B/BO26HRfLmaMviRTe1OdN8A0mnSP9IwMJn01YzIEpvHWg/RqqMk6gV POsQKNIUEeuPBQ7l1jfdtQhiShE5m5ZU5EAcXwyPUiBWu6yjwTWg8XCBqgSHBmft CQn8kWfzasNydrDGEij5jten3ZWiD6/6ba3jX784wr3wMvR/6YE= -----END CERTIFICATE-----Generated at Mon Sep 21 19:47:30 2026 by rpki-client