$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: bjy7msi0IiidQEkSArUljfkwqp5jcBA2yrXwNw7mcro= Subject key identifier: 63:C5:D6:CD:7F:DF:28:37:23:DF:40:2C:9C:35:F1:27:0D:FA:9B:1A Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 66AF5AD265E982D073D2839A43075A5E9E79926B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 03:19:24 +0000 Manifest this update: Sat 26 Sep 2026 03:14:24 +0000 Manifest next update: Sun 27 Sep 2026 03:22:24 +0000 Files and hashes: 1: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: pYI4oBKFo3bRE1+zSyd0rwjtji+PAvWGmwAQ40kJPKg=) 2: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 3: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) 4: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) 5: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 03:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:af:5a:d2:65:e9:82:d0:73:d2:83:9a:43:07:5a:5e:9e:79:92:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: Sep 26 03:14:24 2026 GMT Not After : Sep 27 03:22:24 2026 GMT Subject: CN=63C5D6CD7FDF283723DF402C9C35F1270DFA9B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d8:81:de:c1:13:77:b6:8b:0b:0b:4e:d6:6a: 0b:b5:9e:4b:a6:e0:d4:ff:13:d0:c5:04:48:a4:ea: 2a:3e:17:1f:7c:21:0a:9f:01:87:82:ce:f1:83:e8: 1e:ad:15:af:d3:f2:3a:40:5f:f9:a2:82:aa:58:c5: e3:79:2d:5f:18:2b:75:ce:b0:91:ba:7d:35:95:48: 4e:06:77:a8:8d:21:26:3f:68:4d:a0:ed:ce:6c:bd: 79:63:6d:3d:b7:d7:62:b6:49:97:a0:3f:b8:fe:d4: 89:95:cc:d0:51:03:6a:51:08:47:41:14:47:8e:33: 1b:24:6e:62:c6:98:d8:f3:9f:22:0a:55:b1:82:5d: dc:ff:35:e0:82:e8:c0:23:8b:54:a2:ea:e3:48:b6: c8:67:76:60:3b:a8:b1:b8:8e:26:0a:e0:5e:3f:06: 19:b9:19:7f:6b:01:76:a4:9f:f6:61:84:d1:86:f1: 57:75:de:b9:01:04:b3:c8:39:c0:53:09:0f:00:03: c3:f2:12:11:99:40:c3:4e:0b:75:23:6e:57:cb:b2: d9:9d:23:fe:83:46:bd:8d:d4:f5:98:8e:d4:53:6d: 57:a9:10:bc:a2:11:97:97:a9:67:b7:a4:08:ce:20: eb:f3:e3:90:08:18:12:cf:ae:34:4d:c0:f3:b2:7e: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C5:D6:CD:7F:DF:28:37:23:DF:40:2C:9C:35:F1:27:0D:FA:9B:1A X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:bf:d9:5a:5c:e7:a9:ba:86:0f:c3:a1:b2:c7:38:54:ff: 03:5b:d6:c8:e4:c8:c4:f9:f5:de:12:44:3f:6d:fd:09:d3:f4: ac:cc:65:75:f6:d9:dc:1c:b6:15:7b:48:55:03:a2:fb:85:e8: 6e:a0:50:28:d3:98:13:09:76:04:e9:69:9f:d2:0c:6a:5a:5c: eb:b7:ad:5f:81:1a:7c:08:44:0d:83:56:2f:07:8d:c3:6c:0b: 97:6a:05:96:67:3c:9f:f7:68:29:94:f6:ca:cf:80:b2:75:c1: 92:e8:ff:f8:57:22:31:e7:5f:f9:c2:df:35:d7:d8:7e:ff:f4: 73:25:63:60:f0:41:de:54:fe:f5:cd:a6:cd:6e:b7:0d:35:7d: 49:e3:72:8f:cc:97:5a:26:f9:a3:74:21:3b:59:52:14:a4:45: 48:bd:56:a6:f3:d5:82:6e:99:ee:92:ae:01:99:9a:70:94:79: bf:9a:cf:c8:b5:0c:0f:53:d9:38:73:67:c0:50:88:14:fa:ec: 52:f4:91:e7:21:f4:39:b3:59:c1:82:14:a8:2a:3a:1b:77:ce: 8d:63:2e:ff:db:b4:df:01:c9:29:bd:12:c2:bf:9d:df:85:15: 67:b4:c9:c5:73:cf:fe:6c:16:83:0c:01:45:7b:2e:fa:13:9b: 5f:bd:10:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZq9a0mXpgtBz0oOaQwdaXp55kmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA5MjYwMzE0MjRaFw0yNjA5MjcwMzIyMjRaMDMxMTAvBgNV BAMTKDYzQzVENkNEN0ZERjI4MzcyM0RGNDAyQzlDMzVGMTI3MERGQTlCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2IHewRN3tosLC07Wagu1nkum 4NT/E9DFBEik6io+Fx98IQqfAYeCzvGD6B6tFa/T8jpAX/migqpYxeN5LV8YK3XO sJG6fTWVSE4Gd6iNISY/aE2g7c5svXljbT2312K2SZegP7j+1ImVzNBRA2pRCEdB FEeOMxskbmLGmNjznyIKVbGCXdz/NeCC6MAji1Si6uNItshndmA7qLG4jiYK4F4/ Bhm5GX9rAXakn/ZhhNGG8Vd13rkBBLPIOcBTCQ8AA8PyEhGZQMNOC3UjblfLstmd I/6DRr2N1PWYjtRTbVepELyiEZeXqWe3pAjOIOvz45AIGBLPrjRNwPOyfh4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8XWzX/fKDcj30AsnDXxJw36mxowHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGelv9laXOepuoYPw6GyxzhU/wNb1sjkyMT5 9d4SRD9t/QnT9KzMZXX22dwcthV7SFUDovuF6G6gUCjTmBMJdgTpaZ/SDGpaXOu3 rV+BGnwIRA2DVi8HjcNsC5dqBZZnPJ/3aCmU9srPgLJ1wZLo//hXIjHnX/nC3zXX 2H7/9HMlY2DwQd5U/vXNps1utw01fUnjco/Ml1om+aN0ITtZUhSkRUi9Vqbz1YJu me6SrgGZmnCUeb+az8i1DA9T2ThzZ8BQiBT67FL0kech9DmzWcGCFKgqOht3zo1j Lv/btN8BySm9EsK/nd+FFWe0ycVzz/5sFoMMAUV7LvoTm1+9ECY= -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:21 2026 by rpki-client