$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: 3U8/dsW1DSglLp+FvwjXrf7xf3Udb/xsDxYGF+fdtog= Subject key identifier: 5D:4B:C0:53:00:B4:7D:DB:64:7E:BC:49:1B:FE:B6:1E:BC:89:40:07 Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 2C1A64C9E1DA6E657469708E87AEE748B59B88B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 09:23:30 +0000 Manifest this update: Tue 28 Jul 2026 09:18:30 +0000 Manifest next update: Wed 29 Jul 2026 09:38:30 +0000 Files and hashes: 1: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 2: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: oS03A+0sSp5I9jKt3TzDrmivvq6GvKBWoeC+L6Z/AZY=) 3: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) 4: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) 5: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1a:64:c9:e1:da:6e:65:74:69:70:8e:87:ae:e7:48:b5:9b:88:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: Jul 28 09:18:30 2026 GMT Not After : Jul 29 09:38:30 2026 GMT Subject: CN=5D4BC05300B47DDB647EBC491BFEB61EBC894007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:f0:46:1f:b0:bc:85:ef:89:39:22:2f:87: 96:ec:24:a8:f5:d2:6a:63:c7:7f:ad:8a:ee:83:74: a3:a3:b2:ed:3b:85:2f:37:55:b4:43:f2:87:ca:9e: 22:c6:79:5c:0f:2d:93:50:3d:59:63:77:89:13:73: b0:05:af:a1:dd:e5:f0:e8:1f:30:60:10:18:07:5e: 75:3e:bc:aa:93:0b:a8:b7:04:99:e0:93:a9:de:4f: 64:43:e1:39:ae:9b:02:79:df:a7:88:47:d5:23:5f: a6:23:9f:11:3a:8a:ca:17:58:c6:2d:d6:49:b4:86: 77:f8:28:8d:20:f8:14:6e:24:33:71:1d:32:9b:e3: eb:60:ee:8c:40:d1:67:8b:f1:d3:47:ee:9f:77:cd: d0:35:14:17:19:9d:25:b8:be:c6:2d:95:2a:a0:50: 42:9a:df:ce:21:f2:ff:de:fd:42:09:e2:52:50:0a: bd:5e:5e:f6:03:b8:4f:2b:0f:b9:af:f9:a9:38:ff: c2:ed:85:43:14:46:75:56:66:13:4d:ed:fb:6a:50: 9b:34:c1:bd:83:2b:d8:1c:b8:0e:e5:35:9f:f9:34: 8f:1b:5a:c4:b3:27:d4:c3:60:04:ad:b6:1c:4a:a3: 30:f7:be:77:d4:0d:c8:40:ef:3d:7a:92:5b:4c:32: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4B:C0:53:00:B4:7D:DB:64:7E:BC:49:1B:FE:B6:1E:BC:89:40:07 X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:90:18:b6:7d:ff:1b:18:b9:81:f6:81:d2:67:08:89:6c:b4: 70:18:5e:4e:45:20:cb:be:bd:1d:ef:ea:5e:b1:39:27:b8:57: 6e:fb:2a:79:66:29:22:08:64:79:e9:d8:f2:2e:b7:84:85:ea: 75:50:7f:b0:d9:c4:15:b0:d1:53:cf:a5:f5:8c:1d:32:4e:56: c9:45:c4:61:64:27:26:32:d1:24:27:e5:1e:67:b5:b8:4a:a9: 93:35:cc:91:44:1a:2a:3e:c5:81:e5:da:c9:a6:57:2e:46:d9: f8:62:ba:1a:0f:52:d5:84:12:4c:99:ff:02:d0:69:36:77:b3: 58:2f:65:a6:b2:f9:db:40:1d:f9:82:1b:2b:97:3f:ff:65:d5: 92:dc:80:8c:f3:c6:a2:53:8a:52:3f:78:96:7e:4b:b5:37:af: 8f:21:68:78:16:12:a5:1b:5e:3d:f3:dd:4c:bb:a9:cb:59:64: 36:c1:44:22:3b:86:fd:d7:9d:6c:51:69:54:e7:0d:df:0e:dd: 8e:ff:a3:e2:cd:99:32:a0:8f:60:4a:67:20:e6:79:14:29:5c: 1c:78:03:4c:c2:76:1a:63:93:c4:bf:6c:1c:fc:87:32:54:3c: c6:bf:0a:ee:7b:4e:f8:d9:23:e8:be:a6:35:46:ff:94:df:42: 55:88:51:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBpkyeHabmV0aXCOh67nSLWbiLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA3MjgwOTE4MzBaFw0yNjA3MjkwOTM4MzBaMDMxMTAvBgNV BAMTKDVENEJDMDUzMDBCNDdEREI2NDdFQkM0OTFCRkVCNjFFQkM4OTQwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYPBGH7C8he+JOSIvh5bsJKj1 0mpjx3+tiu6DdKOjsu07hS83VbRD8ofKniLGeVwPLZNQPVljd4kTc7AFr6Hd5fDo HzBgEBgHXnU+vKqTC6i3BJngk6neT2RD4TmumwJ536eIR9UjX6YjnxE6isoXWMYt 1km0hnf4KI0g+BRuJDNxHTKb4+tg7oxA0WeL8dNH7p93zdA1FBcZnSW4vsYtlSqg UEKa384h8v/e/UIJ4lJQCr1eXvYDuE8rD7mv+ak4/8LthUMURnVWZhNN7ftqUJs0 wb2DK9gcuA7lNZ/5NI8bWsSzJ9TDYAStthxKozD3vnfUDchA7z16kltMMh1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXUvAUwC0fdtkfrxJG/62HryJQAcwHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKQGLZ9/xsYuYH2gdJnCIlstHAYXk5FIMu+ vR3v6l6xOSe4V277KnlmKSIIZHnp2PIut4SF6nVQf7DZxBWw0VPPpfWMHTJOVslF xGFkJyYy0SQn5R5ntbhKqZM1zJFEGio+xYHl2smmVy5G2fhiuhoPUtWEEkyZ/wLQ aTZ3s1gvZaay+dtAHfmCGyuXP/9l1ZLcgIzzxqJTilI/eJZ+S7U3r48haHgWEqUb Xj3z3Uy7qctZZDbBRCI7hv3XnWxRaVTnDd8O3Y7/o+LNmTKgj2BKZyDmeRQpXBx4 A0zCdhpjk8S/bBz8hzJUPMa/Cu57TvjZI+i+pjVG/5TfQlWIUZY= -----END CERTIFICATE-----Generated at Tue Jul 28 23:31:50 2026 by rpki-client