$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft File: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft (raw, json) Hash identifier: 3f0iyWUlWeR5sSPf6vXDJ/9GcD+3zlU1jQItK/5vGXE= Subject key identifier: 77:EF:4F:E8:4C:1D:B4:69:FC:86:3C:8E:E7:24:97:26:0B:E9:4C:EB Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Certificate serial: 7DAF101F0FED34738974FC053B10E493F7AB548B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft Manifest number: BC Signing time: Sun 20 Sep 2026 14:24:45 +0000 Manifest this update: Sun 20 Sep 2026 14:19:45 +0000 Manifest next update: Mon 21 Sep 2026 15:46:45 +0000 Files and hashes: 1: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=) 2: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=) 3: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=) 4: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl (hash: 97QrqRqNdA3b2BdJ0VxiXjM5rpCDZOEU12MQdKDn800=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:af:10:1f:0f:ed:34:73:89:74:fc:05:3b:10:e4:93:f7:ab:54:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Validity Not Before: Sep 20 14:19:45 2026 GMT Not After : Sep 21 15:46:45 2026 GMT Subject: CN=77EF4FE84C1DB469FC863C8EE72497260BE94CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:a1:b2:05:2c:14:bc:64:8c:6c:2f:13:29: eb:04:84:10:08:b6:ed:22:8a:36:75:e4:33:28:da: 83:0a:63:dc:27:16:cd:52:c8:72:3e:99:5c:c3:20: 3c:a4:20:25:97:e9:d4:be:f6:1e:29:30:3f:c1:af: c6:88:d7:19:0f:8d:4f:4f:fc:31:17:fe:d5:f4:47: 9b:58:6a:dc:32:bb:6d:fd:6d:ab:22:31:df:22:87: 49:e3:69:41:05:71:ab:36:7b:1b:31:59:d2:ab:51: 34:16:47:5b:f6:9d:e2:dc:dc:e7:ec:7b:3e:2e:d2: fe:c9:b6:68:7c:5c:60:1d:ba:29:09:5f:73:15:97: e7:81:1f:1e:b6:ea:a5:77:97:20:51:9e:bd:6e:cc: 56:6e:1e:00:3f:40:de:d2:5f:0d:7c:b2:c1:ed:71: 60:41:24:c4:90:22:7e:68:c4:35:76:02:b1:2c:1d: ee:ee:3a:1c:1e:ec:84:1c:48:c0:1a:10:72:02:21: 1c:01:2a:dc:4a:49:28:70:5a:46:e6:b9:e9:a5:20: 9e:32:d1:4c:67:74:20:05:28:48:93:e4:ed:d4:95: 13:e7:1c:82:84:5e:8b:6a:e4:53:c4:5b:15:68:e8: 37:c7:0a:23:4e:d0:3a:ae:97:5e:be:5c:0c:89:e2: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EF:4F:E8:4C:1D:B4:69:FC:86:3C:8E:E7:24:97:26:0B:E9:4C:EB X509v3 Authority Key Identifier: keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:13:79:14:2c:84:ff:b3:53:2f:48:6d:93:b5:27:50:d6:94: df:00:d7:1d:ea:68:c2:53:1b:9c:51:95:9e:9c:6d:69:c0:ad: e0:24:94:67:1f:c8:3d:48:ae:2f:28:18:69:20:53:9a:06:9e: 93:c3:8e:2e:88:8c:ee:9b:c0:cc:8e:69:a1:f8:4c:8a:4c:98: cd:96:b6:7f:4e:fc:98:c2:be:e9:90:ae:45:04:04:03:fe:cb: 8b:aa:b1:84:dd:05:cc:a9:d2:2b:05:75:56:62:95:55:18:4a: 2d:e6:32:fa:fd:6f:40:c3:7c:b5:42:64:8e:9d:6c:0f:6b:6d: 85:e0:87:f0:65:c8:69:b9:20:e3:93:59:47:cc:c9:27:76:fd: a1:af:6c:bf:64:69:c1:07:b3:51:1a:c6:e4:8d:5c:76:38:17: b6:d2:55:c2:78:fb:ce:d3:93:d6:ab:4c:32:cd:3b:c9:fd:6c: 54:35:6a:a9:61:c9:55:44:a4:64:86:2c:50:6b:cf:c1:1b:5e: f5:f8:34:e6:02:1c:06:06:ec:23:62:16:9c:c5:43:50:85:c6: 6d:58:55:83:c8:e0:53:d8:2d:4b:51:af:25:e3:40:22:e7:41: 5e:f1:7e:cd:b0:0f:21:1e:80:a1:7d:ea:8f:48:4c:3e:6a:90: a2:77:c2:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa8QHw/tNHOJdPwFOxDkk/erVIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB QTM3OUY3NTAeFw0yNjA5MjAxNDE5NDVaFw0yNjA5MjExNTQ2NDVaMDMxMTAvBgNV BAMTKDc3RUY0RkU4NEMxREI0NjlGQzg2M0M4RUU3MjQ5NzI2MEJFOTRDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5qGyBSwUvGSMbC8TKesEhBAI tu0iijZ15DMo2oMKY9wnFs1SyHI+mVzDIDykICWX6dS+9h4pMD/Br8aI1xkPjU9P /DEX/tX0R5tYatwyu239basiMd8ih0njaUEFcas2exsxWdKrUTQWR1v2neLc3Ofs ez4u0v7Jtmh8XGAduikJX3MVl+eBHx626qV3lyBRnr1uzFZuHgA/QN7SXw18ssHt cWBBJMSQIn5oxDV2ArEsHe7uOhwe7IQcSMAaEHICIRwBKtxKSShwWkbmuemlIJ4y 0UxndCAFKEiT5O3UlRPnHIKEXotq5FPEWxVo6DfHCiNO0Dqul16+XAyJ4p4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd+9P6EwdtGn8hjyO5ySXJgvpTOswHwYDVR0j BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2 M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5 Rjc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4 MkNBQTM3OUY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0TeRQshP+zUy9IbZO1J1DWlN8A1x3qaMJT G5xRlZ6cbWnAreAklGcfyD1Iri8oGGkgU5oGnpPDji6IjO6bwMyOaaH4TIpMmM2W tn9O/JjCvumQrkUEBAP+y4uqsYTdBcyp0isFdVZilVUYSi3mMvr9b0DDfLVCZI6d bA9rbYXgh/BlyGm5IOOTWUfMySd2/aGvbL9kacEHs1EaxuSNXHY4F7bSVcJ4+87T k9arTDLNO8n9bFQ1aqlhyVVEpGSGLFBrz8EbXvX4NOYCHAYG7CNiFpzFQ1CFxm1Y VYPI4FPYLUtRryXjQCLnQV7xfs2wDyEegKF96o9ITD5qkKJ3wlY= -----END CERTIFICATE-----Generated at Mon Sep 21 09:05:38 2026 by rpki-client