$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json) Hash identifier: VpntE/hHm2BM7ydTl4dLpV1H2qO87hq6xIQ1pntAIYw= Subject key identifier: 17:6F:A6:20:5F:98:35:F4:12:80:4A:86:D0:52:03:EE:34:01:E6:2C Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Certificate serial: 6C6028217B32C615F54247D8EFEC14D1BFD35E0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:05:23 +0000 Manifest this update: Mon 21 Sep 2026 07:00:23 +0000 Manifest next update: Tue 22 Sep 2026 09:50:23 +0000 Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: cNq5c8tlgmBdAZUefJH2V1XuaQi4+bantPSjjVPhK0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:60:28:21:7b:32:c6:15:f5:42:47:d8:ef:ec:14:d1:bf:d3:5e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Validity Not Before: Sep 21 07:00:23 2026 GMT Not After : Sep 22 09:50:23 2026 GMT Subject: CN=176FA6205F9835F412804A86D05203EE3401E62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:be:60:40:36:44:f4:8e:39:ff:25:80:a7: 2d:71:ff:ad:26:a4:c1:f3:5f:6c:74:d1:79:dc:3a: fe:1d:8a:8f:a8:c4:5a:c2:ab:96:d0:a4:a2:cb:03: 42:14:80:e0:e4:3f:3c:4e:9b:35:de:15:76:36:30: 52:8d:87:04:39:25:12:99:58:ef:46:7a:b3:c2:8c: 8e:b8:1f:d4:8c:6c:65:01:09:fa:9d:33:d2:d2:08: fb:aa:0d:2a:07:8d:d1:1a:83:57:fd:a7:6d:cd:68: 69:51:a2:2b:ef:20:3c:3c:1b:c3:30:c2:3d:73:2c: a1:fc:75:11:e3:35:c8:10:c8:c1:08:13:bd:49:7a: 3c:b3:3f:db:d7:32:ee:14:1e:ac:f4:70:33:ae:8d: bf:b4:3c:17:f7:24:f8:2f:71:94:25:e2:c1:2d:21: 96:1e:63:ad:93:ab:63:b7:eb:c0:ad:a7:70:93:c3: 46:26:5b:94:53:c1:cc:b0:8b:17:d8:83:c8:68:40: 14:80:d3:27:c6:ab:e1:03:14:61:3c:0d:64:a3:61: 9f:d1:2d:e1:7f:da:4a:18:8b:31:ba:09:79:3d:6f: d3:62:cc:0a:8f:2c:95:93:a5:dd:db:31:1f:ea:15: 7f:b9:4f:bb:1e:a6:fd:8f:0c:ba:68:74:ae:f1:fa: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6F:A6:20:5F:98:35:F4:12:80:4A:86:D0:52:03:EE:34:01:E6:2C X509v3 Authority Key Identifier: keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:18:7e:96:48:e6:9f:19:3d:c8:c9:0e:b0:45:d3:31:36:ea: e1:ad:de:12:1e:86:f6:f6:65:9e:e5:e4:6c:bd:e5:53:cb:38: e5:41:83:39:ee:31:9d:4f:bb:55:0e:65:aa:43:12:23:8a:48: ff:e1:5f:73:b8:42:37:1c:c7:9e:8a:bf:aa:4a:49:cb:f9:15: 6e:b1:3d:32:c0:e1:63:a7:36:2d:26:b6:76:da:b2:98:1f:3c: e3:4b:aa:20:ad:d6:c7:3d:5b:c9:f1:c5:b2:60:01:fb:70:b2: db:48:54:8c:9c:3f:37:eb:c1:e6:a9:d1:0c:fe:29:c0:8a:98: 33:b1:02:8d:a2:6e:56:28:a7:1c:e1:7f:98:b3:bb:19:4b:79: 5b:fa:21:a0:9b:10:97:f3:54:6f:bd:26:53:ac:2f:7e:75:d7: c8:4b:37:90:52:50:4c:5f:40:21:a2:ff:6c:1a:2b:46:e2:a5: 0e:b2:bf:75:36:1a:36:2c:db:32:c3:80:8d:69:5c:d5:3e:df: 7d:31:31:ae:d2:4b:40:c7:69:fd:31:d4:a7:2d:d8:de:b2:06: b9:f6:9f:b6:c7:78:18:fb:8b:ba:aa:b3:99:18:4d:60:38:b2: e9:4f:df:4c:1e:cf:de:38:c6:62:97:43:ec:e4:4a:de:22:30: 11:bd:03:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGAoIXsyxhX1QkfY7+wU0b/TXgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4 NTY5OTVCNjAeFw0yNjA5MjEwNzAwMjNaFw0yNjA5MjIwOTUwMjNaMDMxMTAvBgNV BAMTKDE3NkZBNjIwNUY5ODM1RjQxMjgwNEE4NkQwNTIwM0VFMzQwMUU2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo775gQDZE9I45/yWApy1x/60m pMHzX2x00XncOv4dio+oxFrCq5bQpKLLA0IUgODkPzxOmzXeFXY2MFKNhwQ5JRKZ WO9GerPCjI64H9SMbGUBCfqdM9LSCPuqDSoHjdEag1f9p23NaGlRoivvIDw8G8Mw wj1zLKH8dRHjNcgQyMEIE71JejyzP9vXMu4UHqz0cDOujb+0PBf3JPgvcZQl4sEt IZYeY62Tq2O368Ctp3CTw0YmW5RTwcywixfYg8hoQBSA0yfGq+EDFGE8DWSjYZ/R LeF/2koYizG6CXk9b9NizAqPLJWTpd3bMR/qFX+5T7sepv2PDLpodK7x+urRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF2+mIF+YNfQSgEqG0FID7jQB5iwwHwYDVR0j BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0 NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5 NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2 MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIYfpZI5p8ZPcjJDrBF0zE26uGt3hIehvb2 ZZ7l5Gy95VPLOOVBgznuMZ1Pu1UOZapDEiOKSP/hX3O4Qjccx56Kv6pKScv5FW6x PTLA4WOnNi0mtnbaspgfPONLqiCt1sc9W8nxxbJgAftwsttIVIycPzfrweap0Qz+ KcCKmDOxAo2iblYopxzhf5izuxlLeVv6IaCbEJfzVG+9JlOsL35118hLN5BSUExf QCGi/2waK0bipQ6yv3U2GjYs2zLDgI1pXNU+330xMa7SS0DHaf0x1Kct2N6yBrn2 n7bHeBj7i7qqs5kYTWA4sulP30wez944xmKXQ+zkSt4iMBG9A4Q= -----END CERTIFICATE-----Generated at Mon Sep 21 09:56:10 2026 by rpki-client