$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft File: E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json) Hash identifier: eUoz2UUMz7JkbATGB/RihJSZyJHQwV3K2swLusPTmFo= Subject key identifier: 7D:A8:89:74:EA:0B:06:7E:84:74:AB:B1:AD:62:3C:CB:65:7D:09:5F Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 Certificate issuer: /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Certificate serial: 31BBF2BD30BA596A869924A5CFBC6E3EA80D2943 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:14:06 +0000 Manifest this update: Mon 21 Sep 2026 18:09:06 +0000 Manifest next update: Tue 22 Sep 2026 18:14:06 +0000 Files and hashes: 1: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=) 2: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: /3ww7z4eQ7L7z0NgM1/eYS47SeAIMXf2e0R7NDzJU2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bb:f2:bd:30:ba:59:6a:86:99:24:a5:cf:bc:6e:3e:a8:0d:29:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Validity Not Before: Sep 21 18:09:06 2026 GMT Not After : Sep 22 18:14:06 2026 GMT Subject: CN=7DA88974EA0B067E8474ABB1AD623CCB657D095F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:7a:fa:5b:3c:1b:90:99:a0:ef:4a:6f:c1: 54:bc:52:91:80:cb:1b:91:92:d6:c2:95:ef:bb:7d: f2:72:4a:b7:b4:60:61:be:cd:ad:8c:30:0e:11:52: d5:b8:fa:aa:44:9a:17:2c:a0:56:b5:3b:d7:33:35: 1f:44:f2:b6:bb:56:0f:f4:35:ed:eb:c7:c4:43:88: b2:40:f8:a7:1e:40:46:00:6d:02:6c:59:85:c7:ef: 88:e5:49:08:58:c0:9c:cf:2a:a4:11:f7:75:ab:14: 99:4f:10:67:3d:6d:96:33:0c:eb:de:28:d8:0d:1c: e0:3e:88:d2:08:f9:3f:58:75:6b:49:6e:7b:2d:42: 14:4a:79:c4:ff:ea:bd:de:8e:ee:cb:66:46:ca:fa: 6e:84:9b:9c:62:a6:4d:bf:9b:81:b4:2f:2e:7b:da: 06:c2:7b:54:54:89:42:d3:06:1b:06:c1:9f:64:83: af:65:61:15:31:d2:6a:4e:05:a3:3e:2c:66:38:f3: 53:a8:d2:cf:85:43:c0:cd:ed:10:10:55:64:7e:d8: f6:6b:25:c7:6b:2d:b4:67:6c:9f:9d:9c:d1:68:04: 4d:3a:44:28:95:50:ae:9e:a0:ed:de:41:e8:09:ce: 0d:ba:a2:7c:90:3f:7e:fe:22:fd:df:f9:a5:2d:94: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A8:89:74:EA:0B:06:7E:84:74:AB:B1:AD:62:3C:CB:65:7D:09:5F X509v3 Authority Key Identifier: keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b7:33:95:f5:4f:f6:9b:ae:b7:e0:22:c8:c4:b2:74:57:0e: 77:e7:28:1d:14:fa:63:90:7f:d2:69:b5:5e:2d:e8:91:60:ef: 60:52:50:0d:5b:95:db:b5:b2:42:1e:9a:17:f1:c4:26:24:7e: 3b:4e:6d:76:c3:24:82:3f:58:a4:35:2e:f0:5a:bc:30:8e:dc: 73:1b:88:85:c7:0c:06:7e:b1:9c:82:a8:95:a2:05:0c:97:1c: 23:0c:ba:ea:54:a6:36:23:fc:cd:5f:f7:62:4f:f3:c4:79:0b: 9f:5e:ef:6f:a0:52:f5:4f:75:93:f6:01:be:fa:94:c6:d6:7e: f6:4f:9d:db:d1:ec:c4:8b:f5:33:73:98:bb:d3:6e:6e:a2:18: b4:f6:98:f7:37:3d:1c:11:0b:e3:95:8a:2d:8a:8f:04:55:01: 40:86:97:5e:8b:0c:6f:49:14:89:c0:42:2f:c3:2b:b0:69:75: d2:4d:44:a5:51:88:54:10:a6:14:d5:71:ee:a8:93:86:ea:4b: 19:4b:a6:07:5e:37:c0:d1:cf:15:92:78:b3:ba:fa:66:ea:f6: bb:29:d2:bc:15:48:48:3e:15:ec:5b:9d:8f:b1:dd:49:15:d6: b5:70:bb:44:88:ef:a6:5d:cc:65:32:49:15:b9:b3:4a:32:97: ab:0d:1b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbvyvTC6WWqGmSSlz7xuPqgNKUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNF QUFFQTYyNTAeFw0yNjA5MjExODA5MDZaFw0yNjA5MjIxODE0MDZaMDMxMTAvBgNV BAMTKDdEQTg4OTc0RUEwQjA2N0U4NDc0QUJCMUFENjIzQ0NCNjU3RDA5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshHr6WzwbkJmg70pvwVS8UpGA yxuRktbCle+7ffJySre0YGG+za2MMA4RUtW4+qpEmhcsoFa1O9czNR9E8ra7Vg/0 Ne3rx8RDiLJA+KceQEYAbQJsWYXH74jlSQhYwJzPKqQR93WrFJlPEGc9bZYzDOve KNgNHOA+iNII+T9YdWtJbnstQhRKecT/6r3eju7LZkbK+m6Em5xipk2/m4G0Ly57 2gbCe1RUiULTBhsGwZ9kg69lYRUx0mpOBaM+LGY481Oo0s+FQ8DN7RAQVWR+2PZr JcdrLbRnbJ+dnNFoBE06RCiVUK6eoO3eQegJzg26onyQP37+Iv3f+aUtlAY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaiJdOoLBn6EdKuxrWI8y2V9CV8wHwYDVR0j BBgwFoAU5YzqF0HMEjQhu3swEvhV8+qupiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0 MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNFQUFFQTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNThDRUExNzQxQ0MxMjM0MjFCQjdCMzAxMkY4NTVGM0VBQUVB NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1 RjNFQUFFQTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+3M5X1T/abrrfgIsjEsnRXDnfnKB0U+mOQ f9JptV4t6JFg72BSUA1bldu1skIemhfxxCYkfjtObXbDJII/WKQ1LvBavDCO3HMb iIXHDAZ+sZyCqJWiBQyXHCMMuupUpjYj/M1f92JP88R5C59e72+gUvVPdZP2Ab76 lMbWfvZPndvR7MSL9TNzmLvTbm6iGLT2mPc3PRwRC+OVii2KjwRVAUCGl16LDG9J FInAQi/DK7BpddJNRKVRiFQQphTVce6ok4bqSxlLpgdeN8DRzxWSeLO6+mbq9rsp 0rwVSEg+FexbnY+x3UkV1rVwu0SI76ZdzGUySRW5s0oyl6sNG7Y= -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:51 2026 by rpki-client