$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: dBmDh3GGXa7tx+c6pz3nKeJbs7PCJKmU1fPEyfKwpSg= Subject key identifier: 46:92:A9:11:87:B3:E8:7D:3C:3C:D9:C6:35:38:8D:0A:DC:90:FC:99 Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 6C1AF37BF72C03C22C965F16D2A3C1C85EB5880A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 20:02:21 +0000 Manifest this update: Wed 02 Sep 2026 19:57:21 +0000 Manifest next update: Thu 03 Sep 2026 21:51:21 +0000 Files and hashes: 1: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) 2: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: JZo9FgAdFHRsx7KUDIQA03AmxoRlRTtEXoMAvYSu6kc=) 3: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) 4: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 5: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1a:f3:7b:f7:2c:03:c2:2c:96:5f:16:d2:a3:c1:c8:5e:b5:88:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: Sep 2 19:57:21 2026 GMT Not After : Sep 3 21:51:21 2026 GMT Subject: CN=4692A91187B3E87D3C3CD9C635388D0ADC90FC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:00:f9:26:49:6c:96:c8:eb:b9:2e:c5:20: 8a:cc:08:30:24:74:f8:c8:1e:d3:12:e4:dc:0d:7f: 84:df:7e:79:af:33:16:2a:92:a0:9f:10:8e:19:36: 7b:88:e1:fb:f3:cc:bb:e8:d5:69:1e:24:e9:e2:b6: 66:75:c9:72:5e:b0:fe:ea:cb:5a:f5:28:e3:ca:78: a6:38:6a:44:b6:f6:6e:da:6d:d1:51:d7:e1:cf:3b: 43:23:53:f5:c1:b0:f1:51:b9:98:e5:63:86:cd:0c: 66:62:de:30:fd:51:75:03:4d:85:3f:ab:c4:ec:1c: 95:85:27:ca:cd:91:c0:d9:f2:b7:33:6b:20:53:67: 99:62:0a:fd:e9:c8:36:fd:f8:29:34:7b:55:95:bd: 65:36:4a:4d:03:51:05:98:55:c2:eb:66:18:a6:61: 55:02:aa:7e:1d:29:af:98:0d:4e:f7:3c:5c:f5:de: 74:63:89:a7:c7:96:29:c1:37:03:e7:e9:cc:59:ec: d1:73:cb:c6:6b:b4:9b:8f:b2:13:6e:d8:ef:99:ac: 1e:2e:32:36:92:0f:4d:13:2d:36:b3:26:4a:ef:39: 68:b2:db:1e:21:1c:51:b5:cf:ca:61:f5:a9:84:5b: 49:42:93:10:0b:ea:d2:7a:53:aa:00:20:a4:ed:09: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:92:A9:11:87:B3:E8:7D:3C:3C:D9:C6:35:38:8D:0A:DC:90:FC:99 X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:42:c8:88:15:9a:6e:5e:6b:49:5f:1d:73:b9:5f:ea:a5: 37:5b:75:01:3a:3a:fa:e4:35:6b:c9:07:6d:3e:51:a8:2a:bb: 0f:b1:00:1d:ec:e3:05:c5:26:5d:7e:e3:a4:de:67:dd:0f:3e: 18:04:23:e6:02:c1:89:fd:7b:a7:79:d3:ee:3c:17:fd:62:d3: 83:12:20:49:8e:e1:a1:03:47:fa:5a:9e:36:76:f3:45:24:72: a5:4b:f5:7f:f2:8c:c0:e8:00:27:3f:5a:b5:23:61:16:88:51: 56:da:80:b9:50:fa:15:38:31:63:2a:8d:2f:22:4f:76:20:ca: b5:e6:a3:c3:1a:d2:98:d7:dc:99:f5:c3:18:ff:78:3b:17:62: 4b:de:6a:26:81:8c:b1:b8:22:8a:00:7a:3a:a6:4b:3c:4f:c1: 2f:6c:4b:ce:b9:da:13:9e:c1:5c:e9:83:bc:ad:b0:54:d3:6d: 68:df:dd:b3:a8:96:21:98:07:ac:d9:c2:e1:ef:8f:f0:bc:cd: a5:b7:d3:27:a8:35:d9:8c:a8:e6:91:14:8f:cf:e6:1a:53:d6: 95:96:70:3e:1a:7b:8b:4f:ad:d9:d4:6e:71:a8:8a:82:d0:7d: 27:2f:46:f9:94:be:92:36:74:47:c3:bb:7b:e8:09:1a:e6:11: c2:e3:e2:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBrze/csA8Isll8W0qPByF61iAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA5MDIxOTU3MjFaFw0yNjA5MDMyMTUxMjFaMDMxMTAvBgNV BAMTKDQ2OTJBOTExODdCM0U4N0QzQzNDRDlDNjM1Mzg4RDBBREM5MEZDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jgD5JklslsjruS7FIIrMCDAk dPjIHtMS5NwNf4TffnmvMxYqkqCfEI4ZNnuI4fvzzLvo1WkeJOnitmZ1yXJesP7q y1r1KOPKeKY4akS29m7abdFR1+HPO0MjU/XBsPFRuZjlY4bNDGZi3jD9UXUDTYU/ q8TsHJWFJ8rNkcDZ8rczayBTZ5liCv3pyDb9+Ck0e1WVvWU2Sk0DUQWYVcLrZhim YVUCqn4dKa+YDU73PFz13nRjiafHlinBNwPn6cxZ7NFzy8ZrtJuPshNu2O+ZrB4u MjaSD00TLTazJkrvOWiy2x4hHFG1z8ph9amEW0lCkxAL6tJ6U6oAIKTtCS3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURpKpEYez6H08PNnGNTiNCtyQ/JkwHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaxQsiIFZpuXmtJXx1zuV/qpTdbdQE6Ovrk NWvJB20+Uagquw+xAB3s4wXFJl1+46TeZ90PPhgEI+YCwYn9e6d50+48F/1i04MS IEmO4aEDR/panjZ280UkcqVL9X/yjMDoACc/WrUjYRaIUVbagLlQ+hU4MWMqjS8i T3YgyrXmo8Ma0pjX3Jn1wxj/eDsXYkveaiaBjLG4IooAejqmSzxPwS9sS8652hOe wVzpg7ytsFTTbWjf3bOoliGYB6zZwuHvj/C8zaW30yeoNdmMqOaRFI/P5hpT1pWW cD4ae4tPrdnUbnGoioLQfScvRvmUvpI2dEfDu3voCRrmEcLj4lg= -----END CERTIFICATE-----Generated at Thu Sep 3 03:14:04 2026 by rpki-client