$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft File: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft (raw, json) Hash identifier: xJ0PvjFYNgeAk24fwh6VzqHR2jrADhw9Kw1AlHn7fVs= Subject key identifier: 92:A0:1E:49:41:7E:48:8C:AD:81:79:9E:80:5A:BF:79:6C:33:4F:EC Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Certificate serial: 2E815D160728B276161F1F7D6DE1E02C9D6791FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 08:28:02 +0000 Manifest this update: Mon 02 Nov 2026 08:23:02 +0000 Manifest next update: Tue 03 Nov 2026 09:41:02 +0000 Files and hashes: 1: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=) 2: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl (hash: SvaeDjb9ucO2RWydKigEkBA5GGYK35VaK6RdJgZj1jc=) 3: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=) 4: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:81:5d:16:07:28:b2:76:16:1f:1f:7d:6d:e1:e0:2c:9d:67:91:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Validity Not Before: Nov 2 08:23:02 2026 GMT Not After : Nov 3 09:41:02 2026 GMT Subject: CN=92A01E49417E488CAD81799E805ABF796C334FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:14:b5:8b:5f:4f:2d:03:78:b9:18:ed:b1:44: 90:b4:eb:20:49:43:82:b7:a8:7b:d0:d2:56:52:d0: 92:77:05:66:38:75:3b:9c:3f:38:6c:e7:cf:d8:60: d9:38:38:f5:46:f6:dc:74:e4:94:5a:6b:9c:2b:f3: 97:ff:93:7c:3d:e9:6d:fc:4e:c9:65:8d:b4:bc:38: da:a3:b4:eb:ab:89:41:ac:f7:4a:a9:a5:ca:6a:72: 6e:4c:34:67:73:25:99:24:66:60:c3:3b:98:01:6f: a7:1f:b0:80:c1:9b:ce:75:f6:6b:7a:15:ce:90:39: a9:a3:43:2a:4f:0c:78:ab:33:f7:d1:8b:7f:1b:e8: bb:db:40:aa:32:7f:33:35:7b:9e:22:af:63:26:89: b5:4a:f0:32:aa:1c:90:e8:50:e2:6e:65:98:18:6d: cd:46:69:3a:9c:69:ac:aa:ba:6d:0d:9b:be:2b:60: b7:09:79:b3:0a:0b:b7:1f:39:03:7a:30:88:23:92: dc:8d:74:cb:2b:ed:ae:98:d3:c7:de:23:41:a8:e1: 38:88:e6:03:a8:df:d0:ba:e2:0a:90:e2:7c:7c:d8: 42:84:bb:9c:15:2b:2e:4b:fe:f9:32:4b:f8:1b:4a: 66:f0:61:04:f0:2c:bd:34:a9:ae:55:96:70:0a:0a: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A0:1E:49:41:7E:48:8C:AD:81:79:9E:80:5A:BF:79:6C:33:4F:EC X509v3 Authority Key Identifier: keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:38:c0:66:b7:99:ea:f6:80:54:a0:dd:66:e1:71:56:b8:20: 81:5a:f1:1d:da:b4:0b:56:af:03:bd:cc:a9:cd:ba:de:8e:fc: 5b:88:37:72:72:cc:b5:e9:e8:ef:24:f7:56:12:ad:60:68:d7: 90:c0:b4:81:48:37:ac:48:3c:7a:9f:42:96:da:20:de:f8:f0: 2a:14:00:64:08:9e:e9:79:37:5d:10:7c:6d:f5:18:88:9f:e9: e2:7a:fb:bb:2e:b8:a6:b4:8f:27:23:d6:1b:7a:71:47:9e:bb: 2d:48:f5:53:32:20:e1:ab:64:2b:07:b0:28:d7:36:1c:da:2f: 63:ab:1c:93:9e:52:b9:c1:e6:00:e8:1a:21:46:d5:40:6d:29: ae:02:e7:b1:80:af:e5:ca:ea:ce:fb:41:59:83:d2:2d:c9:7d: f2:12:cf:ac:f3:26:c6:b8:21:5b:8b:39:8f:a8:fd:5b:d4:79: f4:bc:5e:cd:3d:2d:68:ce:1d:d8:7f:1b:e2:5b:b1:42:83:86: 41:89:6a:1e:56:52:9f:21:b6:e2:1b:f6:36:ed:dc:8b:f1:5a: ac:c0:2b:6b:d9:4f:e8:bf:f8:f7:43:3f:f8:b7:7a:21:17:52: be:3d:9b:0d:6d:db:44:09:cf:73:bd:b3:ae:be:18:bf:68:e8: bd:53:db:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoFdFgcosnYWHx99beHgLJ1nkfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB QTM3OUY3NTAeFw0yNjExMDIwODIzMDJaFw0yNjExMDMwOTQxMDJaMDMxMTAvBgNV BAMTKDkyQTAxRTQ5NDE3RTQ4OENBRDgxNzk5RTgwNUFCRjc5NkMzMzRGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FLWLX08tA3i5GO2xRJC06yBJ Q4K3qHvQ0lZS0JJ3BWY4dTucPzhs58/YYNk4OPVG9tx05JRaa5wr85f/k3w96W38 TslljbS8ONqjtOuriUGs90qppcpqcm5MNGdzJZkkZmDDO5gBb6cfsIDBm8519mt6 Fc6QOamjQypPDHirM/fRi38b6LvbQKoyfzM1e54ir2MmibVK8DKqHJDoUOJuZZgY bc1GaTqcaayqum0Nm74rYLcJebMKC7cfOQN6MIgjktyNdMsr7a6Y08feI0Go4TiI 5gOo39C64gqQ4nx82EKEu5wVKy5L/vkyS/gbSmbwYQTwLL00qa5VlnAKCgM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkqAeSUF+SIytgXmegFq/eWwzT+wwHwYDVR0j BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2 M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5 Rjc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4 MkNBQTM3OUY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKs4wGa3mer2gFSg3WbhcVa4IIFa8R3atAtW rwO9zKnNut6O/FuIN3JyzLXp6O8k91YSrWBo15DAtIFIN6xIPHqfQpbaIN748CoU AGQInul5N10QfG31GIif6eJ6+7suuKa0jycj1ht6cUeeuy1I9VMyIOGrZCsHsCjX NhzaL2OrHJOeUrnB5gDoGiFG1UBtKa4C57GAr+XK6s77QVmD0i3JffISz6zzJsa4 IVuLOY+o/VvUefS8Xs09LWjOHdh/G+JbsUKDhkGJah5WUp8htuIb9jbt3IvxWqzA K2vZT+i/+PdDP/i3eiEXUr49mw1t20QJz3O9s66+GL9o6L1T24E= -----END CERTIFICATE-----Generated at Tue Nov 3 03:54:21 2026 by rpki-client