$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft File: E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json) Hash identifier: 1+BaoaSqi5hMok8T2Ijeu8CaBXAfyb6cXOQR8DdxjAw= Subject key identifier: 14:8F:DE:A1:C9:29:2D:1F:13:6F:61:66:4C:62:37:E4:E0:DA:F2:33 Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 Certificate issuer: /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Certificate serial: 7BC2E5800A8A100209F70A2B6FB7A81651D197BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 17:14:22 +0000 Manifest this update: Mon 02 Nov 2026 17:09:22 +0000 Manifest next update: Tue 03 Nov 2026 17:19:22 +0000 Files and hashes: 1: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: hqwsy1J45PB2XqDmd50V22nsJ4oKwxyfv9p07f2FN8A=) 2: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c2:e5:80:0a:8a:10:02:09:f7:0a:2b:6f:b7:a8:16:51:d1:97:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625 Validity Not Before: Nov 2 17:09:22 2026 GMT Not After : Nov 3 17:19:22 2026 GMT Subject: CN=148FDEA1C9292D1F136F61664C6237E4E0DAF233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:3f:6c:b9:56:40:78:f5:b5:26:2e:74:70: a3:c3:69:d5:53:9f:e1:00:fc:8b:d8:9e:6b:fc:f3: ed:e8:88:53:b5:01:07:f0:6f:a5:50:80:50:43:8f: 24:9b:e1:61:f0:47:db:89:69:11:cf:95:fb:46:59: e5:19:59:a2:4c:40:e2:9a:08:24:5c:89:f7:ac:a9: 67:38:94:ae:b6:a6:ba:e8:98:0b:76:eb:b4:8f:b2: 9c:c2:59:1b:3d:61:94:24:be:cb:a1:66:68:36:1e: a3:b4:c6:3c:68:4a:44:05:30:11:e8:6b:50:f2:79: e7:de:38:50:aa:d9:04:b3:b8:d8:f2:1e:98:dd:73: fe:9b:2d:50:ec:93:46:cc:3e:dc:fb:29:35:6d:74: ae:52:98:19:5f:75:36:b7:b6:7f:95:c0:f5:2d:8f: 98:3d:e9:18:1f:6d:3c:7b:ab:9d:6a:40:fd:a9:e3: f4:04:b9:91:cf:b9:40:1f:93:40:20:c4:5e:21:4b: 39:67:c8:6a:5c:6a:ee:3d:af:17:e6:78:a8:ea:0d: 0a:c1:07:90:4f:19:6c:ad:ab:68:a4:20:81:77:b4: 2a:0e:02:7e:da:58:3a:ec:b2:7d:aa:62:49:f2:6e: b0:a1:c5:74:e9:5e:4d:91:c5:6a:3a:31:27:fb:3a: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:DE:A1:C9:29:2D:1F:13:6F:61:66:4C:62:37:E4:E0:DA:F2:33 X509v3 Authority Key Identifier: keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d1:32:5b:1a:b9:6d:6e:e0:43:4b:d6:6b:4b:fa:93:47:f5: 0c:57:9d:0e:65:7d:7b:75:66:62:3c:2b:0e:1e:39:d8:5c:8d: 64:0f:51:20:aa:53:78:37:e3:ac:8a:bf:3f:b1:3d:39:15:f5: f0:56:91:c1:1f:cb:d1:47:d3:ee:f7:17:df:1d:6a:3a:53:3e: db:b5:29:51:e3:dc:d5:ac:4d:82:ac:a1:3b:c5:65:89:c1:b0: d4:bc:44:67:eb:bd:c6:dc:3b:78:bc:0b:6b:3e:9e:e4:40:6d: 82:69:64:22:58:22:13:53:03:1b:32:ee:06:b1:77:d8:16:ab: 3c:58:b6:f2:88:29:6d:e6:39:ef:25:4d:35:e1:31:61:6f:08: 25:51:38:67:5e:71:2a:9d:ca:ad:4f:5f:8a:70:af:b0:a3:13: f9:bf:c7:32:3f:d0:e9:12:7a:0d:02:84:e7:57:b2:5e:ac:5a: 9a:ed:0f:57:2e:5a:52:23:c8:41:bc:b7:d9:cf:97:e0:3f:dd: e9:5f:4b:a5:96:a0:67:db:fe:57:c2:92:1d:8e:b5:cc:47:47: d7:03:e6:f6:82:42:23:1f:fb:8b:ef:e9:3d:42:3c:2d:32:a3: d8:f4:37:16:56:02:b6:4c:13:69:12:1f:17:f4:7c:69:ea:41: 8b:cc:7e:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8LlgAqKEAIJ9worb7eoFlHRl7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNF QUFFQTYyNTAeFw0yNjExMDIxNzA5MjJaFw0yNjExMDMxNzE5MjJaMDMxMTAvBgNV BAMTKDE0OEZERUExQzkyOTJEMUYxMzZGNjE2NjRDNjIzN0U0RTBEQUYyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBT9suVZAePW1Ji50cKPDadVT n+EA/IvYnmv88+3oiFO1AQfwb6VQgFBDjySb4WHwR9uJaRHPlftGWeUZWaJMQOKa CCRcifesqWc4lK62prromAt267SPspzCWRs9YZQkvsuhZmg2HqO0xjxoSkQFMBHo a1DyeefeOFCq2QSzuNjyHpjdc/6bLVDsk0bMPtz7KTVtdK5SmBlfdTa3tn+VwPUt j5g96RgfbTx7q51qQP2p4/QEuZHPuUAfk0AgxF4hSzlnyGpcau49rxfmeKjqDQrB B5BPGWytq2ikIIF3tCoOAn7aWDrssn2qYknybrChxXTpXk2RxWo6MSf7OoLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFI/eockpLR8Tb2FmTGI35ODa8jMwHwYDVR0j BBgwFoAU5YzqF0HMEjQhu3swEvhV8+qupiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0 MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNFQUFFQTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNThDRUExNzQxQ0MxMjM0MjFCQjdCMzAxMkY4NTVGM0VBQUVB NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1 RjNFQUFFQTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDRMlsauW1u4ENL1mtL+pNH9QxXnQ5lfXt1 ZmI8Kw4eOdhcjWQPUSCqU3g346yKvz+xPTkV9fBWkcEfy9FH0+73F98dajpTPtu1 KVHj3NWsTYKsoTvFZYnBsNS8RGfrvcbcO3i8C2s+nuRAbYJpZCJYIhNTAxsy7gax d9gWqzxYtvKIKW3mOe8lTTXhMWFvCCVROGdecSqdyq1PX4pwr7CjE/m/xzI/0OkS eg0ChOdXsl6sWprtD1cuWlIjyEG8t9nPl+A/3elfS6WWoGfb/lfCkh2OtcxHR9cD 5vaCQiMf+4vv6T1CPC0yo9j0NxZWArZME2kSHxf0fGnqQYvMfhQ= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:24 2026 by rpki-client