$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft File: A58E55B7CCE754B9CB71A0C874161981234B001D.mft (raw, json) Hash identifier: sgdzIl9fl8DmJAnfn5VNoZ0ABWgDuywa4OlmxQUKluQ= Subject key identifier: D2:4E:98:41:CD:4E:BE:21:B8:34:88:B9:50:06:85:B5:4B:ED:05:87 Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 15462F9CC851E8284DE867B583C78880A1C8E1AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft Manifest number: EA Signing time: Sat 24 Oct 2026 04:04:12 +0000 Manifest this update: Sat 24 Oct 2026 03:59:12 +0000 Manifest next update: Sun 25 Oct 2026 06:22:12 +0000 Files and hashes: 1: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=) 2: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro=) 3: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: Ff6Wy4wyEywRk6LONIzh1Zz/4K7kEOV4YAssJYfhUsI=) 4: A58E55B7CCE754B9CB71A0C874161981234B001D.crl (hash: CtR/hRAwH7JWwQ4zO2qSPpkr0FU6eH//gCwYPzen0lA=) 5: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 06:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:46:2f:9c:c8:51:e8:28:4d:e8:67:b5:83:c7:88:80:a1:c8:e1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: Oct 24 03:59:12 2026 GMT Not After : Oct 25 06:22:12 2026 GMT Subject: CN=D24E9841CD4EBE21B83488B9500685B54BED0587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:08:cf:87:c8:e7:b3:c7:77:4e:a5:95:42: 4e:0d:49:7e:26:71:1a:15:36:27:76:69:ee:39:b0: e2:70:62:9c:34:e8:3f:1f:28:e8:97:e2:6c:e5:c7: 44:35:9a:c9:f8:ce:f5:56:ae:69:25:ba:e7:ce:d8: 73:5a:44:26:8e:86:28:45:40:74:a8:f6:93:40:b5: ce:f7:da:94:a8:47:a8:fc:87:08:47:82:f0:50:20: ac:00:4e:04:cd:7b:70:08:32:00:b5:75:45:1a:d7: ba:d3:00:bc:42:36:58:1a:89:c2:a2:65:fa:a7:49: 29:36:3f:2a:49:6c:1e:b6:de:79:c0:7a:e8:d9:8d: 53:75:11:12:e7:f6:88:1d:a7:fb:45:82:ed:a5:1b: a1:ed:21:f9:da:1e:c8:33:89:01:3f:e0:21:73:7a: db:6f:99:55:db:2c:4f:7f:a0:ab:e7:e0:4f:fb:bb: f8:ff:a3:2e:f3:58:6b:57:ba:9f:18:9b:53:07:5e: 7f:dc:58:d6:46:30:e3:12:5b:3b:e6:11:6f:a9:d8: ec:fb:42:a2:87:55:8b:34:de:65:6d:9b:77:4a:53: 50:cd:93:cb:27:94:1e:50:9f:7a:0a:3d:36:78:b7: e7:90:cc:ad:99:50:d9:c1:d6:85:e4:89:ad:5f:c2: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:98:41:CD:4E:BE:21:B8:34:88:B9:50:06:85:B5:4B:ED:05:87 X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:12:a3:27:e4:c5:42:dd:a6:b7:1f:34:38:97:bf:36:84:9d: 9d:64:41:a5:fa:6c:a9:dc:c5:23:45:35:61:de:67:de:82:e4: 7c:3d:37:53:5e:17:45:1e:4b:a3:29:bb:ad:ab:41:33:42:e8: 69:39:31:a5:bf:22:54:d0:1f:5d:63:f3:27:59:27:5b:c2:6c: 2c:1d:46:5b:cb:be:ea:5f:e5:80:59:f5:87:d7:78:fc:72:c6: a4:db:1a:fc:aa:c2:f6:12:4f:1b:ad:ef:4d:93:93:4c:20:71: 7b:e9:f4:5e:a7:13:dc:ef:2f:26:e3:a9:1a:3b:e5:5f:4c:65: f6:e0:f4:2d:b7:be:1f:40:18:6c:92:f3:3f:b5:83:c0:c8:e4: a5:d8:67:b4:e8:5c:94:6a:99:d6:a0:aa:9f:ba:9e:7e:c9:09: 48:60:29:fa:91:ce:8e:5f:db:27:79:c2:fd:1a:28:59:ae:70: e0:18:b7:1c:ac:b5:b5:24:bd:d1:38:c4:02:1f:ab:58:20:50: 0d:f0:67:cc:7f:38:11:f2:d8:1c:c9:58:b8:2e:70:57:62:5e: 99:59:f9:3f:05:cc:56:c4:a6:a8:31:df:ea:66:b6:4d:16:50: 27:ef:25:a3:48:64:20:0d:8d:b8:75:0f:1b:90:5a:6c:fd:1d: 7c:b4:ab:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUYvnMhR6ChN6Ge1g8eIgKHI4a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjEwMjQwMzU5MTJaFw0yNjEwMjUwNjIyMTJaMDMxMTAvBgNV BAMTKEQyNEU5ODQxQ0Q0RUJFMjFCODM0ODhCOTUwMDY4NUI1NEJFRDA1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsQjPh8jns8d3TqWVQk4NSX4m cRoVNid2ae45sOJwYpw06D8fKOiX4mzlx0Q1msn4zvVWrmkluufO2HNaRCaOhihF QHSo9pNAtc732pSoR6j8hwhHgvBQIKwATgTNe3AIMgC1dUUa17rTALxCNlgaicKi ZfqnSSk2PypJbB623nnAeujZjVN1ERLn9ogdp/tFgu2lG6HtIfnaHsgziQE/4CFz ettvmVXbLE9/oKvn4E/7u/j/oy7zWGtXup8Ym1MHXn/cWNZGMOMSWzvmEW+p2Oz7 QqKHVYs03mVtm3dKU1DNk8snlB5Qn3oKPTZ4t+eQzK2ZUNnB1oXkia1fwtWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0k6YQc1OviG4NIi5UAaFtUvtBYcwHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5 ODEyMzRCMDAxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACESoyfkxULdprcfNDiXvzaEnZ1kQaX6bKnc xSNFNWHeZ96C5Hw9N1NeF0UeS6Mpu62rQTNC6Gk5MaW/IlTQH11j8ydZJ1vCbCwd RlvLvupf5YBZ9YfXePxyxqTbGvyqwvYSTxut702Tk0wgcXvp9F6nE9zvLybjqRo7 5V9MZfbg9C23vh9AGGyS8z+1g8DI5KXYZ7ToXJRqmdagqp+6nn7JCUhgKfqRzo5f 2yd5wv0aKFmucOAYtxystbUkvdE4xAIfq1ggUA3wZ8x/OBHy2BzJWLgucFdiXplZ +T8FzFbEpqgx3+pmtk0WUCfvJaNIZCANjbh1DxuQWmz9HXy0q1w= -----END CERTIFICATE-----Generated at Sat Oct 24 20:46:16 2026 by rpki-client