$ rpki-client -vvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft File: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft (raw, json) Hash identifier: KMQlOllkIEX/zDQZiXKzXLDwp/hN9noxgdH/ek70cvE= Subject key identifier: 18:5D:2B:ED:6A:32:39:9F:88:4F:59:36:B5:A3:53:6A:3F:C6:39:CD Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Certificate serial: 3F06B3C5D2840FA138EC12D71531D99022613CD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 02:05:06 +0000 Manifest this update: Sun 02 Aug 2026 02:00:06 +0000 Manifest next update: Mon 03 Aug 2026 05:27:06 +0000 Files and hashes: 1: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=) 2: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl (hash: JWjNwTesznbyeIU0gNTJav6nQ22ZreB9Kfq/NKw4vMI=) 3: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=) 4: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:06:b3:c5:d2:84:0f:a1:38:ec:12:d7:15:31:d9:90:22:61:3c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Validity Not Before: Aug 2 02:00:06 2026 GMT Not After : Aug 3 05:27:06 2026 GMT Subject: CN=185D2BED6A32399F884F5936B5A3536A3FC639CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:9e:23:2d:90:56:38:84:13:a8:a0:cb:f0: e2:fb:ec:46:74:f6:ea:98:be:33:90:83:cf:dc:04: 5f:4a:e9:08:e8:4d:9f:ff:da:15:a4:b3:29:e5:57: 2a:ad:10:c3:26:f7:92:b8:c8:5e:4f:e3:f8:a0:62: 1e:f2:29:7c:53:98:81:68:21:dd:6f:bc:34:10:3a: aa:c4:12:dc:42:0b:97:0c:24:65:8f:3e:bd:e9:c3: ff:c0:44:23:cb:ab:18:08:73:4a:d9:69:ff:02:23: 19:7c:3c:c6:3a:bc:26:8a:27:35:80:c4:8b:03:21: b8:7f:4f:1b:b2:e3:9a:51:84:a1:72:48:24:58:1a: 70:c5:b9:4d:74:ed:73:38:cd:05:9d:d6:7b:04:53: 93:c5:3d:76:a1:4f:15:69:08:c3:7e:dc:0c:7e:c0: 41:96:ab:9a:4a:5a:4c:0e:56:6d:67:8b:d8:70:f5: 03:f2:06:ef:bc:1b:03:89:a6:ac:c8:d0:50:36:bb: 62:8e:73:65:13:a2:0b:f9:65:e7:8f:55:4a:32:72: d8:98:a4:d5:5d:b3:36:fc:fb:1f:83:04:64:af:e1: 93:49:ca:b7:eb:bf:69:8e:a5:94:31:f7:53:7e:8c: 17:0f:01:45:63:69:90:02:bf:70:2a:85:12:9b:5a: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:2B:ED:6A:32:39:9F:88:4F:59:36:B5:A3:53:6A:3F:C6:39:CD X509v3 Authority Key Identifier: keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cb:cb:28:c6:3d:3a:81:1c:41:ad:f3:86:66:da:dc:54:ed: f0:96:6e:49:a0:18:22:47:ae:a8:63:6a:a2:4d:eb:a1:23:8c: 3b:ad:30:a9:1b:ab:56:f0:0a:31:4f:a9:a6:db:68:04:50:9b: 30:e5:9d:7e:9c:d3:db:66:ee:2a:d7:e8:5a:ad:7c:47:67:60: d7:40:41:66:39:0b:a1:d6:b7:a9:43:c9:a3:46:62:a4:78:cb: 89:46:e0:9b:fb:82:67:0a:e4:c8:00:92:19:dd:0b:53:40:e8: ef:97:4c:f2:3e:c9:86:3b:fb:34:67:cd:61:31:dd:80:e3:67: 68:de:2b:7e:6a:05:8f:b5:7d:dc:13:f2:04:03:39:33:e3:35: 51:98:51:91:75:6e:a4:8e:0c:73:bc:35:a4:84:d2:eb:12:8d: 93:9d:1b:e6:9e:82:b3:80:13:a5:53:b8:30:f9:15:d2:02:d8: 72:4e:d1:cb:a8:b5:0e:b2:08:61:28:c2:e8:2a:0e:57:5f:49: ab:04:bb:ba:5b:3b:73:67:f1:6e:fb:7c:ff:cb:fd:ee:cb:62: 71:2f:18:88:93:86:e2:f8:ef:7d:2e:99:23:4e:fa:1f:da:33: 66:20:01:84:72:56:01:74:57:48:d1:b3:a3:de:bf:5b:70:14: 30:54:f7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwazxdKED6E47BLXFTHZkCJhPNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB QTM3OUY3NTAeFw0yNjA4MDIwMjAwMDZaFw0yNjA4MDMwNTI3MDZaMDMxMTAvBgNV BAMTKDE4NUQyQkVENkEzMjM5OUY4ODRGNTkzNkI1QTM1MzZBM0ZDNjM5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbJ4jLZBWOIQTqKDL8OL77EZ0 9uqYvjOQg8/cBF9K6QjoTZ//2hWksynlVyqtEMMm95K4yF5P4/igYh7yKXxTmIFo Id1vvDQQOqrEEtxCC5cMJGWPPr3pw//ARCPLqxgIc0rZaf8CIxl8PMY6vCaKJzWA xIsDIbh/Txuy45pRhKFySCRYGnDFuU107XM4zQWd1nsEU5PFPXahTxVpCMN+3Ax+ wEGWq5pKWkwOVm1ni9hw9QPyBu+8GwOJpqzI0FA2u2KOc2UTogv5ZeePVUoyctiY pNVdszb8+x+DBGSv4ZNJyrfrv2mOpZQx91N+jBcPAUVjaZACv3AqhRKbWuSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGF0r7WoyOZ+IT1k2taNTaj/GOc0wHwYDVR0j BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2 M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5 Rjc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4 MkNBQTM3OUY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETLyyjGPTqBHEGt84Zm2txU7fCWbkmgGCJH rqhjaqJN66EjjDutMKkbq1bwCjFPqabbaARQmzDlnX6c09tm7irX6FqtfEdnYNdA QWY5C6HWt6lDyaNGYqR4y4lG4Jv7gmcK5MgAkhndC1NA6O+XTPI+yYY7+zRnzWEx 3YDjZ2jeK35qBY+1fdwT8gQDOTPjNVGYUZF1bqSODHO8NaSE0usSjZOdG+aegrOA E6VTuDD5FdIC2HJO0cuotQ6yCGEowugqDldfSasEu7pbO3Nn8W77fP/L/e7LYnEv GIiThuL4730umSNO+h/aM2YgAYRyVgF0V0jRs6Pev1twFDBU9zg= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:44 2026 by rpki-client