$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json) Hash identifier: rIw8c5VRIE+ltk74H7LDBiWIpOvOw3Z76pdWHYt9fuw= Subject key identifier: 52:CE:DC:CF:57:A3:DF:3C:EF:57:05:CB:64:D8:30:19:0C:07:58:E0 Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Certificate serial: 76FBAA931AF8D36DC27662489A3F01308176E1E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:05:18 +0000 Manifest this update: Wed 16 Sep 2026 17:00:18 +0000 Manifest next update: Thu 17 Sep 2026 20:07:18 +0000 Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: 9V0LaX1d4GK0oMKUD9Oo0Lk2DXNAkoGVkxFfeCE20DM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fb:aa:93:1a:f8:d3:6d:c2:76:62:48:9a:3f:01:30:81:76:e1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Validity Not Before: Sep 16 17:00:18 2026 GMT Not After : Sep 17 20:07:18 2026 GMT Subject: CN=52CEDCCF57A3DF3CEF5705CB64D830190C0758E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:10:08:bc:b8:e4:92:02:bc:58:68:aa:63: fa:71:64:2c:61:e6:07:e4:b7:c9:a1:4c:22:fe:f8: b5:4d:0e:92:cb:1b:85:9d:76:c5:e0:7a:01:cb:4e: 37:9e:d1:a5:21:e9:78:56:fe:32:01:ad:ec:9c:11: 60:4e:46:28:54:fc:4b:20:dd:46:42:4f:8f:ef:1d: c2:d2:53:b7:71:ee:6c:0e:9f:6f:d7:d0:3f:6b:c0: 86:53:53:b6:00:9d:04:64:f0:42:5d:e9:40:06:9d: c1:42:8b:0a:66:a1:1f:e3:b6:4a:78:ee:89:15:13: 1a:3b:4b:91:80:2d:3b:0e:21:89:96:dc:2c:df:77: f4:62:09:d1:90:cb:92:b8:96:3a:84:ea:e2:a3:d8: c3:ca:a5:78:75:e6:f0:18:8c:d9:d9:b8:18:4d:e8: d6:3f:13:10:57:f6:10:a8:db:03:a2:7b:ed:38:64: 1e:16:20:a9:ff:26:37:2d:01:25:38:c9:b8:ca:e1: f8:82:08:7e:eb:f5:7e:9c:c6:d2:1a:fa:45:e2:c9: 7d:8e:5a:12:ef:ce:77:12:24:08:6e:5b:94:41:ed: 6d:90:d0:1d:8f:92:04:0e:77:9b:8d:dc:e6:0a:21: 44:bd:96:cd:11:fc:49:47:8a:87:16:31:98:79:69: 65:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:DC:CF:57:A3:DF:3C:EF:57:05:CB:64:D8:30:19:0C:07:58:E0 X509v3 Authority Key Identifier: keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:13:44:95:36:0f:1f:e4:24:07:5a:40:ec:09:4f:64:1d:dc: 0d:69:25:f6:72:92:c6:1f:9e:68:d5:97:23:7f:1f:a8:87:c7: 48:20:73:de:00:de:85:eb:15:b8:1f:d7:75:2a:ef:70:48:03: ea:b1:8c:ce:3c:3f:37:08:5a:3d:ed:4e:00:57:57:d2:3e:66: 7c:da:38:66:21:a0:50:71:64:e0:3e:d1:37:6b:b4:43:6e:e2: 00:36:71:c7:8e:08:c9:6d:e6:5d:2f:d3:c9:60:a9:33:e4:12: 92:3e:cb:5a:b8:fa:16:b3:85:57:04:8c:9f:25:51:8a:07:50: f1:00:6e:5e:3a:50:44:01:65:d7:20:16:0c:d5:60:71:a7:59: fc:21:54:e7:f3:67:e8:3e:81:14:26:53:d1:a0:a8:fb:d5:26: 96:0f:4a:f1:33:87:00:34:39:a5:a2:69:9c:f1:cc:98:03:b8: 43:de:9c:08:37:5a:94:25:bd:ca:89:56:2f:ed:ca:92:a8:ed: 27:bd:21:a6:c3:c2:0b:2e:3c:51:5b:69:13:d8:47:7f:08:77: ea:f9:7a:69:93:b2:c0:e5:42:0a:ca:e1:c7:70:c3:33:6f:b2: bc:ce:74:c4:d0:f1:89:6b:8f:ba:2f:6f:69:be:81:23:50:58: c4:2e:48:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvuqkxr4023CdmJImj8BMIF24eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4 NTY5OTVCNjAeFw0yNjA5MTYxNzAwMThaFw0yNjA5MTcyMDA3MThaMDMxMTAvBgNV BAMTKDUyQ0VEQ0NGNTdBM0RGM0NFRjU3MDVDQjY0RDgzMDE5MEMwNzU4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqBAIvLjkkgK8WGiqY/pxZCxh 5gfkt8mhTCL++LVNDpLLG4WddsXgegHLTjee0aUh6XhW/jIBreycEWBORihU/Esg 3UZCT4/vHcLSU7dx7mwOn2/X0D9rwIZTU7YAnQRk8EJd6UAGncFCiwpmoR/jtkp4 7okVExo7S5GALTsOIYmW3Czfd/RiCdGQy5K4ljqE6uKj2MPKpXh15vAYjNnZuBhN 6NY/ExBX9hCo2wOie+04ZB4WIKn/JjctASU4ybjK4fiCCH7r9X6cxtIa+kXiyX2O WhLvzncSJAhuW5RB7W2Q0B2PkgQOd5uN3OYKIUS9ls0R/ElHiocWMZh5aWUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUs7cz1ej3zzvVwXLZNgwGQwHWOAwHwYDVR0j BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0 NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5 NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2 MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYTRJU2Dx/kJAdaQOwJT2Qd3A1pJfZyksYf nmjVlyN/H6iHx0ggc94A3oXrFbgf13Uq73BIA+qxjM48PzcIWj3tTgBXV9I+Znza OGYhoFBxZOA+0TdrtENu4gA2cceOCMlt5l0v08lgqTPkEpI+y1q4+hazhVcEjJ8l UYoHUPEAbl46UEQBZdcgFgzVYHGnWfwhVOfzZ+g+gRQmU9GgqPvVJpYPSvEzhwA0 OaWiaZzxzJgDuEPenAg3WpQlvcqJVi/typKo7Se9IabDwgsuPFFbaRPYR38Id+r5 emmTssDlQgrK4cdwwzNvsrzOdMTQ8Ylrj7ovb2m+gSNQWMQuSKg= -----END CERTIFICATE-----Generated at Thu Sep 17 10:48:33 2026 by rpki-client