$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json) Hash identifier: tReu2wxPg3FVpazROAThCk2HkAvS7qBL8+KSfMkpO6s= Subject key identifier: A1:54:E0:F6:21:39:0D:40:C4:2C:76:4B:8A:5C:67:9C:43:17:31:A6 Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Certificate serial: 7591936234EE9CB58AC5E7DF4B5CA798DEF2A77F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 01:16:16 +0000 Manifest this update: Sat 20 Jun 2026 01:11:16 +0000 Manifest next update: Sun 21 Jun 2026 02:39:16 +0000 Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: GJStq9c8FnbFqvPI1OrZBTR7U+FJ+1VTRNM/ey7qCVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:91:93:62:34:ee:9c:b5:8a:c5:e7:df:4b:5c:a7:98:de:f2:a7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6 Validity Not Before: Jun 20 01:11:16 2026 GMT Not After : Jun 21 02:39:16 2026 GMT Subject: CN=A154E0F621390D40C42C764B8A5C679C431731A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:5a:c5:6d:f0:6e:cf:d3:6c:20:32:40:31: 5a:8c:61:6e:bf:14:d1:65:bb:b0:52:c9:d2:b3:4f: 49:b2:9a:67:80:f5:b7:05:92:49:51:18:ee:e7:ca: e8:44:93:29:63:f3:79:c7:ec:60:08:8e:c0:0e:22: 49:b8:50:67:4f:8e:5f:97:d0:4e:55:13:99:c8:00: a2:52:ca:7a:cb:55:50:30:b2:b7:98:a6:49:46:3c: b0:7e:fd:34:80:e5:41:a9:3a:00:f7:74:4e:09:2c: 65:d2:20:d5:8e:f1:1a:d1:77:fa:ab:97:44:65:71: 6a:23:21:68:c8:e5:f5:56:a6:bc:c0:e8:d8:b3:e2: 86:fe:b7:3a:e7:36:dc:0a:bb:54:1c:40:3f:97:7c: 7b:c3:bf:f5:24:eb:82:9d:87:0c:c8:97:41:11:a9: b0:9c:9d:1b:a5:0b:75:56:07:e5:a2:27:a1:d9:ad: 8a:86:db:de:30:97:4c:47:6b:22:0e:88:11:a1:71: 48:28:d1:44:b3:2c:9a:84:dd:d6:d6:e1:72:94:81: f7:9d:d1:78:a8:be:61:25:28:19:58:7d:bc:11:23: 64:7e:aa:60:0b:d3:8b:fe:21:db:7c:53:64:42:3b: b9:0e:71:b7:60:e0:6b:06:cc:c1:24:05:78:80:47: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:E0:F6:21:39:0D:40:C4:2C:76:4B:8A:5C:67:9C:43:17:31:A6 X509v3 Authority Key Identifier: keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:51:97:bb:e7:4f:c1:9e:81:85:11:f7:b7:be:3b:b0:fa:af: 56:b7:ba:9d:a1:67:75:aa:ab:de:07:62:a5:7a:c4:84:af:f8: cb:ca:d7:00:aa:02:e2:fe:5c:ca:44:31:05:dd:4b:ed:02:4e: ab:0e:3d:68:5e:cc:2a:6c:a2:96:e9:70:84:04:6b:c4:88:75: 29:30:3e:0c:c8:0a:be:00:04:90:21:ad:e2:30:09:5c:b5:76: 57:e0:b9:54:43:5e:dd:16:52:4e:49:02:1a:59:92:c4:3c:4a: 6f:1f:a6:d3:a3:61:95:0b:83:1c:99:73:1d:92:0f:de:ff:9e: d5:1b:78:55:dd:23:b4:57:3d:2e:35:0c:49:4f:19:6c:8a:cc: b2:79:40:b5:a3:cb:24:a7:65:20:75:8d:bd:94:ce:38:fc:ac: a2:b9:99:4e:fc:95:a7:70:3e:7c:7e:22:9e:f1:58:dd:e3:fe: 3f:d7:db:49:a5:b8:ef:8e:46:2a:c5:4c:ad:23:fb:dd:ab:ed: f4:e9:69:3d:00:f3:82:47:8b:b8:4d:6c:2a:24:b6:0e:59:1a: 8a:2f:c3:35:89:60:bb:60:bd:09:16:aa:ce:3e:18:79:d1:23: fd:5f:0c:81:8a:37:01:e9:ad:cf:3a:e7:c4:26:5b:7e:59:eb: 18:83:eb:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZGTYjTunLWKxeffS1ynmN7yp38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4 NTY5OTVCNjAeFw0yNjA2MjAwMTExMTZaFw0yNjA2MjEwMjM5MTZaMDMxMTAvBgNV BAMTKEExNTRFMEY2MjEzOTBENDBDNDJDNzY0QjhBNUM2NzlDNDMxNzMxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncVrFbfBuz9NsIDJAMVqMYW6/ FNFlu7BSydKzT0mymmeA9bcFkklRGO7nyuhEkylj83nH7GAIjsAOIkm4UGdPjl+X 0E5VE5nIAKJSynrLVVAwsreYpklGPLB+/TSA5UGpOgD3dE4JLGXSINWO8RrRd/qr l0RlcWojIWjI5fVWprzA6Niz4ob+tzrnNtwKu1QcQD+XfHvDv/Uk64KdhwzIl0ER qbCcnRulC3VWB+WiJ6HZrYqG294wl0xHayIOiBGhcUgo0USzLJqE3dbW4XKUgfed 0XiovmElKBlYfbwRI2R+qmAL04v+Idt8U2RCO7kOcbdg4GsGzMEkBXiAR1X7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVTg9iE5DUDELHZLilxnnEMXMaYwHwYDVR0j BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0 NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5 NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2 MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5Rl7vnT8GegYUR97e+O7D6r1a3up2hZ3Wq q94HYqV6xISv+MvK1wCqAuL+XMpEMQXdS+0CTqsOPWhezCpsopbpcIQEa8SIdSkw PgzICr4ABJAhreIwCVy1dlfguVRDXt0WUk5JAhpZksQ8Sm8fptOjYZULgxyZcx2S D97/ntUbeFXdI7RXPS41DElPGWyKzLJ5QLWjyySnZSB1jb2Uzjj8rKK5mU78ladw Pnx+Ip7xWN3j/j/X20mluO+ORirFTK0j+92r7fTpaT0A84JHi7hNbCoktg5ZGoov wzWJYLtgvQkWqs4+GHnRI/1fDIGKNwHprc8658QmW35Z6xiD6zI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:06 2026 by rpki-client