
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
File: 58775F16B86C66299D9AF904F73786CD365D8787.mft (raw, json)
Hash identifier: 7nF+fr0YO1j8OKwHb5KQ2z9EOLrWRgryOje8rY6NkB4=
Subject key identifier: 0F:C1:C2:A0:94:38:8D:B6:96:9E:26:92:6E:5A:7D:6E:B5:2E:A9:48
Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787
Certificate serial: 0A311A7BB38B6B5094880B1AE0D8F356C02A3500
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 09:57:11 +0000
Manifest this update: Thu 23 Jul 2026 09:52:11 +0000
Manifest next update: Fri 24 Jul 2026 10:37:11 +0000
Files and hashes: 1: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: g14LcNrrW54yrzbA/vRmcLiMXBlSRO/YFYlVg+H2Jjk=)
2: 58775F16B86C66299D9AF904F73786CD365D8787.crl (hash: yiYCnaZaf4gfc81zQb/bCaCG24xFG3w8uBl1jwp2wu8=)
3: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: 8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=)
4: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=)
5: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o=)
6: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:31:1a:7b:b3:8b:6b:50:94:88:0b:1a:e0:d8:f3:56:c0:2a:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787
Validity
Not Before: Jul 23 09:52:11 2026 GMT
Not After : Jul 24 10:37:11 2026 GMT
Subject: CN=0FC1C2A094388DB6969E26926E5A7D6EB52EA948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:a3:a6:af:8b:28:f7:01:f7:d3:01:b1:a2:
dc:4f:c5:5f:2d:e9:19:bd:65:c5:8c:67:49:2a:8f:
f9:99:a2:b7:ab:a8:10:85:57:d3:7e:85:aa:64:c9:
2b:5e:4f:97:a4:4c:28:00:57:c1:36:5f:1c:6c:b7:
ae:85:56:1a:af:fb:9d:f2:c6:19:7c:26:01:06:9f:
90:24:4f:fe:80:df:db:15:25:53:4a:b1:09:d2:0a:
09:4f:7c:5e:51:d0:0e:01:de:45:1d:41:8a:fb:5e:
87:c3:60:12:b6:59:d6:c7:b7:94:da:04:6f:5b:bc:
c5:4c:a5:e8:11:63:d7:62:54:99:eb:d1:5d:73:93:
57:87:d1:5c:12:24:ae:7b:d4:38:e0:77:fd:64:3e:
58:85:be:d3:e6:6d:98:20:81:d7:00:ee:3f:5a:89:
b3:7b:49:7a:80:e5:8e:16:35:60:b6:4f:3d:b1:73:
3b:56:16:fe:48:9c:93:26:14:e3:2b:70:cb:6b:8c:
12:fe:e6:9c:6c:80:53:49:21:77:44:92:44:f8:f0:
78:e6:47:80:1c:dc:a4:80:2b:78:14:99:e5:2c:0b:
2d:e5:0d:14:05:56:bc:c2:f3:54:a4:09:e0:7a:b2:
f8:c3:cc:65:f5:a1:14:50:7b:84:96:ca:0b:ab:9c:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:C2:A0:94:38:8D:B6:96:9E:26:92:6E:5A:7D:6E:B5:2E:A9:48
X509v3 Authority Key Identifier:
keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:eb:ae:61:3f:cb:1d:8d:4d:4a:62:e0:02:fa:14:44:b1:2b:
96:3d:f5:20:86:4f:6f:67:5e:f0:3e:9d:cb:47:e8:4a:ad:8e:
58:45:d5:e1:79:7b:d4:a2:07:7e:09:dd:92:65:84:c6:b5:8a:
ec:8c:fa:92:a0:fe:94:9b:1f:c6:d5:c9:40:0f:47:7c:4f:9f:
78:c5:33:30:58:90:4f:0c:84:e8:c6:cb:90:b6:dc:65:0c:36:
94:b8:ea:9b:07:9e:05:49:32:7f:9f:ee:39:57:4d:a6:2e:40:
0e:08:95:bc:ae:b1:ed:c6:1a:ed:44:61:7c:3b:d5:c7:89:30:
a6:57:68:0c:74:96:c8:dd:0a:00:d0:fa:92:2b:2d:f0:27:2a:
c6:d8:cd:0d:2f:13:10:3e:a9:48:ef:bb:1e:31:1f:00:f7:bf:
1b:1e:7a:51:39:d9:fc:55:65:89:ae:f5:00:2d:0b:25:42:52:
6b:a8:57:4d:46:f6:53:32:c1:91:02:8b:05:63:dd:28:da:0f:
cc:fc:5c:66:9c:f8:e7:1b:a0:64:ba:cb:1a:d8:f1:64:c1:0b:
06:3d:b9:06:85:31:46:7c:c2:3a:7c:db:02:ca:38:ff:a4:01:
61:ef:d8:75:9a:0a:ba:46:4f:b8:9e:8c:64:46:e0:21:35:f6:
54:34:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:43 2026 by rpki-client