
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
File: 58775F16B86C66299D9AF904F73786CD365D8787.mft (raw, json)
Hash identifier: G3gwQKvP257pWy3SjGE1xYX9GqcDpYlxT0GUSO/7BJA=
Subject key identifier: 50:BF:4D:AB:64:D3:7D:FA:F1:8F:BE:57:16:55:9B:E6:1E:D4:4C:9D
Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787
Certificate serial: 7EFF4D62E0331FD32634766E885B7E23DCAE1821
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 04:46:33 +0000
Manifest this update: Thu 24 Sep 2026 04:41:33 +0000
Manifest next update: Fri 25 Sep 2026 06:02:33 +0000
Files and hashes: 1: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o=)
2: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=)
3: 58775F16B86C66299D9AF904F73786CD365D8787.crl (hash: GZcuQC6mRk9P0EEseEkpjzKQjJ+l39Lt1/cHJyA44W4=)
4: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: 8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=)
5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c=)
6: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: g14LcNrrW54yrzbA/vRmcLiMXBlSRO/YFYlVg+H2Jjk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 06:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ff:4d:62:e0:33:1f:d3:26:34:76:6e:88:5b:7e:23:dc:ae:18:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787
Validity
Not Before: Sep 24 04:41:33 2026 GMT
Not After : Sep 25 06:02:33 2026 GMT
Subject: CN=50BF4DAB64D37DFAF18FBE5716559BE61ED44C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:1b:d4:70:71:ff:7e:7d:53:3d:22:79:95:
5a:02:8b:91:54:ef:b9:c5:a5:6b:45:de:a1:e5:d8:
81:d9:5a:85:1f:00:27:33:93:d0:4e:9f:75:5f:2e:
4c:4a:54:da:24:7a:81:cb:98:14:27:13:d0:46:ac:
64:9a:ff:17:4e:5c:57:5f:66:6d:21:b6:db:0c:57:
a9:b3:1d:57:44:16:63:3f:45:94:57:47:3f:5d:a1:
32:3f:30:39:56:5c:7e:74:d7:03:08:a5:67:95:dc:
71:9f:1c:d9:18:7b:85:f9:65:d6:cd:05:c7:dd:49:
2b:27:76:31:c4:02:c8:9b:60:fc:dc:74:3f:76:13:
a1:8d:a7:ec:46:d6:1f:69:36:37:7a:f7:82:31:cf:
43:8d:9a:a6:04:61:8f:ba:6e:71:c4:76:77:ac:9c:
aa:ff:96:e5:03:76:94:11:5b:f0:51:8e:3f:0c:4a:
e8:a2:02:2b:78:c3:57:d6:5c:9a:8d:79:e2:61:9e:
a0:5e:12:00:59:b4:c7:bf:fb:1c:e2:35:98:46:2b:
ed:4d:a5:a0:37:58:38:f8:ff:a2:c9:c5:6a:80:6d:
eb:05:93:43:f8:f4:00:72:7c:54:7b:a2:54:08:d2:
5e:d5:85:a6:40:b6:eb:24:18:5b:d4:fe:cc:54:40:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:4D:AB:64:D3:7D:FA:F1:8F:BE:57:16:55:9B:E6:1E:D4:4C:9D
X509v3 Authority Key Identifier:
keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0a:40:a8:43:d4:7e:a4:b6:9c:97:9f:44:56:77:36:c3:48:
51:66:df:99:a6:ea:f9:58:d9:4f:5c:4e:19:4f:3a:56:9a:7e:
2b:03:dd:10:00:62:64:fa:a1:21:4b:c6:3a:3b:a7:99:54:64:
42:6a:99:38:f2:17:a9:eb:e7:66:2c:38:f5:e2:2e:8d:a2:a7:
ff:81:ba:19:d2:3c:ea:61:5c:ad:31:c5:95:a0:84:4d:b6:90:
04:d6:9d:7b:4c:d4:82:86:a8:64:30:e3:ed:5a:5e:90:be:c8:
9d:d7:79:5a:1e:b3:eb:c1:34:24:84:72:87:92:90:27:58:76:
ce:a5:6c:d5:01:03:e5:32:55:db:3f:a1:b5:b3:6a:4e:96:20:
31:28:1b:64:04:82:83:90:8b:85:fc:6f:66:39:17:b8:0d:08:
ff:01:4e:3b:94:03:08:e7:ad:55:ac:c5:ec:0c:82:be:e4:79:
33:8d:f1:48:0a:ef:c0:aa:97:ff:21:da:0d:31:65:6d:08:8b:
8d:35:7f:0e:93:4b:bb:d3:a5:af:b1:4c:ce:7b:f3:0b:af:13:
36:ec:de:97:f5:3f:07:c6:73:37:08:61:6e:5c:0a:70:ec:5d:
27:b3:6b:ef:9b:53:52:d0:fb:2f:78:cc:a5:6f:a0:15:af:7c:
35:f0:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:12:49 2026 by rpki-client