
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft
File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json)
Hash identifier: PythTJ1L9PNivXCwedFkv8pOKozqc4VNzXL+DIe654s=
Subject key identifier: 03:EC:69:94:D2:62:51:65:00:05:49:AD:FF:88:22:F2:47:63:8C:6A
Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49
Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49
Certificate serial: 4949051EC16EE647122F43919114697C749A9741
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft
Manifest number: C6
Signing time: Mon 28 Sep 2026 15:13:30 +0000
Manifest this update: Mon 28 Sep 2026 15:08:30 +0000
Manifest next update: Tue 29 Sep 2026 18:59:30 +0000
Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: hR8vZYoJsI63uhw01qi7ZdGMCawYHVX8Ki7v+1QGr/Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl
rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:49:05:1e:c1:6e:e6:47:12:2f:43:91:91:14:69:7c:74:9a:97:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49
Validity
Not Before: Sep 28 15:08:30 2026 GMT
Not After : Sep 29 18:59:30 2026 GMT
Subject: CN=03EC6994D2625165000549ADFF8822F247638C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:68:46:96:6a:a6:5f:dd:1e:c1:a2:ab:6c:
e9:70:4d:ca:08:4b:e8:e0:26:a5:e8:fa:be:79:46:
69:f3:b4:81:1f:e2:4a:ff:f5:0b:83:ef:96:17:eb:
13:bc:b1:cc:a6:ca:ba:0f:38:55:b8:93:b5:23:0c:
ca:80:bf:23:58:a4:fc:4d:67:c2:77:80:7c:b4:d3:
57:d5:93:30:e5:f8:28:01:eb:fe:a6:a5:ac:41:3b:
ae:e3:1c:ec:cf:a5:8d:25:fe:d4:0f:ab:33:bc:43:
70:a8:33:d7:8c:89:d2:74:01:74:78:18:bd:65:56:
02:ef:4d:e0:3b:d1:f9:1f:f7:26:7c:02:8b:7a:00:
45:70:65:35:85:01:ff:09:a8:a0:6c:51:24:9c:d1:
9e:a0:f7:ab:c0:87:b3:95:d6:00:df:ff:c7:1b:e5:
08:2d:58:bf:7d:df:48:56:e3:6d:81:ec:47:c1:1a:
07:bf:d6:c6:00:d1:41:e1:06:bb:ba:12:91:d0:cc:
7b:79:ef:74:8e:16:25:86:c6:c5:bc:71:24:72:6c:
dc:63:e5:78:11:44:3f:21:9c:ad:cd:0a:66:d7:7d:
8d:2f:35:5f:56:07:1c:d1:8b:ee:c8:66:c1:28:a9:
03:8c:b9:69:b7:d0:ec:24:1b:c6:c8:58:7f:b0:eb:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:69:94:D2:62:51:65:00:05:49:AD:FF:88:22:F2:47:63:8C:6A
X509v3 Authority Key Identifier:
keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ac:50:bf:59:41:81:bf:d3:27:bc:c6:d8:d6:74:01:62:51:
c9:70:49:b8:a7:47:87:a1:f4:ec:11:2c:cf:57:6b:de:0e:ad:
08:2d:e9:be:be:6e:71:2d:63:61:62:d5:80:8f:22:c1:b1:8e:
b6:4c:f3:52:51:9f:1b:59:1e:c5:ae:f4:a6:d9:7a:33:00:90:
02:ee:70:85:21:d3:75:fc:39:43:9a:d7:c6:b5:29:3d:df:14:
b4:74:12:ac:46:48:98:92:e5:8f:4a:d9:40:30:2e:12:7a:67:
24:af:aa:2e:fd:47:bc:53:a5:50:4c:bf:b0:01:33:4b:95:52:
03:f9:64:7e:24:f2:c9:9e:f4:e1:e4:aa:d6:06:05:49:3b:0a:
ab:3d:2b:7f:fe:4b:5e:5f:b1:0a:95:bc:7d:da:8a:86:31:cf:
09:98:f9:1a:a2:78:f0:05:0f:47:0f:4f:97:e0:ee:d6:b3:50:
5b:1e:88:f9:55:c3:ca:bf:1d:e0:cc:6f:13:3d:5c:2a:14:01:
c5:db:8b:20:a7:52:da:ae:53:ce:03:99:72:0b:4a:4d:52:38:
31:a7:48:2d:7e:4a:e7:95:a6:5b:e9:0b:4f:fd:85:10:0e:c8:
70:7e:37:8d:8d:f3:2f:82:77:c0:63:e7:af:57:4c:46:72:38:
d8:e7:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:57:01 2026 by rpki-client