$ rpki-client -vvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json) Hash identifier: w+AXeNxj2eRNGT5hwQrTPy9/rA7rOjRVY3qJtcglCZs= Subject key identifier: 48:EE:03:88:EA:C4:8D:CF:58:7B:D3:B3:14:D8:98:92:23:EB:3E:E8 Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Certificate serial: 17296EBB3FCB4AEBDFCF435436FEA3EA27A6B7A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:11:58 +0000 Manifest this update: Tue 12 May 2026 17:06:58 +0000 Manifest next update: Wed 13 May 2026 19:49:58 +0000 Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: /K4yUGnEoNg+tDVZES9ZYxUj1rW5IxSpPNzfz1f6OyI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:29:6e:bb:3f:cb:4a:eb:df:cf:43:54:36:fe:a3:ea:27:a6:b7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Validity Not Before: May 12 17:06:58 2026 GMT Not After : May 13 19:49:58 2026 GMT Subject: CN=48EE0388EAC48DCF587BD3B314D8989223EB3EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:06:4b:f7:b4:d7:43:88:dd:48:06:32:9e: 02:3e:12:71:09:f4:58:24:c4:b1:76:d7:0d:e2:b0: 62:64:34:36:ee:98:33:b9:78:91:01:0e:92:4a:30: 87:90:55:97:f9:c7:4a:83:6c:93:be:f8:ce:d8:e6: 83:1f:74:d5:38:1d:21:7a:c0:8a:98:85:d0:2a:b4: fe:49:7c:c0:1b:8a:04:9b:99:48:99:81:f1:00:7b: 70:ee:4b:87:f3:33:77:c4:2e:8a:9b:b7:32:eb:bd: e9:66:66:fa:c5:2f:f4:02:2f:e0:84:53:18:09:00: a4:37:85:31:18:18:4f:6d:90:f9:4f:45:ac:03:ba: 2e:bf:7d:e1:d9:71:cc:ed:f8:34:01:53:a0:31:5c: 8b:a7:b3:8e:5a:4b:11:24:0e:e0:36:92:9d:21:ff: 9c:4c:e1:c6:42:b3:6b:e9:88:f0:a4:47:3e:2f:bb: f9:85:bd:dc:b3:07:9f:67:61:d7:f4:12:21:a4:e8: 95:5d:5f:7d:a6:7f:d5:18:68:81:b0:05:f4:11:17: 37:88:44:4c:79:9e:8c:04:39:37:c6:20:11:2a:e2: 08:44:9e:ef:5a:71:0e:2c:89:88:ac:6f:88:dc:c5: 65:4b:49:1e:87:9c:bd:cb:56:ab:92:e8:0d:9a:74: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:03:88:EA:C4:8D:CF:58:7B:D3:B3:14:D8:98:92:23:EB:3E:E8 X509v3 Authority Key Identifier: keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:20:55:fb:49:65:09:ef:d4:d6:b1:23:05:40:4f:fa:0b:07: 6a:44:5f:dd:da:16:2f:80:5c:87:c8:cc:8d:f0:cb:80:19:6d: f9:da:7e:f9:33:b8:ff:62:95:3e:cd:31:78:0b:87:61:27:92: fa:b3:5e:0b:cd:78:f3:86:6f:d9:ad:60:c6:a3:37:89:6c:ad: 9c:1d:09:8e:b5:94:3f:cf:a8:7d:59:91:55:0c:5d:3a:af:d5: 01:dd:39:ba:db:c1:8e:eb:11:a0:a2:76:dd:25:0e:39:ff:6f: 5b:35:50:69:17:d0:06:12:89:da:52:6c:05:1a:52:09:1f:28: b5:06:e6:6e:13:2a:7f:4e:63:04:f7:23:1b:88:68:31:35:c4: 43:2f:f2:fc:62:28:40:c9:06:82:63:24:61:dd:b0:aa:ab:f6: e5:cf:9f:46:99:f2:99:8d:d6:6a:78:96:76:51:fa:59:cc:bb: c6:da:2b:8e:6a:45:b2:f4:53:23:8e:5c:e5:95:d4:79:e6:5f: 81:6d:32:43:95:cd:2c:ea:5e:8a:c5:02:c2:9f:e5:db:c8:87: 78:0e:b7:90:29:89:07:b6:36:ea:09:f1:3f:ca:cf:94:78:58: b9:6d:42:a6:98:78:ab:8c:57:59:fc:96:23:60:d1:18:30:fc: 67:23:15:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyluuz/LSuvfz0NUNv6j6iemt6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5 MjhBQUM0OTAeFw0yNjA1MTIxNzA2NThaFw0yNjA1MTMxOTQ5NThaMDMxMTAvBgNV BAMTKDQ4RUUwMzg4RUFDNDhEQ0Y1ODdCRDNCMzE0RDg5ODkyMjNFQjNFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEQZL97TXQ4jdSAYyngI+EnEJ 9FgkxLF21w3isGJkNDbumDO5eJEBDpJKMIeQVZf5x0qDbJO++M7Y5oMfdNU4HSF6 wIqYhdAqtP5JfMAbigSbmUiZgfEAe3DuS4fzM3fELoqbtzLrvelmZvrFL/QCL+CE UxgJAKQ3hTEYGE9tkPlPRawDui6/feHZcczt+DQBU6AxXIuns45aSxEkDuA2kp0h /5xM4cZCs2vpiPCkRz4vu/mFvdyzB59nYdf0EiGk6JVdX32mf9UYaIGwBfQRFzeI REx5nowEOTfGIBEq4ghEnu9acQ4siYisb4jcxWVLSR6HnL3LVquS6A2adJQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSO4DiOrEjc9Ye9OzFNiYkiPrPugwHwYDVR0j BBgwFoAUWKakfRR8YVeV15HEuhxt5ZKKrEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTA2YjFiYzctYzY1YS00YTExLTkyNzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0Qx NDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5MjhBQUM0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEE2QTQ3RDE0N0M2MTU3OTVENzkxQzRCQTFDNkRFNTkyOEFB QzQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZE RTU5MjhBQUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0gVftJZQnv1NaxIwVAT/oLB2pEX93aFi+A XIfIzI3wy4AZbfnafvkzuP9ilT7NMXgLh2EnkvqzXgvNePOGb9mtYMajN4lsrZwd CY61lD/PqH1ZkVUMXTqv1QHdObrbwY7rEaCidt0lDjn/b1s1UGkX0AYSidpSbAUa UgkfKLUG5m4TKn9OYwT3IxuIaDE1xEMv8vxiKEDJBoJjJGHdsKqr9uXPn0aZ8pmN 1mp4lnZR+lnMu8baK45qRbL0UyOOXOWV1HnmX4FtMkOVzSzqXorFAsKf5dvIh3gO t5ApiQe2NuoJ8T/Kz5R4WLltQqaYeKuMV1n8liNg0Rgw/GcjFas= -----END CERTIFICATE-----Generated at Wed May 13 11:21:58 2026 by rpki-client