$ rpki-client -vvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json) Hash identifier: vOumIhzZAAYpAtDvi8FfH8AEZVjLRgqAewVQCcct4Uw= Subject key identifier: 19:79:74:33:99:2C:57:ED:71:A7:C4:2F:F7:F1:14:E5:E8:23:D7:B8 Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Certificate serial: 5A8FB2F72FD7FC165AACFA06A3FBD3EA1E3AC1AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:15:45 +0000 Manifest this update: Fri 24 Jul 2026 01:10:45 +0000 Manifest next update: Sat 25 Jul 2026 03:53:45 +0000 Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: 0MdCb/a8SwS7o+ehKMI1SDUT3m/2ZnsELkhk9TjyhFk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8f:b2:f7:2f:d7:fc:16:5a:ac:fa:06:a3:fb:d3:ea:1e:3a:c1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Validity Not Before: Jul 24 01:10:45 2026 GMT Not After : Jul 25 03:53:45 2026 GMT Subject: CN=19797433992C57ED71A7C42FF7F114E5E823D7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:ef:da:19:0d:76:ee:0d:d9:3d:e1:74:28: 6a:e7:5a:40:1d:ea:3a:89:84:9b:c0:be:80:f0:2b: 4a:f1:20:a8:e4:6d:bc:b0:88:ba:36:95:dc:33:16: b2:36:00:aa:1a:af:9c:46:f3:3e:ef:15:e8:d7:ee: 90:a5:28:b5:1e:6b:59:e0:99:d9:94:15:97:af:f6: e7:85:c5:36:e4:50:b0:38:1e:1a:d2:55:95:c3:05: 4b:86:23:31:fe:30:25:d7:c2:9c:b0:8a:e4:95:51: e8:a4:87:ae:ac:99:9b:08:0e:30:0b:af:e5:71:b3: 29:82:8a:b5:79:95:42:ad:1f:b0:a2:a7:4e:ca:de: 76:ff:21:a5:fc:2c:5a:03:6a:21:57:7f:b6:a6:3f: 18:dd:90:f7:45:f0:09:24:e9:36:4d:fd:65:56:86: 59:cf:26:d5:c8:5c:6b:58:3a:c0:56:05:e1:64:12: e7:86:8d:24:eb:3a:0c:d9:06:f8:88:b6:cd:5f:c6: 56:39:f9:c5:a3:19:61:5a:13:99:b1:bd:40:30:66: 4d:ef:1a:4f:9e:b1:1b:76:8b:ae:01:d1:3d:dd:35: 6e:5f:71:55:df:1b:ca:e4:8e:98:e0:b7:a0:5d:f8: d6:48:b5:2c:6f:ef:f1:95:bd:2f:3f:7c:37:e8:12: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:79:74:33:99:2C:57:ED:71:A7:C4:2F:F7:F1:14:E5:E8:23:D7:B8 X509v3 Authority Key Identifier: keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9d:21:e6:0d:bd:d6:0f:b3:86:3b:11:fd:5b:28:a8:a9:bc: f3:d7:da:8a:a9:d1:c3:7e:05:65:97:b2:f2:ba:9f:8b:13:19: 09:90:55:a4:d2:20:3e:6e:ca:3c:d2:df:27:95:fe:bf:24:2e: 27:8f:a2:5a:1a:3b:9f:35:f4:ea:32:52:02:7f:14:dd:c6:bf: af:54:fa:63:c2:bf:e3:93:99:a4:d9:79:7e:39:b0:0f:3c:b7: 0d:b5:79:81:c4:19:50:5a:db:1f:13:62:fc:20:1d:7b:25:4f: 1c:f7:2d:fe:d3:cf:ab:fb:6c:77:5d:9e:71:59:11:fc:0c:95: 17:16:10:0a:fb:d4:e8:b0:66:6a:a9:e2:33:f2:8f:4b:fa:d0: dc:f2:13:95:45:78:7e:fe:43:47:2f:00:83:1d:26:0a:05:a6: 00:58:57:67:24:61:21:05:83:b7:33:6b:41:8b:85:8a:16:2c: 4f:17:f5:fc:98:95:36:cb:f9:ad:c4:fb:87:9c:9f:9c:d3:1b: c0:9b:22:00:63:9a:25:83:54:52:80:19:4f:68:c7:54:1e:17: b2:e0:59:1a:1c:9b:b3:27:2e:9a:53:6d:f2:f6:77:a9:f7:b2: 19:b4:c9:bd:97:58:58:c0:e3:42:1c:93:b8:29:b8:6a:ab:9e: 47:83:08:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWo+y9y/X/BZarPoGo/vT6h46wawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5 MjhBQUM0OTAeFw0yNjA3MjQwMTEwNDVaFw0yNjA3MjUwMzUzNDVaMDMxMTAvBgNV BAMTKDE5Nzk3NDMzOTkyQzU3RUQ3MUE3QzQyRkY3RjExNEU1RTgyM0Q3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9O/aGQ127g3ZPeF0KGrnWkAd 6jqJhJvAvoDwK0rxIKjkbbywiLo2ldwzFrI2AKoar5xG8z7vFejX7pClKLUea1ng mdmUFZev9ueFxTbkULA4HhrSVZXDBUuGIzH+MCXXwpywiuSVUeikh66smZsIDjAL r+VxsymCirV5lUKtH7Cip07K3nb/IaX8LFoDaiFXf7amPxjdkPdF8Akk6TZN/WVW hlnPJtXIXGtYOsBWBeFkEueGjSTrOgzZBviIts1fxlY5+cWjGWFaE5mxvUAwZk3v Gk+esRt2i64B0T3dNW5fcVXfG8rkjpjgt6Bd+NZItSxv7/GVvS8/fDfoEkqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXl0M5ksV+1xp8Qv9/EU5egj17gwHwYDVR0j BBgwFoAUWKakfRR8YVeV15HEuhxt5ZKKrEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTA2YjFiYzctYzY1YS00YTExLTkyNzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0Qx NDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5MjhBQUM0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEE2QTQ3RDE0N0M2MTU3OTVENzkxQzRCQTFDNkRFNTkyOEFB QzQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZE RTU5MjhBQUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWdIeYNvdYPs4Y7Ef1bKKipvPPX2oqp0cN+ BWWXsvK6n4sTGQmQVaTSID5uyjzS3yeV/r8kLiePoloaO5819OoyUgJ/FN3Gv69U +mPCv+OTmaTZeX45sA88tw21eYHEGVBa2x8TYvwgHXslTxz3Lf7Tz6v7bHddnnFZ EfwMlRcWEAr71OiwZmqp4jPyj0v60NzyE5VFeH7+Q0cvAIMdJgoFpgBYV2ckYSEF g7cza0GLhYoWLE8X9fyYlTbL+a3E+4ecn5zTG8CbIgBjmiWDVFKAGU9ox1QeF7Lg WRocm7MnLppTbfL2d6n3shm0yb2XWFjA40Ick7gpuGqrnkeDCMU= -----END CERTIFICATE-----Generated at Fri Jul 24 12:54:19 2026 by rpki-client