
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
File: 586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json)
Hash identifier: hG+vz9Xa9elP0hUdRNP0hZss6jD7a8vZ4gTr7ZxGe5E=
Subject key identifier: 37:26:A0:88:47:55:5E:04:DC:BC:02:95:6C:91:6E:AA:48:2F:BB:CB
Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
Certificate issuer: /CN=586C54F03B92F22D9291776AE79350296DB382C8
Certificate serial: 56665B03C30E9906F418AAA9186DB56E6E457B76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 10:26:33 +0000
Manifest this update: Tue 12 May 2026 10:21:33 +0000
Manifest next update: Wed 13 May 2026 12:48:33 +0000
Files and hashes: 1: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: hd94a/7A7VxvyF3vOLjE+kXqywToQNya5iIdMqh3OEQ=)
2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=)
3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=)
4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:66:5b:03:c3:0e:99:06:f4:18:aa:a9:18:6d:b5:6e:6e:45:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8
Validity
Not Before: May 12 10:21:33 2026 GMT
Not After : May 13 12:48:33 2026 GMT
Subject: CN=3726A08847555E04DCBC02956C916EAA482FBBCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:c8:d4:44:9c:8e:68:8b:fd:75:31:c1:9f:
d6:c6:4f:86:bf:ce:ff:90:75:8d:a0:e9:3a:f3:c7:
6e:9d:9f:97:8b:b0:6b:00:e4:db:2e:77:f2:bc:ab:
74:de:a5:f3:b2:07:9b:28:d3:85:e2:ec:17:50:11:
f8:81:71:09:3e:9a:e3:8e:99:f7:bb:98:13:a7:6e:
d1:d9:86:c1:02:e4:86:ca:7e:9e:b0:b0:3e:62:39:
bd:fd:c5:03:a9:be:8e:73:9a:33:22:44:3f:9b:be:
fa:31:80:07:35:9d:77:df:49:56:1f:0a:f5:cf:ab:
65:4e:c9:b2:5d:ff:9a:0b:cd:e3:aa:55:c9:6e:fc:
63:ea:1d:e8:5a:d4:e4:98:86:d5:a3:a3:c6:7c:67:
47:86:09:1c:3a:ca:8a:04:85:c6:8d:63:87:0e:31:
41:d3:2c:52:f5:eb:db:e6:f6:9c:6b:9d:39:d8:00:
17:d5:09:80:a4:17:40:74:2e:b9:52:21:dd:ee:37:
68:11:01:da:b9:15:1a:01:36:43:61:6d:2b:80:a9:
35:d8:c4:b4:7f:f2:c5:68:5b:9c:8d:11:98:6a:5a:
d8:66:8a:f0:03:1e:f0:41:b0:7d:e0:cc:61:4a:c9:
c9:5d:c2:75:41:76:57:2c:49:b6:3e:60:97:29:ab:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:A0:88:47:55:5E:04:DC:BC:02:95:6C:91:6E:AA:48:2F:BB:CB
X509v3 Authority Key Identifier:
keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b1:6f:ce:0c:99:06:b2:ed:35:4a:4c:e8:cc:a7:f7:7d:3a:
a1:7c:fc:58:42:5f:93:ce:bc:74:61:22:30:e0:fd:ef:2e:6e:
58:a2:d7:a1:d3:2c:f7:84:e4:78:a6:dd:99:3a:ae:e5:3e:0b:
d5:e4:94:a0:3e:f2:99:ed:e3:c4:26:e2:06:4f:f3:48:75:6d:
e0:e8:2e:42:ac:30:fe:4d:7e:78:5c:80:48:30:5e:f6:86:79:
bd:47:6b:5c:1e:f4:02:ae:2b:24:5e:19:f1:83:43:fe:be:8a:
48:de:30:60:7c:97:ea:e8:dd:3d:c2:ae:10:59:f1:50:94:47:
5c:f8:14:e9:af:d5:81:9a:b4:bd:b2:19:c3:d2:00:14:3f:66:
7d:3a:d8:0f:1f:3c:ec:25:a3:d3:87:91:22:40:1e:d2:1e:eb:
55:f4:c6:58:ce:ac:f9:32:5f:ab:d0:eb:f0:3f:a8:a3:de:3c:
a5:08:51:87:47:e8:1e:e2:da:0a:0b:16:ed:c2:07:f8:e0:3e:
c7:5a:5e:36:60:60:bf:b5:9d:59:00:1f:38:f8:26:38:8a:5f:
c4:f8:56:b2:9d:42:0f:93:51:5e:dd:b8:f7:d8:a8:a4:a8:72:
19:f2:bf:4a:23:ec:d1:33:b3:34:c9:43:6f:95:28:b2:d6:ab:
05:e0:12:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVmZbA8MOmQb0GKqpGG21bm5Fe3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2
REIzODJDODAeFw0yNjA1MTIxMDIxMzNaFw0yNjA1MTMxMjQ4MzNaMDMxMTAvBgNV
BAMTKDM3MjZBMDg4NDc1NTVFMDREQ0JDMDI5NTZDOTE2RUFBNDgyRkJCQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjcjURJyOaIv9dTHBn9bGT4a/
zv+QdY2g6Trzx26dn5eLsGsA5Nsud/K8q3TepfOyB5so04Xi7BdQEfiBcQk+muOO
mfe7mBOnbtHZhsEC5IbKfp6wsD5iOb39xQOpvo5zmjMiRD+bvvoxgAc1nXffSVYf
CvXPq2VOybJd/5oLzeOqVclu/GPqHeha1OSYhtWjo8Z8Z0eGCRw6yooEhcaNY4cO
MUHTLFL169vm9pxrnTnYABfVCYCkF0B0LrlSId3uN2gRAdq5FRoBNkNhbSuAqTXY
xLR/8sVoW5yNEZhqWthmivADHvBBsH3gzGFKycldwnVBdlcsSbY+YJcpq2JjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNyagiEdVXgTcvAKVbJFuqkgvu8swHwYDVR0j
BBgwFoAUWGxU8DuS8i2SkXdq55NQKW2zgsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzYyMGI0MjMtZGQ1ZC00NDhmLWJiZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAz
QjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2REIzODJDOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81ODZDNTRGMDNCOTJGMjJEOTI5MTc3NkFFNzkzNTAyOTZEQjM4
MkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi
ZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUw
Mjk2REIzODJDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHmxb84MmQay7TVKTOjMp/d9OqF8/FhCX5PO
vHRhIjDg/e8ublii16HTLPeE5Him3Zk6ruU+C9XklKA+8pnt48Qm4gZP80h1beDo
LkKsMP5NfnhcgEgwXvaGeb1Ha1we9AKuKyReGfGDQ/6+ikjeMGB8l+ro3T3CrhBZ
8VCUR1z4FOmv1YGatL2yGcPSABQ/Zn062A8fPOwlo9OHkSJAHtIe61X0xljOrPky
X6vQ6/A/qKPePKUIUYdH6B7i2goLFu3CB/jgPsdaXjZgYL+1nVkAHzj4JjiKX8T4
VrKdQg+TUV7duPfYqKSochnyv0oj7NEzszTJQ2+VKLLWqwXgEkQ=
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:57 2026 by rpki-client