$ rpki-client -vvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft File: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft (raw, json) Hash identifier: Pxw6h6QMEDzGlBL3UnLlbn5Agmyrrxmtm1RM0IFaTh8= Subject key identifier: 94:2B:6F:3B:2E:FB:F3:0E:04:AB:C3:8D:1D:4B:15:D5:E7:1A:ED:D0 Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Certificate serial: 661F782771561E2CFCD7588FDAB0CD7AB74EF627 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:13:39 +0000 Manifest this update: Tue 12 May 2026 21:08:39 +0000 Manifest next update: Wed 13 May 2026 21:29:39 +0000 Files and hashes: 1: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: 48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=) 2: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=) 3: 58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl (hash: dYzBrPtXYRLNY8w+P1hVvkjH4U71RdYz3iShESn6jEc=) 4: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1f:78:27:71:56:1e:2c:fc:d7:58:8f:da:b0:cd:7a:b7:4e:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75 Validity Not Before: May 12 21:08:39 2026 GMT Not After : May 13 21:29:39 2026 GMT Subject: CN=942B6F3B2EFBF30E04ABC38D1D4B15D5E71AEDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4e:5e:cf:ce:80:f2:5c:68:74:61:9d:ba:88: 75:a2:fa:d8:5c:b9:8b:21:14:3a:42:31:f2:4e:f3: ba:44:85:86:b6:da:67:42:4f:b6:b0:ff:ec:4d:11: 3a:03:15:43:11:ac:28:2a:68:69:1a:9d:37:6c:97: 44:b1:dd:75:44:67:7f:e7:82:b0:c4:1f:bc:72:f0: 85:0b:8a:b6:b3:7f:69:e8:68:75:61:fc:47:29:f9: de:50:e6:20:a1:0e:79:63:ad:74:43:6e:d8:9c:84: 35:26:46:16:e9:b7:5d:94:2e:96:82:01:dd:8f:d0: 0e:7d:f7:22:a3:9f:07:b8:70:68:03:ba:d5:07:8e: 6b:1f:af:3c:e2:86:31:39:cf:50:ef:27:99:af:9f: ff:cf:55:d4:16:4a:e9:fa:47:68:35:3e:18:6e:66: d0:57:bd:f0:b3:d3:52:69:b9:9f:40:72:19:4d:9d: a3:28:8e:20:0c:f7:ff:f3:de:d7:f7:dc:7e:b0:f7: 07:04:27:12:00:71:11:79:8c:c4:80:c5:7f:a0:4f: 34:95:37:7d:c8:48:4d:8a:7c:92:6e:d8:ab:0e:4a: 42:f4:37:07:fb:80:c3:67:0a:a3:49:a9:99:88:e8: ca:d9:7c:7b:c4:bb:22:3c:10:a8:b1:ce:d5:76:2a: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2B:6F:3B:2E:FB:F3:0E:04:AB:C3:8D:1D:4B:15:D5:E7:1A:ED:D0 X509v3 Authority Key Identifier: keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:26:61:89:09:f8:74:62:34:78:4c:b3:c5:74:50:84:a7: 59:29:6e:a1:6f:48:f3:84:d0:36:65:57:f5:f2:09:65:63:62: 5e:6a:bf:5e:ca:97:d5:2b:4d:4e:d6:be:3b:17:2f:1d:d6:86: f0:ef:89:9c:98:65:a0:1b:61:80:42:89:d9:be:d7:ab:b7:c7: 7a:1e:54:54:6b:74:4a:f8:fb:f7:55:41:f3:92:f2:88:0d:21: d7:f7:34:97:12:e3:d6:b7:4c:5b:41:1c:e6:3e:9f:be:09:55: e1:e0:84:b2:61:a4:cc:3f:fe:3a:62:28:df:5d:f5:fb:67:7b: 66:58:f3:72:cc:cc:74:2a:9c:a3:52:1f:27:bb:b4:70:3e:8e: 8f:e1:d7:67:a8:b7:25:96:a1:55:40:de:e1:9d:1c:60:9c:2a: fe:0e:79:b4:52:bc:66:a2:2b:f8:d4:8b:4c:d3:75:31:1f:73: 9e:e1:19:15:86:81:5f:20:0b:29:40:a3:c2:06:62:f1:99:be: c1:33:2a:89:6c:5a:9d:eb:5c:ff:8b:4a:78:f1:66:65:e2:1d: b5:f6:c8:4b:63:98:b8:ff:0c:7d:c6:94:1f:80:6a:99:44:43: c1:72:c8:a0:b4:99:c2:08:51:1b:71:8a:c4:1e:03:1b:e8:88: b2:85:48:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZh94J3FWHiz811iP2rDNerdO9icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB QTM3OUY3NTAeFw0yNjA1MTIyMTA4MzlaFw0yNjA1MTMyMTI5MzlaMDMxMTAvBgNV BAMTKDk0MkI2RjNCMkVGQkYzMEUwNEFCQzM4RDFENEIxNUQ1RTcxQUVERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrTl7PzoDyXGh0YZ26iHWi+thc uYshFDpCMfJO87pEhYa22mdCT7aw/+xNEToDFUMRrCgqaGkanTdsl0Sx3XVEZ3/n grDEH7xy8IULirazf2noaHVh/Ecp+d5Q5iChDnljrXRDbtichDUmRhbpt12ULpaC Ad2P0A599yKjnwe4cGgDutUHjmsfrzzihjE5z1DvJ5mvn//PVdQWSun6R2g1Phhu ZtBXvfCz01JpuZ9AchlNnaMojiAM9//z3tf33H6w9wcEJxIAcRF5jMSAxX+gTzSV N33ISE2KfJJu2KsOSkL0Nwf7gMNnCqNJqZmI6MrZfHvEuyI8EKixztV2KiIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlCtvOy778w4Eq8ONHUsV1eca7dAwHwYDVR0j BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2 M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5 Rjc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4 MkNBQTM3OUY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInfJmGJCfh0YjR4TLPFdFCEp1kpbqFvSPOE 0DZlV/XyCWVjYl5qv17Kl9UrTU7WvjsXLx3WhvDviZyYZaAbYYBCidm+16u3x3oe VFRrdEr4+/dVQfOS8ogNIdf3NJcS49a3TFtBHOY+n74JVeHghLJhpMw//jpiKN9d 9ftne2ZY83LMzHQqnKNSHye7tHA+jo/h12eotyWWoVVA3uGdHGCcKv4OebRSvGai K/jUi0zTdTEfc57hGRWGgV8gCylAo8IGYvGZvsEzKolsWp3rXP+LSnjxZmXiHbX2 yEtjmLj/DH3GlB+AaplEQ8FyyKC0mcIIURtxisQeAxvoiLKFSMA= -----END CERTIFICATE-----Generated at Wed May 13 00:45:22 2026 by rpki-client