$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft File: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft (raw, json) Hash identifier: KjLuZByELJa9OlheoEEA5r+WF4RBr0VuywZC8icBMQ0= Subject key identifier: 13:D3:4B:32:3C:2B:A9:D0:D4:FF:EE:2B:41:C5:11:A1:27:57:7E:20 Authority key identifier: 58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19 Certificate issuer: /CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519 Certificate serial: 394F8CEC70C8396C77AAE669E64DAC7C2A30E45B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:09:23 +0000 Manifest this update: Fri 25 Sep 2026 11:04:23 +0000 Manifest next update: Sat 26 Sep 2026 11:09:23 +0000 Files and hashes: 1: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl (hash: wEXJzMAh27Eg6ZDTTLo5pO7asWyx8f61GbZNSaAx0yg=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: //BNbGEHF8EA4DRII1hDL8v8FS3Stqlu+4PQCjhVKuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4f:8c:ec:70:c8:39:6c:77:aa:e6:69:e6:4d:ac:7c:2a:30:e4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519 Validity Not Before: Sep 25 11:04:23 2026 GMT Not After : Sep 26 11:09:23 2026 GMT Subject: CN=13D34B323C2BA9D0D4FFEE2B41C511A127577E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:3d:de:da:eb:34:ea:c5:ad:8c:37:25:57: ca:54:be:96:8a:17:d4:2a:44:4c:a6:bc:56:52:24: 7a:8b:69:1c:80:b8:44:84:d1:27:33:84:11:e4:99: 78:db:38:4a:49:89:0b:6a:c1:be:83:c0:78:f4:51: c6:3d:6c:03:b8:a1:a3:d5:f2:ee:b5:db:a5:e8:aa: 45:6d:a0:76:3b:b3:58:51:11:f2:74:d3:bb:de:d3: da:ad:8c:e3:78:4e:12:b7:4e:c9:84:36:d2:db:d5: 63:c6:9e:bd:95:f6:9a:36:8b:b9:5f:8a:66:b3:c4: 90:79:0b:e0:78:ba:56:61:9a:72:38:de:3b:98:7a: 7e:0d:0f:39:f5:6e:ad:6f:e0:43:65:ec:9c:8f:fc: 6e:c5:db:62:6b:3f:28:01:47:95:07:83:d0:24:55: e1:90:8d:61:1b:1e:b2:0b:af:cd:54:9d:3b:56:93: 8a:74:b6:dd:9d:82:26:af:60:0b:13:36:02:8c:bd: 3a:a9:1d:71:6d:f1:d2:ba:a3:8a:e3:fc:a3:04:c8: bb:04:41:ac:65:26:12:a4:0d:64:8b:b7:bd:e9:77: 3f:bb:79:c8:0f:53:e6:ea:6b:02:64:ef:ce:01:fd: fa:b7:af:52:28:3c:3c:86:4e:5d:bf:cd:28:e2:95: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:4B:32:3C:2B:A9:D0:D4:FF:EE:2B:41:C5:11:A1:27:57:7E:20 X509v3 Authority Key Identifier: keyid:58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:40:e9:60:0f:83:96:6a:b5:6e:8c:3f:aa:a1:12:ba:9a:2b: cc:c5:4c:10:4c:5a:bd:de:1a:a5:f8:8d:8b:ec:88:6b:3f:49: 77:d0:6c:aa:0d:77:4d:0a:04:b5:75:07:13:1b:9d:f3:a6:02: 4d:8c:da:54:f4:13:bf:9b:fd:8a:5c:f7:da:d9:69:64:be:b0: d5:1a:3e:bc:66:36:59:b4:18:7e:e8:f5:45:66:b2:70:57:ab: 96:f0:18:c3:63:3e:b0:5e:ff:45:d5:02:22:5f:53:30:cc:7d: 3c:0d:50:b0:be:dc:a3:88:6e:5e:47:bd:e9:21:ac:95:f2:29: 99:2e:22:eb:d3:98:1f:b3:fa:9a:c4:02:d7:8e:2e:65:ff:7e: 96:35:2c:4b:0e:e4:9a:c3:a9:ba:a2:ab:3c:c8:18:68:ca:0e: e6:73:94:31:c0:48:e2:b7:c5:da:a6:0c:5d:df:5a:78:02:39: 05:62:80:52:b1:70:93:f0:60:e7:bc:55:f0:d8:13:62:e4:f2: 43:81:9c:e8:a0:ca:12:91:ef:84:f6:ec:aa:71:5f:c7:00:b0: 58:b2:5f:4a:6f:4c:64:2b:8b:b6:9f:fb:0d:4c:f0:b7:0a:ab: 42:85:2d:5b:d2:10:d0:30:19:72:be:2e:3d:86:dd:a0:60:f6: 65:c6:2e:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOU+M7HDIOWx3quZp5k2sfCow5FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5 QzZERjUxOTAeFw0yNjA5MjUxMTA0MjNaFw0yNjA5MjYxMTA5MjNaMDMxMTAvBgNV BAMTKDEzRDM0QjMyM0MyQkE5RDBENEZGRUUyQjQxQzUxMUExMjc1NzdFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxT3e2us06sWtjDclV8pUvpaK F9QqREymvFZSJHqLaRyAuESE0SczhBHkmXjbOEpJiQtqwb6DwHj0UcY9bAO4oaPV 8u6126XoqkVtoHY7s1hREfJ007ve09qtjON4ThK3TsmENtLb1WPGnr2V9po2i7lf imazxJB5C+B4ulZhmnI43juYen4NDzn1bq1v4ENl7JyP/G7F22JrPygBR5UHg9Ak VeGQjWEbHrILr81UnTtWk4p0tt2dgiavYAsTNgKMvTqpHXFt8dK6o4rj/KMEyLsE QaxlJhKkDWSLt73pdz+7ecgPU+bqawJk784B/fq3r1IoPDyGTl2/zSjilZIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9NLMjwrqdDU/+4rQcURoSdXfiAwHwYDVR0j BBgwFoAUWLuhkkv94r44YdPC6kOCb5xt9RkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4NDNmMDAtMjgyMy00NzMyLTliN2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0 QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5QzZERjUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEJCQTE5MjRCRkRFMkJFMzg2MUQzQzJFQTQzODI2RjlDNkRG NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0Mzgy NkY5QzZERjUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5A6WAPg5ZqtW6MP6qhErqaK8zFTBBMWr3e GqX4jYvsiGs/SXfQbKoNd00KBLV1BxMbnfOmAk2M2lT0E7+b/Ypc99rZaWS+sNUa PrxmNlm0GH7o9UVmsnBXq5bwGMNjPrBe/0XVAiJfUzDMfTwNULC+3KOIbl5Hvekh rJXyKZkuIuvTmB+z+prEAteOLmX/fpY1LEsO5JrDqbqiqzzIGGjKDuZzlDHASOK3 xdqmDF3fWngCOQVigFKxcJPwYOe8VfDYE2Lk8kOBnOigyhKR74T27KpxX8cAsFiy X0pvTGQri7af+w1M8LcKq0KFLVvSENAwGXK+Lj2G3aBg9mXGLow= -----END CERTIFICATE-----Generated at Fri Sep 25 19:46:46 2026 by rpki-client