
$ rpki-client -vvf rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
File: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft (raw, json)
Hash identifier: f95uFE23ozV+AxcT/B5N8C4qMbFmjCPhWEZQtTa95ZY=
Subject key identifier: 0C:7E:D1:01:BC:6B:33:8B:4E:4D:BB:D8:5A:5B:3F:8F:B5:95:EB:4D
Authority key identifier: 58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19
Certificate issuer: /CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
Certificate serial: 64A71DC00932FD041BBBB1D2377C66DE84B36F4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:56:27 +0000
Manifest this update: Tue 12 May 2026 19:51:27 +0000
Manifest next update: Wed 13 May 2026 21:32:27 +0000
Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: //BNbGEHF8EA4DRII1hDL8v8FS3Stqlu+4PQCjhVKuc=)
2: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl (hash: ssw6kQJvbaPIHXQ1F0rG+Pw8L/zmcjsPdN/xXo6guXU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl
rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a7:1d:c0:09:32:fd:04:1b:bb:b1:d2:37:7c:66:de:84:b3:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
Validity
Not Before: May 12 19:51:27 2026 GMT
Not After : May 13 21:32:27 2026 GMT
Subject: CN=0C7ED101BC6B338B4E4DBBD85A5B3F8FB595EB4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:0e:68:b5:5e:4e:ec:14:c8:21:78:53:cc:
eb:48:b5:b7:40:66:68:e2:0d:be:65:76:66:f4:72:
86:59:43:54:ff:cc:88:e3:b6:6c:a5:8f:a6:24:cd:
c2:53:63:82:9c:89:7e:78:9a:6e:d6:15:ff:e4:4c:
c9:05:39:4e:51:2c:64:96:8d:70:1f:e1:7d:a5:fd:
31:e8:7d:68:ba:81:70:6e:96:f3:7f:06:d2:2b:91:
d4:df:6e:03:6b:fa:f9:74:17:79:c5:76:29:3a:1d:
00:a7:0d:11:22:73:e5:58:e8:82:c9:ae:52:fc:5d:
9a:26:80:c7:9d:b1:c4:35:69:e4:52:82:be:6a:3a:
f4:3c:f7:f2:67:e1:6a:48:10:48:d6:31:11:77:a0:
f8:f7:91:2f:4d:6e:6e:a3:81:79:b2:c9:96:8c:ca:
88:f0:c6:69:3e:7a:f2:b5:43:62:b4:3a:98:e7:4c:
51:7f:a3:a7:c9:78:2c:8e:13:8d:16:31:3f:17:3e:
fa:f2:f8:a6:fe:18:57:eb:74:06:c3:2d:d8:a7:d6:
b0:d8:55:5f:82:c2:cc:1e:ea:c8:4c:fb:81:e3:67:
90:0c:cf:55:96:5c:2c:cb:76:67:e3:a7:da:60:b3:
cc:18:74:21:02:f9:4a:3e:db:44:71:03:81:84:03:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:D1:01:BC:6B:33:8B:4E:4D:BB:D8:5A:5B:3F:8F:B5:95:EB:4D
X509v3 Authority Key Identifier:
keyid:58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:4d:a2:36:fb:24:96:6c:71:68:fe:f4:72:5f:6d:02:49:
df:b8:17:8c:18:f0:cf:6b:d8:57:91:b1:88:f3:17:6a:b2:ea:
5e:e9:37:11:00:62:a3:31:3f:b2:da:41:7e:39:21:80:84:8b:
03:0d:0f:d0:d0:a3:ae:d5:e3:08:73:3f:78:a4:e8:b5:eb:fd:
75:53:b7:e6:26:b1:07:08:f8:c8:8f:d8:95:f7:11:c7:71:49:
42:44:1e:ee:74:5b:01:71:71:83:19:9c:bc:32:34:9f:d7:07:
36:4a:07:d6:28:fb:9e:56:6d:4b:0a:0a:59:64:cf:d0:05:86:
a4:1a:e2:b0:6e:e6:4a:8a:80:13:18:26:3b:4a:da:6f:b9:83:
ac:be:33:b8:7c:f9:62:f3:20:57:40:63:a8:26:3c:1c:de:ef:
64:c3:84:01:c3:97:25:61:df:78:4b:b5:29:91:1e:78:93:3d:
57:f6:ec:2c:d4:da:fb:20:51:7f:ba:25:ba:55:14:53:fb:69:
dc:f1:95:df:c7:dd:53:bc:5f:e4:66:8e:13:ec:1d:c0:60:5c:
38:5e:1f:4d:1b:99:4c:7f:c6:97:8a:59:d8:3e:95:5d:be:6b:
a8:4e:b3:92:5a:cb:e3:ea:fb:3f:8d:98:c0:c2:90:a3:dd:1d:
3f:cf:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:43 2026 by rpki-client