$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: 7g/MP+Uwvs7uPeaZH+rp3RFX7txOLwIfwn+0ZUHuVpY= Subject key identifier: FB:A9:23:8A:74:8E:E4:35:46:C3:24:CF:37:55:1C:0E:DD:B3:7D:67 Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 761363B657018F9E6B32DE518706A01C95B567DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 024A Signing time: Sat 28 Feb 2026 12:21:14 +0000 Manifest this update: Sat 28 Feb 2026 12:16:14 +0000 Manifest next update: Tue 03 Mar 2026 21:55:14 +0000 Files and hashes: 1: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: SYGWmmOnwGKD6Y/4QC0HTfwuXQyWf4xsNcK5v8re6i0=) 2: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: GTF74Ft0qa3Ml/qzXNfnDXeDnWgSofyFjshmuk26klk=) 3: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: +E4T7dUXV6aX4bEXGLU3jVOr97rI3sHCGNsBCv/YCaI=) 4: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: sg2J2p4r2wKAgdoIw2U2e2wqksM8imDLlbxDaXY72eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:13:63:b6:57:01:8f:9e:6b:32:de:51:87:06:a0:1c:95:b5:67:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Feb 28 12:16:14 2026 GMT Not After : Mar 3 21:55:14 2026 GMT Subject: CN=FBA9238A748EE43546C324CF37551C0EDDB37D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:55:05:8f:95:63:a8:5f:88:58:06:89:16: c8:ca:1a:b7:87:de:26:9b:52:0c:de:fe:c4:e6:c6: 4b:17:48:f9:36:de:e2:39:02:cd:4b:f7:3f:5b:04: 29:cb:ff:fc:b2:97:bf:bd:01:6c:fe:de:f3:1d:3a: 6d:97:94:01:90:0c:33:c9:70:b1:53:1d:e7:6e:55: e4:ab:a3:9b:0a:47:57:1c:07:50:fa:ac:6d:9c:fc: 97:94:c0:9c:18:65:29:9b:c0:99:b4:29:8c:6e:e1: be:70:5e:79:0a:45:5f:b0:2c:45:2e:e4:df:90:be: b6:a8:66:d6:ca:d2:5b:be:41:0b:ff:fb:a1:b4:6f: a6:c4:e7:ad:3b:ce:24:ed:04:ac:f4:b8:5d:14:53: 77:0a:f9:a7:a6:5e:ab:50:4d:ce:65:88:20:ad:e9: e8:4d:c3:a9:13:c7:54:f2:27:c5:e0:b7:0d:b5:71: 18:17:44:73:2f:d3:d6:53:a1:91:d0:87:38:90:90: 24:59:1d:dd:f1:ef:0c:62:d0:23:f8:52:45:57:64: 8b:a4:e9:d0:4e:01:16:cc:d6:2a:8b:e8:80:b5:4a: 45:55:af:7f:21:e8:32:83:7e:2b:21:69:83:fb:91: 9d:06:5f:6e:7c:bf:92:81:ca:fb:2e:c5:d1:b7:1d: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:23:8A:74:8E:E4:35:46:C3:24:CF:37:55:1C:0E:DD:B3:7D:67 X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:18:10:3f:c8:e0:92:43:dd:0a:f3:95:f2:38:7f:28:c3:dd: 96:4e:40:33:f3:89:53:fc:07:25:b5:59:cb:a1:92:4c:10:96: 29:ea:16:59:8f:36:97:d8:24:24:a4:81:1c:34:c6:7d:65:42: 6d:fb:4e:d1:f7:cd:40:a4:10:93:29:62:e0:6b:2b:b8:05:67: e0:1d:f6:9b:46:cf:c5:31:9f:69:c0:3c:c0:87:58:07:76:f1: 8f:2c:18:48:cc:01:9d:88:27:40:7d:62:c5:f0:0c:cf:ca:a3: 53:ba:e1:1a:07:57:21:d5:7c:bd:97:6b:bd:27:3e:7b:ee:a5: f4:45:90:6f:9a:76:29:f6:12:72:66:45:c3:33:95:99:65:67: 16:5d:b5:4d:97:1e:53:1c:e9:95:07:07:90:ed:0d:61:ae:20: b2:ba:de:f3:99:c6:df:e3:a0:8c:4c:4c:9a:39:2e:57:75:92: d7:45:01:e2:58:24:d2:b7:2a:95:1b:55:cd:60:02:b1:f6:ec: ac:7d:91:7c:69:2d:0a:ff:63:fb:13:fb:b1:c4:6e:5b:af:dd: ff:8e:f5:c9:29:40:77:96:08:ed:4f:30:ec:c1:cf:ad:bd:3b: 0e:2a:96:b2:46:0f:58:7d:6c:58:88:43:45:bb:20:c1:e9:56: 16:67:ef:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdhNjtlcBj55rMt5RhwagHJW1Z9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNjAyMjgxMjE2MTRaFw0yNjAzMDMyMTU1MTRaMDMxMTAvBgNV BAMTKEZCQTkyMzhBNzQ4RUU0MzU0NkMzMjRDRjM3NTUxQzBFRERCMzdENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC01UFj5VjqF+IWAaJFsjKGreH 3iabUgze/sTmxksXSPk23uI5As1L9z9bBCnL//yyl7+9AWz+3vMdOm2XlAGQDDPJ cLFTHeduVeSro5sKR1ccB1D6rG2c/JeUwJwYZSmbwJm0KYxu4b5wXnkKRV+wLEUu 5N+QvraoZtbK0lu+QQv/+6G0b6bE5607ziTtBKz0uF0UU3cK+aemXqtQTc5liCCt 6ehNw6kTx1TyJ8Xgtw21cRgXRHMv09ZToZHQhziQkCRZHd3x7wxi0CP4UkVXZIuk 6dBOARbM1iqL6IC1SkVVr38h6DKDfishaYP7kZ0GX258v5KByvsuxdG3Hc3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+6kjinSO5DVGwyTPN1UcDt2zfWcwHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgYED/I4JJD3QrzlfI4fyjD3ZZOQDPziVP8 ByW1WcuhkkwQlinqFlmPNpfYJCSkgRw0xn1lQm37TtH3zUCkEJMpYuBrK7gFZ+Ad 9ptGz8Uxn2nAPMCHWAd28Y8sGEjMAZ2IJ0B9YsXwDM/Ko1O64RoHVyHVfL2Xa70n PnvupfRFkG+adin2EnJmRcMzlZllZxZdtU2XHlMc6ZUHB5DtDWGuILK63vOZxt/j oIxMTJo5Lld1ktdFAeJYJNK3KpUbVc1gArH27Kx9kXxpLQr/Y/sT+7HEbluv3f+O 9ckpQHeWCO1PMOzBz629Ow4qlrJGD1h9bFiIQ0W7IMHpVhZn78g= -----END CERTIFICATE-----Generated at Mon Mar 2 04:40:04 2026 by rpki-client