$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: FNAkr6SEJ3eRFGJ1TaJnWh9HWagWkiy37er1pSKO7Ns= Subject key identifier: DF:5C:8E:B7:2B:46:EC:E2:47:C4:04:9D:F7:51:2B:A4:5D:8A:B4:DA Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 630F195E156054300F102F8CD4F1365567C0A6BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 0260 Signing time: Sat 18 Apr 2026 12:31:16 +0000 Manifest this update: Sat 18 Apr 2026 12:26:16 +0000 Manifest next update: Tue 21 Apr 2026 13:26:16 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: +E4T7dUXV6aX4bEXGLU3jVOr97rI3sHCGNsBCv/YCaI=) 2: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: aImZsOSU6DbHgzUCRh7iROMQt4o87fXef/iXnni+dUc=) 3: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: GTF74Ft0qa3Ml/qzXNfnDXeDnWgSofyFjshmuk26klk=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: SYGWmmOnwGKD6Y/4QC0HTfwuXQyWf4xsNcK5v8re6i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0f:19:5e:15:60:54:30:0f:10:2f:8c:d4:f1:36:55:67:c0:a6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Apr 18 12:26:16 2026 GMT Not After : Apr 21 13:26:16 2026 GMT Subject: CN=DF5C8EB72B46ECE247C4049DF7512BA45D8AB4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:c3:71:18:0a:59:3b:cb:06:4e:69:1d:21: bb:e0:52:eb:74:de:74:7d:80:45:b8:c7:33:28:d9: ee:9d:5e:a4:7c:a8:69:39:87:3f:45:71:e2:6c:85: e0:ff:9b:c6:1a:4b:94:68:be:55:4a:9e:ae:01:24: 38:88:a8:b7:d4:e0:97:8e:cd:bb:dd:87:9c:03:fd: c6:54:a4:56:c1:ea:fc:f2:2b:55:de:d7:7f:8d:27: 87:00:12:10:e5:1c:ec:42:0f:de:0a:48:44:df:6d: fc:8d:94:75:46:0e:99:7d:98:19:42:88:23:f1:6b: 33:8f:66:23:ab:9f:94:e6:12:69:36:28:51:06:6c: 74:bd:e4:b8:ab:de:06:47:c6:a1:e6:76:51:1d:04: a6:6b:e4:51:e7:15:66:c1:ac:39:4c:36:8a:12:a2: 5c:2d:ec:e8:c9:0b:0c:49:b3:78:56:a5:24:d6:f7: ff:c1:f2:70:98:d1:70:44:d5:f4:94:4e:0f:18:5f: 10:bc:cd:fc:23:1f:40:bc:d3:5a:e5:ec:5c:44:ce: 8e:50:21:c8:93:1c:ce:8a:89:d9:73:35:f9:85:ad: 21:43:6d:d9:ee:da:cb:38:e7:32:c9:d3:51:51:08: ef:6d:49:63:b8:66:55:24:55:a5:e7:3d:9e:ca:0c: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:8E:B7:2B:46:EC:E2:47:C4:04:9D:F7:51:2B:A4:5D:8A:B4:DA X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:46:9a:f0:67:9c:42:d1:fe:9e:5f:15:48:f7:ac:11:25:22: 84:fc:85:46:57:52:3f:34:ba:f8:85:82:77:95:f3:72:8e:52: c3:a6:5b:14:8b:16:84:59:fd:cb:6d:4c:60:62:a1:22:7e:47: 04:5f:c0:f5:b6:59:84:92:cd:40:49:1f:49:88:02:40:45:ac: 7c:84:9c:15:c8:df:12:f4:70:c8:31:65:b1:92:60:f9:ec:00: 66:ef:c7:f3:3a:4c:72:76:99:71:f2:f4:e7:ac:fd:0e:ac:22: 6e:01:f7:83:94:7c:3f:f8:0d:5f:fa:8b:7e:14:9e:a3:22:54: 49:c8:43:8b:53:70:4c:b0:c9:77:a7:95:1c:0f:50:bc:89:06: 58:6c:88:5d:9b:23:fb:06:bb:67:70:23:8b:02:b6:3a:ef:a9: 74:a5:2b:d2:99:ec:7c:8d:d8:4c:96:84:d1:2e:06:b7:4b:e0: 44:a8:29:23:b6:b8:92:ec:16:31:1a:56:4b:51:df:11:ff:1a: 62:2b:e5:b9:f2:85:40:50:1e:fb:91:ea:6f:58:d8:6b:11:9e: 4b:e5:0d:82:78:52:e4:f7:9d:09:80:5b:60:76:da:b0:66:d3: d6:34:55:be:7f:e8:e4:0e:d7:2c:14:f8:f3:7f:ec:e3:8e:ea: 1b:c6:1c:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYw8ZXhVgVDAPEC+M1PE2VWfAprowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNjA0MTgxMjI2MTZaFw0yNjA0MjExMzI2MTZaMDMxMTAvBgNV BAMTKERGNUM4RUI3MkI0NkVDRTI0N0M0MDQ5REY3NTEyQkE0NUQ4QUI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqccNxGApZO8sGTmkdIbvgUut0 3nR9gEW4xzMo2e6dXqR8qGk5hz9FceJsheD/m8YaS5RovlVKnq4BJDiIqLfU4JeO zbvdh5wD/cZUpFbB6vzyK1Xe13+NJ4cAEhDlHOxCD94KSETfbfyNlHVGDpl9mBlC iCPxazOPZiOrn5TmEmk2KFEGbHS95Lir3gZHxqHmdlEdBKZr5FHnFWbBrDlMNooS olwt7OjJCwxJs3hWpSTW9//B8nCY0XBE1fSUTg8YXxC8zfwjH0C801rl7FxEzo5Q IciTHM6KidlzNfmFrSFDbdnu2ss45zLJ01FRCO9tSWO4ZlUkVaXnPZ7KDK/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31yOtytG7OJHxASd91ErpF2KtNowHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlGmvBnnELR/p5fFUj3rBElIoT8hUZXUj80 uviFgneV83KOUsOmWxSLFoRZ/cttTGBioSJ+RwRfwPW2WYSSzUBJH0mIAkBFrHyE nBXI3xL0cMgxZbGSYPnsAGbvx/M6THJ2mXHy9Oes/Q6sIm4B94OUfD/4DV/6i34U nqMiVEnIQ4tTcEywyXenlRwPULyJBlhsiF2bI/sGu2dwI4sCtjrvqXSlK9KZ7HyN 2EyWhNEuBrdL4ESoKSO2uJLsFjEaVktR3xH/GmIr5bnyhUBQHvuR6m9Y2GsRnkvl DYJ4UuT3nQmAW2B22rBm09Y0Vb5/6OQO1ywU+PN/7OOO6hvGHLk= -----END CERTIFICATE-----Generated at Sun Apr 19 13:43:54 2026 by rpki-client