$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: tlRjvEeFMjQXzdN5J9zsf6JkwnL3ofP2JHYtLi9e12M= Subject key identifier: 23:97:DD:D7:8B:86:42:31:F7:17:42:19:CD:77:AD:16:0F:36:C9:C8 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 0F57A2A71C91227B37DA207F84275C23227691C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 0571 Signing time: Sat 18 Apr 2026 20:01:16 +0000 Manifest this update: Sat 18 Apr 2026 19:56:16 +0000 Manifest next update: Wed 22 Apr 2026 01:43:16 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: 4MBDa9Sa8H9IKZOL5dBFcbC91UE5kCt9oAxcrbiUeTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 01:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:57:a2:a7:1c:91:22:7b:37:da:20:7f:84:27:5c:23:22:76:91:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Apr 18 19:56:16 2026 GMT Not After : Apr 22 01:43:16 2026 GMT Subject: CN=2397DDD78B864231F7174219CD77AD160F36C9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:e7:30:79:fa:cd:2f:73:17:db:9a:b8:7f: b6:8c:48:cf:02:df:e2:37:0d:3c:b7:04:12:e6:65: c8:e9:03:78:c9:cd:6b:10:e2:13:c2:92:bb:40:bb: c2:33:b0:b3:ae:0b:93:bd:a0:f3:d5:96:95:cc:d2: cc:8c:27:d3:2f:02:cb:66:d5:90:02:36:87:04:f7: e0:ed:bc:bd:35:bd:39:c2:6c:be:94:9f:3e:b4:47: ec:95:c3:11:8c:e4:66:90:9c:e7:72:72:21:83:90: 8e:b0:54:4d:73:d0:f4:3e:5c:ed:01:28:76:29:c5: 00:6a:69:74:cf:59:32:e2:95:d9:e5:af:28:47:e5: e5:37:3f:38:f3:37:4e:2c:cc:b1:3f:42:00:9f:9a: ba:74:5c:c9:30:0f:ff:83:ee:dc:9d:1d:3b:58:6c: 8c:02:ab:f9:9e:8b:5e:97:10:39:30:08:28:4b:9a: 30:fc:10:74:c8:e8:20:e2:90:26:ca:c7:1f:4e:d3: 57:5b:e9:dd:75:8d:b4:b5:4d:9f:df:a6:ad:e7:c4: 31:f1:6a:12:d7:7e:7a:b5:9e:42:70:15:3b:63:b2: 9d:8b:2e:49:f9:e0:de:eb:32:3a:a0:d6:70:9e:e3: dc:b7:4c:53:60:14:3f:56:2a:d3:fd:69:6d:c4:d2: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:97:DD:D7:8B:86:42:31:F7:17:42:19:CD:77:AD:16:0F:36:C9:C8 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c5:e0:bd:9d:1f:99:37:26:a0:5c:af:02:c6:13:f8:4d:4f: 23:a7:6b:8d:2f:65:1b:df:81:3f:5e:29:49:59:1d:c1:92:13: f7:9f:e0:73:b8:f0:7f:4f:d3:19:99:89:d8:47:83:c8:06:af: da:6c:bc:2a:d4:96:bb:5a:b3:db:64:e8:4c:00:fd:53:1c:27: 7e:18:95:f4:4f:5d:31:19:a0:12:01:4c:f3:5e:e7:69:8c:df: 12:45:ef:a9:5c:71:df:7f:69:34:43:02:69:bc:33:fc:78:5a: 2e:fa:e7:a2:8b:e1:fd:c5:da:39:b5:c7:25:7a:96:5c:2f:4b: c4:71:96:e5:e3:25:12:7d:2e:37:7f:07:3c:32:3a:78:84:ec: 5e:9f:11:50:ea:08:79:57:54:d6:3a:91:41:24:4b:8b:36:78: 24:8e:c0:fe:6e:4e:7a:e3:5d:9d:b3:2c:91:83:7e:ee:59:a6: bd:3a:99:94:c8:14:a7:60:45:3c:6f:d2:bd:fd:91:fc:b0:50: 6b:e5:2d:4b:5c:88:dd:ea:aa:40:99:0b:e3:36:d7:75:a2:35: 29:13:5d:68:50:77:2f:ab:55:84:c7:99:dd:f2:67:9c:4d:25: 9e:bb:db:88:b3:bc:39:0e:4e:f2:ce:5b:26:1b:35:d9:7c:42: b6:18:00:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1eipxyRIns32iB/hCdcIyJ2kcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNjA0MTgxOTU2MTZaFw0yNjA0MjIwMTQzMTZaMDMxMTAvBgNV BAMTKDIzOTdEREQ3OEI4NjQyMzFGNzE3NDIxOUNENzdBRDE2MEYzNkM5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHOcwefrNL3MX25q4f7aMSM8C 3+I3DTy3BBLmZcjpA3jJzWsQ4hPCkrtAu8IzsLOuC5O9oPPVlpXM0syMJ9MvAstm 1ZACNocE9+DtvL01vTnCbL6Unz60R+yVwxGM5GaQnOdyciGDkI6wVE1z0PQ+XO0B KHYpxQBqaXTPWTLildnlryhH5eU3PzjzN04szLE/QgCfmrp0XMkwD/+D7tydHTtY bIwCq/mei16XEDkwCChLmjD8EHTI6CDikCbKxx9O01db6d11jbS1TZ/fpq3nxDHx ahLXfnq1nkJwFTtjsp2LLkn54N7rMjqg1nCe49y3TFNgFD9WKtP9aW3E0mXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5fd14uGQjH3F0IZzXetFg82ycgwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbF4L2dH5k3JqBcrwLGE/hNTyOna40vZRvf gT9eKUlZHcGSE/ef4HO48H9P0xmZidhHg8gGr9psvCrUlrtas9tk6EwA/VMcJ34Y lfRPXTEZoBIBTPNe52mM3xJF76lccd9/aTRDAmm8M/x4Wi7656KL4f3F2jm1xyV6 llwvS8RxluXjJRJ9Ljd/BzwyOniE7F6fEVDqCHlXVNY6kUEkS4s2eCSOwP5uTnrj XZ2zLJGDfu5Zpr06mZTIFKdgRTxv0r39kfywUGvlLUtciN3qqkCZC+M213WiNSkT XWhQdy+rVYTHmd3yZ5xNJZ6724izvDkOTvLOWyYbNdl8QrYYADQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:17 2026 by rpki-client