$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: EaGdNoumhEpEx8xoEr5EwcXinIuwkk3GcCUutAB18lw= Subject key identifier: 0B:53:06:60:C0:68:8E:AA:B8:68:FB:08:CC:17:E0:F6:88:30:20:A9 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 25624D2599F57F3FB2B5F0E1C20916E5E5BB8809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 055B Signing time: Sat 28 Feb 2026 00:02:23 +0000 Manifest this update: Fri 27 Feb 2026 23:57:23 +0000 Manifest next update: Tue 03 Mar 2026 09:14:23 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: 2RIHstBGwAJ7NrC56YjUEiccMtUgUS7awm1Z7RTe+xg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:62:4d:25:99:f5:7f:3f:b2:b5:f0:e1:c2:09:16:e5:e5:bb:88:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Feb 27 23:57:23 2026 GMT Not After : Mar 3 09:14:23 2026 GMT Subject: CN=0B530660C0688EAAB868FB08CC17E0F6883020A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:ef:c8:b6:0b:3e:30:6c:3d:a3:4e:c2:4e: 97:00:c0:b4:eb:95:3d:72:74:80:42:d2:18:85:e9: 5d:2b:0a:df:3d:03:cd:31:4b:f5:42:45:1f:ec:63: 23:f6:1c:d0:53:f9:29:a8:2d:fe:ee:6f:6a:3b:0e: 08:5b:9c:1d:84:c8:e6:f5:43:73:e0:d0:6c:a9:6a: a6:1b:d5:6d:42:4e:37:a4:11:ad:03:25:52:f0:20: 7a:18:7c:fa:4d:41:64:f1:bf:0e:2d:64:29:cb:6f: 95:bf:89:48:ff:50:b7:62:9c:63:f0:25:06:06:59: c6:81:87:b6:cb:5f:7d:65:fb:36:f1:96:5c:36:11: f1:6a:98:99:4e:34:80:57:db:55:fa:79:68:a4:16: f4:13:63:37:8c:e8:f8:8d:92:c4:d4:54:54:be:ef: 7a:62:ff:60:29:85:c6:44:14:7a:af:3d:14:44:b1: e8:e5:2a:ed:91:0f:00:ca:ce:9c:c6:10:af:92:0b: 8c:7e:e6:2e:9e:b8:b7:72:a8:d5:de:74:8f:20:de: fb:54:65:3c:4f:77:e3:4a:bb:c0:08:92:bc:46:56: 51:93:c7:c5:24:50:c2:cd:11:38:e9:ae:c4:b4:ff: 0e:44:d0:25:fd:4f:30:14:ca:54:a5:f4:99:80:52: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:53:06:60:C0:68:8E:AA:B8:68:FB:08:CC:17:E0:F6:88:30:20:A9 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5f:19:89:f7:34:61:1b:c9:ca:14:dc:df:32:12:24:af:08: 79:8c:c7:97:1a:ac:dd:7e:3e:ed:2f:c9:1c:56:05:5d:09:c0: fc:95:78:e1:fc:58:91:4c:71:b7:01:3e:38:b8:5a:95:32:69: 78:63:68:02:8b:d5:ae:fc:26:09:84:ec:cc:30:db:9e:a8:b4: be:bf:8e:65:0a:fe:7d:af:e5:00:a4:61:08:c0:f6:7e:91:dc: ee:82:ef:22:de:d1:4f:7b:bd:f0:44:31:04:23:39:2f:64:d5: 4a:04:f8:b4:d9:fc:8e:5b:b5:a9:fe:75:db:88:ae:8d:ec:09: 6e:eb:24:7b:5a:fd:69:0a:2a:ae:60:52:ac:1e:dc:a2:31:98: 30:8e:99:0e:93:e9:64:e5:69:c5:f3:e3:b1:5a:49:3e:fc:cf: 17:73:0e:b4:08:65:4e:29:93:da:c5:28:09:c1:05:a7:fc:c1: 20:bf:a1:83:c4:c9:19:85:d5:71:f0:c2:09:0f:3d:88:e7:a1: 83:46:6f:03:eb:9b:4a:d4:4c:73:f9:a4:ad:82:af:c6:7f:7c: 95:07:c3:d2:90:9e:0c:e0:e2:82:95:17:ee:50:74:6e:e8:d6: 4b:0f:06:4e:fe:89:e9:e4:06:19:02:e9:4b:3a:ba:e2:18:99: b5:05:66:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWJNJZn1fz+ytfDhwgkW5eW7iAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNjAyMjcyMzU3MjNaFw0yNjAzMDMwOTE0MjNaMDMxMTAvBgNV BAMTKDBCNTMwNjYwQzA2ODhFQUFCODY4RkIwOENDMTdFMEY2ODgzMDIwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95+/Itgs+MGw9o07CTpcAwLTr lT1ydIBC0hiF6V0rCt89A80xS/VCRR/sYyP2HNBT+SmoLf7ub2o7DghbnB2EyOb1 Q3Pg0GypaqYb1W1CTjekEa0DJVLwIHoYfPpNQWTxvw4tZCnLb5W/iUj/ULdinGPw JQYGWcaBh7bLX31l+zbxllw2EfFqmJlONIBX21X6eWikFvQTYzeM6PiNksTUVFS+ 73pi/2AphcZEFHqvPRREsejlKu2RDwDKzpzGEK+SC4x+5i6euLdyqNXedI8g3vtU ZTxPd+NKu8AIkrxGVlGTx8UkUMLNETjprsS0/w5E0CX9TzAUylSl9JmAUhzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1MGYMBojqq4aPsIzBfg9ogwIKkwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNfGYn3NGEbycoU3N8yEiSvCHmMx5carN1+ Pu0vyRxWBV0JwPyVeOH8WJFMcbcBPji4WpUyaXhjaAKL1a78JgmE7Mww256otL6/ jmUK/n2v5QCkYQjA9n6R3O6C7yLe0U97vfBEMQQjOS9k1UoE+LTZ/I5btan+dduI ro3sCW7rJHta/WkKKq5gUqwe3KIxmDCOmQ6T6WTlacXz47FaST78zxdzDrQIZU4p k9rFKAnBBaf8wSC/oYPEyRmF1XHwwgkPPYjnoYNGbwPrm0rUTHP5pK2Cr8Z/fJUH w9KQngzg4oKVF+5QdG7o1ksPBk7+ienkBhkC6Us6uuIYmbUFZmU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:14:45 2026 by rpki-client