
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json)
Hash identifier: ulA9lqW4eL+2CT9q3qr7pqvFzJD9T+qRPEx85X5nRPY=
Subject key identifier: 11:68:E3:B3:14:66:7A:FD:A0:6B:9B:F5:A3:BA:78:69:FE:06:8F:94
Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Certificate serial: 49D56C3820E9CEC2A09C8F53EF3EBAFF6AC82AF8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
Manifest number: 01E2
Signing time: Sun 01 Mar 2026 17:11:58 +0000
Manifest this update: Sun 01 Mar 2026 17:06:58 +0000
Manifest next update: Thu 05 Mar 2026 02:18:58 +0000
Files and hashes: 1: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: XrU6VOhv+p8rCjSQbJvOsgctGnJjSyvxnMhBARrln64=)
2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: uU8O3CwjMgf4TqwrU9ZGAuoUWz86Zcgor68D+YzMzqo=)
3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: gagkqZ1Th9ULC3nGrIkxBLFj551bmKfZ+zY4Ia+9Mpo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d5:6c:38:20:e9:ce:c2:a0:9c:8f:53:ef:3e:ba:ff:6a:c8:2a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Validity
Not Before: Mar 1 17:06:58 2026 GMT
Not After : Mar 5 02:18:58 2026 GMT
Subject: CN=1168E3B314667AFDA06B9BF5A3BA7869FE068F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:71:e7:5c:51:eb:af:9f:1d:48:fd:38:6e:
06:f2:f4:41:4e:1c:2f:24:db:44:75:0c:38:e9:3d:
09:77:c7:6f:b5:5d:c6:8a:78:51:71:7b:93:76:49:
5c:d5:19:a5:60:31:d8:ce:ab:9a:48:cf:f7:9b:a1:
79:59:53:d6:87:6c:58:ea:b3:17:1c:e5:b9:be:d6:
70:a1:09:2d:6c:c4:fc:6e:fe:95:39:dc:93:8f:30:
a9:7d:e9:0a:89:b4:6f:71:43:15:57:55:13:8d:df:
df:66:54:d6:06:c3:78:76:c3:9b:78:9a:9c:50:a7:
65:dc:92:24:8b:9b:53:ca:58:bc:f1:92:3c:4a:2c:
87:76:d5:e7:2e:98:a8:1c:a3:13:c8:4f:d8:53:59:
11:ec:c6:f8:73:03:43:3f:99:9c:a8:3c:bc:a0:67:
98:b7:cd:88:9c:76:b0:dd:3d:5c:cf:61:3c:b7:26:
eb:9b:b8:0f:57:04:44:7d:fd:10:9c:42:21:3e:c0:
d3:c2:59:4e:07:3e:07:ad:ba:c6:29:1a:50:55:bc:
1b:dc:3d:11:9d:77:da:8c:79:2b:8e:ff:14:6d:bf:
e1:aa:09:66:6a:62:4d:1e:f7:8f:9f:1d:8e:a5:f8:
94:38:76:8b:73:5e:bf:a2:f0:1b:88:78:73:66:87:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:E3:B3:14:66:7A:FD:A0:6B:9B:F5:A3:BA:78:69:FE:06:8F:94
X509v3 Authority Key Identifier:
keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ad:9c:72:c4:6e:b9:12:1a:0e:7b:ed:5d:35:32:68:15:50:
65:22:e0:bc:12:81:30:07:99:fb:b5:e6:d1:8b:4b:44:e3:f3:
3b:21:e0:2a:f5:66:9f:74:7d:9a:43:bf:a5:b7:13:f2:9c:31:
cf:34:a3:19:26:0f:15:43:e5:07:c2:48:b3:9e:34:89:20:32:
f8:5d:90:21:70:6f:07:41:2c:1e:ca:ea:4b:b9:cc:5e:e5:f1:
5e:ea:f2:d6:7b:9e:e2:f7:f6:8e:7d:6c:43:b1:e0:50:30:88:
48:2c:9e:55:98:99:69:c1:27:9e:ed:00:36:27:7c:a2:96:42:
fe:3a:95:3b:11:17:ed:0f:f5:2d:c2:85:ad:40:a5:8d:40:01:
e5:5f:fe:16:76:b9:d8:e5:c0:51:b6:9c:6e:5c:fa:95:f3:ec:
db:52:5d:c3:32:47:7a:b9:ba:c5:4c:36:b5:d9:bb:b2:20:89:
d7:70:9c:bd:1b:dd:fb:83:01:ff:83:71:c8:15:4e:58:18:d6:
ab:d9:ee:f3:5f:8b:30:10:1c:e8:02:2d:bc:4d:16:29:3e:46:
06:6e:17:61:dd:7e:5d:73:d4:99:e9:c4:6b:39:33:09:fd:70:
89:d1:87:f1:24:8e:67:50:a4:07:e4:0a:14:03:94:e3:87:64:
c0:4b:ed:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSdVsOCDpzsKgnI9T7z66/2rIKvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF
QjcxQTNCMTAeFw0yNjAzMDExNzA2NThaFw0yNjAzMDUwMjE4NThaMDMxMTAvBgNV
BAMTKDExNjhFM0IzMTQ2NjdBRkRBMDZCOUJGNUEzQkE3ODY5RkUwNjhGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfHHnXFHrr58dSP04bgby9EFO
HC8k20R1DDjpPQl3x2+1XcaKeFFxe5N2SVzVGaVgMdjOq5pIz/eboXlZU9aHbFjq
sxcc5bm+1nChCS1sxPxu/pU53JOPMKl96QqJtG9xQxVXVRON399mVNYGw3h2w5t4
mpxQp2XckiSLm1PKWLzxkjxKLId21ecumKgcoxPIT9hTWRHsxvhzA0M/mZyoPLyg
Z5i3zYicdrDdPVzPYTy3JuubuA9XBER9/RCcQiE+wNPCWU4HPgetusYpGlBVvBvc
PRGdd9qMeSuO/xRtv+GqCWZqYk0e94+fHY6l+JQ4dotzXr+i8BuIeHNmh/1lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEWjjsxRmev2ga5v1o7p4af4Gj5QwHwYDVR0j
BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0
MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx
QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4
N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE
OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKytnHLEbrkSGg577V01MmgVUGUi4LwSgTAH
mfu15tGLS0Tj8zsh4Cr1Zp90fZpDv6W3E/KcMc80oxkmDxVD5QfCSLOeNIkgMvhd
kCFwbwdBLB7K6ku5zF7l8V7q8tZ7nuL39o59bEOx4FAwiEgsnlWYmWnBJ57tADYn
fKKWQv46lTsRF+0P9S3Cha1ApY1AAeVf/hZ2udjlwFG2nG5c+pXz7NtSXcMyR3q5
usVMNrXZu7IgiddwnL0b3fuDAf+DccgVTlgY1qvZ7vNfizAQHOgCLbxNFik+RgZu
F2Hdfl1z1JnpxGs5Mwn9cInRh/EkjmdQpAfkChQDlOOHZMBL7YI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:05 2026 by rpki-client