$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: ALeDYB/3AKN3zQiUX5hswGZh4F0scddDOtTk1jejn4g= Subject key identifier: 5B:96:6A:DA:3E:E2:AC:77:19:BF:56:4D:15:0F:BF:60:2A:69:07:CE Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 3CDCE1D2F35751D917193881AC064BEA7B26FA2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0296 Signing time: Sat 18 Apr 2026 17:10:04 +0000 Manifest this update: Sat 18 Apr 2026 17:05:04 +0000 Manifest next update: Tue 21 Apr 2026 23:26:04 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: RdxZjKOUQWQIXkprVtE5eX9zfHHsq62U8ihGj7QXbq8=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 9C6JxChFeHLhz/hiGucLeF7/o+dBMXRfwa1cbKwCRWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 23:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:dc:e1:d2:f3:57:51:d9:17:19:38:81:ac:06:4b:ea:7b:26:fa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Apr 18 17:05:04 2026 GMT Not After : Apr 21 23:26:04 2026 GMT Subject: CN=5B966ADA3EE2AC7719BF564D150FBF602A6907CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:05:83:a6:ca:3f:a1:f4:ac:1b:7d:c3:ef: 9d:a6:96:3f:60:f1:6e:e2:0e:b8:1b:91:11:b6:89: 62:a6:35:d5:9f:18:6e:ed:50:f9:06:ec:25:a8:f0: 50:cf:30:80:ce:dd:32:23:e4:76:15:81:eb:54:bd: a6:de:22:36:6b:76:40:82:51:51:1f:22:a5:fe:d0: 8d:65:b6:40:db:49:23:7a:7f:7c:5d:cb:98:52:8d: 2f:80:32:3f:76:ae:76:13:25:cf:ee:eb:bc:ca:a3: 75:75:b2:25:ac:39:47:c9:22:73:ce:71:12:e5:1b: 61:c1:4b:71:24:bf:0d:30:38:5c:bc:cb:c1:77:e2: d0:cb:87:6a:2f:88:0d:70:4d:ae:be:2d:d3:18:04: 0e:2a:67:42:e3:42:f2:30:99:be:99:78:0a:2e:23: 45:af:6a:ea:a8:35:e5:56:16:62:37:c1:cb:2a:de: e4:88:90:b1:16:29:68:af:ab:a9:62:83:81:63:0c: 67:3c:62:b3:ca:57:87:88:ec:c0:a3:bf:31:48:ed: 7b:2b:45:5b:0d:ad:12:5d:8d:53:56:ed:cc:10:61: 28:bd:7a:7e:cb:4d:fa:2f:ee:94:63:f8:2d:1f:13: b8:d2:d8:cf:c7:a9:cb:0b:af:d4:26:53:33:73:da: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:6A:DA:3E:E2:AC:77:19:BF:56:4D:15:0F:BF:60:2A:69:07:CE X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:87:e5:cd:82:5d:e9:f4:5c:e5:73:d5:ff:f6:3a:71:74:eb: 4e:ba:0d:97:bb:c1:77:b2:7c:3a:ba:0d:4e:42:05:c3:d3:74: 2c:29:6b:52:86:d1:78:f9:6a:56:33:44:67:d5:f6:ea:7b:9c: b5:9f:d8:35:9b:37:96:b0:47:83:9c:23:d2:54:30:12:50:64: f2:cf:42:93:10:81:04:4f:df:1a:f4:d6:1e:97:2a:b5:de:8f: e7:3e:bb:d2:a3:e9:3f:fa:fd:47:54:0e:ff:c1:01:50:88:e8: 3d:bd:28:e0:8a:56:6a:d9:13:b4:c8:35:e6:71:a3:68:c5:3a: db:d9:37:7c:23:53:eb:3f:55:a1:7e:c7:6f:5d:35:70:f2:40: 88:23:f4:09:f5:e4:b3:2e:ea:64:b9:99:fd:84:e5:be:35:19: 7c:18:cb:68:80:b3:63:a0:0f:6b:3a:ca:04:ae:33:e3:a8:5d: 9c:38:f1:92:c5:8a:4c:bb:37:f5:7b:24:01:fd:41:04:f0:3b: 37:28:76:20:a8:f9:64:e6:05:c0:03:58:d2:27:91:c3:74:ce: 29:9e:36:d3:7d:88:ed:07:c8:eb:e2:d9:62:ad:50:da:cb:c3: fb:5f:e8:7c:15:45:f2:fe:97:af:85:be:5b:e8:20:86:be:48: ba:e8:47:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNzh0vNXUdkXGTiBrAZL6nsm+i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNjA0MTgxNzA1MDRaFw0yNjA0MjEyMzI2MDRaMDMxMTAvBgNV BAMTKDVCOTY2QURBM0VFMkFDNzcxOUJGNTY0RDE1MEZCRjYwMkE2OTA3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUQWDpso/ofSsG33D752mlj9g 8W7iDrgbkRG2iWKmNdWfGG7tUPkG7CWo8FDPMIDO3TIj5HYVgetUvabeIjZrdkCC UVEfIqX+0I1ltkDbSSN6f3xdy5hSjS+AMj92rnYTJc/u67zKo3V1siWsOUfJInPO cRLlG2HBS3Ekvw0wOFy8y8F34tDLh2oviA1wTa6+LdMYBA4qZ0LjQvIwmb6ZeAou I0WvauqoNeVWFmI3wcsq3uSIkLEWKWivq6lig4FjDGc8YrPKV4eI7MCjvzFI7Xsr RVsNrRJdjVNW7cwQYSi9en7LTfov7pRj+C0fE7jS2M/HqcsLr9QmUzNz2jI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5Zq2j7irHcZv1ZNFQ+/YCppB84wHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+H5c2CXen0XOVz1f/2OnF06066DZe7wXey fDq6DU5CBcPTdCwpa1KG0Xj5alYzRGfV9up7nLWf2DWbN5awR4OcI9JUMBJQZPLP QpMQgQRP3xr01h6XKrXej+c+u9Kj6T/6/UdUDv/BAVCI6D29KOCKVmrZE7TINeZx o2jFOtvZN3wjU+s/VaF+x29dNXDyQIgj9An15LMu6mS5mf2E5b41GXwYy2iAs2Og D2s6ygSuM+OoXZw48ZLFiky7N/V7JAH9QQTwOzcodiCo+WTmBcADWNInkcN0zime NtN9iO0HyOvi2WKtUNrLw/tf6HwVRfL+l6+FvlvoIIa+SLroRzU= -----END CERTIFICATE-----Generated at Sun Apr 19 15:48:17 2026 by rpki-client