
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json)
Hash identifier: Va29t4yOlerrwzIrz0KK94eHHO6XJK7O6PLscdf+/mA=
Subject key identifier: BD:EE:62:84:6B:D9:CA:25:2F:CE:95:F5:F3:E4:6A:66:D6:D5:41:55
Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419
Certificate serial: 7DD6F06C928764AA8934E514D28CAC31288C6742
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
Manifest number: 0537
Signing time: Fri 17 Apr 2026 15:02:28 +0000
Manifest this update: Fri 17 Apr 2026 14:57:28 +0000
Manifest next update: Mon 20 Apr 2026 22:07:28 +0000
Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=)
2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=)
3: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: 4OKCs8PjFsl8kRYR6oT3/ID8lAMMIwlaYxdHih8XnFE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 21:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d6:f0:6c:92:87:64:aa:89:34:e5:14:d2:8c:ac:31:28:8c:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419
Validity
Not Before: Apr 17 14:57:28 2026 GMT
Not After : Apr 20 22:07:28 2026 GMT
Subject: CN=BDEE62846BD9CA252FCE95F5F3E46A66D6D54155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:0e:2c:63:cc:ab:c5:71:a2:e6:0b:ae:cf:
77:a3:72:ad:4d:f2:3d:f6:bc:8e:34:29:62:b2:ed:
e9:7d:fe:bd:f8:37:f7:d0:ae:80:0d:cc:e8:24:b5:
fb:f2:eb:99:1a:cf:ba:ef:30:54:d8:08:e4:28:83:
cf:df:0a:34:9f:1a:9e:06:ce:6b:4f:70:ba:cd:a2:
08:31:aa:1b:ce:d7:05:c9:5d:bc:36:4b:07:00:db:
05:df:76:d7:b8:81:4f:32:24:6e:bb:b7:12:8e:ce:
44:2e:53:c5:82:d4:49:a9:6f:38:e3:46:60:71:a2:
9e:3b:63:f3:f8:54:33:85:11:45:44:bf:6d:c1:e3:
79:77:cb:03:0f:14:1a:0b:3a:b1:17:f4:b1:5f:75:
27:04:92:ab:81:a5:4b:6e:e5:5d:55:4b:8f:86:b3:
0d:30:47:6b:96:ca:7a:f7:0d:db:bd:85:07:e0:8c:
53:c6:f6:51:17:d5:ec:26:80:6a:76:81:21:dc:9c:
64:f6:65:b1:0e:22:e2:be:69:ea:9f:fd:5c:a5:b0:
ec:a9:af:55:4b:1e:1f:04:56:01:72:40:9e:65:84:
5d:53:3b:53:e7:91:9b:9f:9b:89:35:78:e1:d0:03:
eb:cf:84:c7:9f:5a:1b:d2:cc:fc:00:51:0f:53:b8:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EE:62:84:6B:D9:CA:25:2F:CE:95:F5:F3:E4:6A:66:D6:D5:41:55
X509v3 Authority Key Identifier:
keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0c:be:26:b8:bc:f3:4d:12:75:2c:57:b8:c6:24:83:50:d7:
60:cd:d2:6c:6d:47:fa:26:32:7a:9d:a3:3a:07:44:b6:d6:c1:
87:d4:38:a3:16:4e:60:50:84:51:c0:44:b5:05:8d:38:6f:9f:
d4:ae:fe:c3:29:64:3b:53:a0:1b:0a:85:8a:be:17:15:75:6d:
62:12:6e:24:3a:41:f3:ba:62:62:ac:a5:51:53:a6:c1:5b:b1:
a0:c9:e8:4d:10:2f:15:94:4a:b0:1e:7e:15:57:56:d2:5e:4a:
48:28:ce:71:bf:2e:d8:58:4a:6e:83:a2:c8:c1:64:30:d4:ae:
bf:14:9c:5d:ae:c2:36:c8:4c:44:1f:18:ff:a9:7c:ac:13:a6:
3b:a5:4d:5f:69:60:12:46:34:3c:aa:18:1a:f2:8b:ae:e9:c2:
d1:75:92:f3:a5:01:94:d1:83:b7:cf:4b:5d:ff:79:ba:1d:22:
46:5e:1d:d6:97:f4:0b:7e:81:2e:03:1d:8e:f1:3b:84:36:1f:
a8:36:07:ae:f8:3b:9c:f9:91:30:0c:22:ff:c3:4c:79:ac:cb:
49:a5:3a:69:79:4a:15:65:a1:47:ef:65:3c:18:00:8c:0b:13:
0e:02:25:10:a6:02:34:f6:ef:28:ec:0c:e8:62:09:8f:40:d4:
8d:b3:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:12 2026 by rpki-client