$ rpki-client -vvvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json) Hash identifier: PythTJ1L9PNivXCwedFkv8pOKozqc4VNzXL+DIe654s= Subject key identifier: 03:EC:69:94:D2:62:51:65:00:05:49:AD:FF:88:22:F2:47:63:8C:6A Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Certificate serial: 4949051EC16EE647122F43919114697C749A9741 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft Manifest number: C6 Signing time: Mon 28 Sep 2026 15:13:30 +0000 Manifest this update: Mon 28 Sep 2026 15:08:30 +0000 Manifest next update: Tue 29 Sep 2026 18:59:30 +0000 Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: hR8vZYoJsI63uhw01qi7ZdGMCawYHVX8Ki7v+1QGr/Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:49:05:1e:c1:6e:e6:47:12:2f:43:91:91:14:69:7c:74:9a:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Validity Not Before: Sep 28 15:08:30 2026 GMT Not After : Sep 29 18:59:30 2026 GMT Subject: CN=03EC6994D2625165000549ADFF8822F247638C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3f:68:46:96:6a:a6:5f:dd:1e:c1:a2:ab:6c: e9:70:4d:ca:08:4b:e8:e0:26:a5:e8:fa:be:79:46: 69:f3:b4:81:1f:e2:4a:ff:f5:0b:83:ef:96:17:eb: 13:bc:b1:cc:a6:ca:ba:0f:38:55:b8:93:b5:23:0c: ca:80:bf:23:58:a4:fc:4d:67:c2:77:80:7c:b4:d3: 57:d5:93:30:e5:f8:28:01:eb:fe:a6:a5:ac:41:3b: ae:e3:1c:ec:cf:a5:8d:25:fe:d4:0f:ab:33:bc:43: 70:a8:33:d7:8c:89:d2:74:01:74:78:18:bd:65:56: 02:ef:4d:e0:3b:d1:f9:1f:f7:26:7c:02:8b:7a:00: 45:70:65:35:85:01:ff:09:a8:a0:6c:51:24:9c:d1: 9e:a0:f7:ab:c0:87:b3:95:d6:00:df:ff:c7:1b:e5: 08:2d:58:bf:7d:df:48:56:e3:6d:81:ec:47:c1:1a: 07:bf:d6:c6:00:d1:41:e1:06:bb:ba:12:91:d0:cc: 7b:79:ef:74:8e:16:25:86:c6:c5:bc:71:24:72:6c: dc:63:e5:78:11:44:3f:21:9c:ad:cd:0a:66:d7:7d: 8d:2f:35:5f:56:07:1c:d1:8b:ee:c8:66:c1:28:a9: 03:8c:b9:69:b7:d0:ec:24:1b:c6:c8:58:7f:b0:eb: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EC:69:94:D2:62:51:65:00:05:49:AD:FF:88:22:F2:47:63:8C:6A X509v3 Authority Key Identifier: keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ac:50:bf:59:41:81:bf:d3:27:bc:c6:d8:d6:74:01:62:51: c9:70:49:b8:a7:47:87:a1:f4:ec:11:2c:cf:57:6b:de:0e:ad: 08:2d:e9:be:be:6e:71:2d:63:61:62:d5:80:8f:22:c1:b1:8e: b6:4c:f3:52:51:9f:1b:59:1e:c5:ae:f4:a6:d9:7a:33:00:90: 02:ee:70:85:21:d3:75:fc:39:43:9a:d7:c6:b5:29:3d:df:14: b4:74:12:ac:46:48:98:92:e5:8f:4a:d9:40:30:2e:12:7a:67: 24:af:aa:2e:fd:47:bc:53:a5:50:4c:bf:b0:01:33:4b:95:52: 03:f9:64:7e:24:f2:c9:9e:f4:e1:e4:aa:d6:06:05:49:3b:0a: ab:3d:2b:7f:fe:4b:5e:5f:b1:0a:95:bc:7d:da:8a:86:31:cf: 09:98:f9:1a:a2:78:f0:05:0f:47:0f:4f:97:e0:ee:d6:b3:50: 5b:1e:88:f9:55:c3:ca:bf:1d:e0:cc:6f:13:3d:5c:2a:14:01: c5:db:8b:20:a7:52:da:ae:53:ce:03:99:72:0b:4a:4d:52:38: 31:a7:48:2d:7e:4a:e7:95:a6:5b:e9:0b:4f:fd:85:10:0e:c8: 70:7e:37:8d:8d:f3:2f:82:77:c0:63:e7:af:57:4c:46:72:38: d8:e7:03:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUkFHsFu5kcSL0ORkRRpfHSal0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5 MjhBQUM0OTAeFw0yNjA5MjgxNTA4MzBaFw0yNjA5MjkxODU5MzBaMDMxMTAvBgNV BAMTKDAzRUM2OTk0RDI2MjUxNjUwMDA1NDlBREZGODgyMkYyNDc2MzhDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQP2hGlmqmX90ewaKrbOlwTcoI S+jgJqXo+r55RmnztIEf4kr/9QuD75YX6xO8scymyroPOFW4k7UjDMqAvyNYpPxN Z8J3gHy001fVkzDl+CgB6/6mpaxBO67jHOzPpY0l/tQPqzO8Q3CoM9eMidJ0AXR4 GL1lVgLvTeA70fkf9yZ8Aot6AEVwZTWFAf8JqKBsUSSc0Z6g96vAh7OV1gDf/8cb 5QgtWL9930hW422B7EfBGge/1sYA0UHhBru6EpHQzHt573SOFiWGxsW8cSRybNxj 5XgRRD8hnK3NCmbXfY0vNV9WBxzRi+7IZsEoqQOMuWm30OwkG8bIWH+w6xiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA+xplNJiUWUABUmt/4gi8kdjjGowHwYDVR0j BBgwFoAUWKakfRR8YVeV15HEuhxt5ZKKrEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTA2YjFiYzctYzY1YS00YTExLTkyNzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0Qx NDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5MjhBQUM0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEE2QTQ3RDE0N0M2MTU3OTVENzkxQzRCQTFDNkRFNTkyOEFB QzQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZE RTU5MjhBQUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6sUL9ZQYG/0ye8xtjWdAFiUclwSbinR4eh 9OwRLM9Xa94OrQgt6b6+bnEtY2Fi1YCPIsGxjrZM81JRnxtZHsWu9KbZejMAkALu cIUh03X8OUOa18a1KT3fFLR0EqxGSJiS5Y9K2UAwLhJ6ZySvqi79R7xTpVBMv7AB M0uVUgP5ZH4k8sme9OHkqtYGBUk7Cqs9K3/+S15fsQqVvH3aioYxzwmY+RqiePAF D0cPT5fg7tazUFseiPlVw8q/HeDMbxM9XCoUAcXbiyCnUtquU84DmXILSk1SODGn SC1+SueVplvpC0/9hRAOyHB+N42N8y+Cd8Bj569XTEZyONjnAyU= -----END CERTIFICATE-----Generated at Mon Sep 28 22:10:37 2026 by rpki-client