$ rpki-client -vvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json) Hash identifier: kk3pMfHbhrPkd4TWfOEGIKWRPmRKzyZN4Xdw0XKiS18= Subject key identifier: F2:B0:E8:B5:8D:08:AA:DB:CD:98:08:9B:EE:44:D1:67:D1:6C:35:17 Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Certificate serial: 584A9EFA1EF6345157D71FC185982693601F19D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 14:36:55 +0000 Manifest this update: Tue 16 Jun 2026 14:31:55 +0000 Manifest next update: Wed 17 Jun 2026 18:26:55 +0000 Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: lRlp72RB7M0ECZN3U2FtXtkYhCpNNaKs4bTfi0QAR+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4a:9e:fa:1e:f6:34:51:57:d7:1f:c1:85:98:26:93:60:1f:19:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Validity Not Before: Jun 16 14:31:55 2026 GMT Not After : Jun 17 18:26:55 2026 GMT Subject: CN=F2B0E8B58D08AADBCD98089BEE44D167D16C3517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:b3:2f:bc:d5:05:d6:ba:1a:8e:46:d8:f4: 9d:8e:8a:a5:43:d3:7b:58:11:6e:54:e0:0e:5d:79: 39:e7:50:80:7c:d1:c9:1d:07:ae:6b:ae:9f:fb:97: dd:53:ab:2c:6f:cd:29:93:df:86:e5:b2:c2:4f:90: 4b:db:03:d9:7f:6d:93:63:e9:03:b0:06:20:57:c9: 4c:43:ea:c1:19:c6:e5:f6:83:cc:55:85:b0:2b:45: f8:2b:de:73:d0:22:9a:02:bf:c9:b9:9b:fd:b5:1c: 0c:81:df:ba:ac:73:0e:f8:8d:d1:62:7d:eb:ee:6c: 44:4b:5d:86:1f:21:51:c4:87:bc:37:7d:dd:3e:6d: 3e:57:19:b5:22:e0:33:ab:5c:31:60:b1:76:d2:a4: b6:7f:64:b3:c2:f5:e3:a8:5f:ca:6a:2c:7e:28:ce: af:07:8b:b0:a6:b0:8c:b4:4c:4b:57:37:b2:a6:80: 42:2e:1d:36:ba:15:43:37:36:0a:5f:21:3b:8a:85: 2d:3b:43:4b:a8:63:62:73:78:f7:a5:55:29:ba:b5: ae:ac:77:e3:73:a2:4b:63:28:ec:9e:55:04:2d:df: ad:5b:6e:28:9f:15:0d:5e:20:b7:57:1a:53:5c:e4: 17:9d:07:c7:1d:40:91:34:17:1e:70:65:5d:ca:de: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B0:E8:B5:8D:08:AA:DB:CD:98:08:9B:EE:44:D1:67:D1:6C:35:17 X509v3 Authority Key Identifier: keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fd:4b:4b:0f:5b:43:6c:3b:c0:0d:1a:f4:47:4e:dd:4b:2b: 52:3a:6f:fa:85:63:9c:85:83:59:96:2a:08:95:f5:2a:ec:aa: 38:a9:34:c8:ad:1f:67:81:55:e2:3f:5e:9d:94:e1:ec:40:29: 00:bf:88:a3:d8:fd:52:22:6a:ff:d4:34:e0:52:89:a9:bc:d5: bd:73:b3:c4:2f:a8:02:39:e2:2d:03:25:f7:fa:a2:3c:b5:36: c2:9c:08:bf:3d:d1:26:ea:09:ac:6b:e3:2f:d4:63:29:d4:09: 35:91:b2:c8:73:e8:71:20:16:cd:7b:26:33:16:6e:a5:cd:5e: 77:78:a4:2c:52:f2:57:c1:46:83:ea:38:7f:86:0c:a3:30:3c: c6:09:51:cd:bc:59:e7:d6:6e:84:b8:10:b5:b1:b6:89:a2:2e: c4:ee:a0:69:d6:8a:be:e7:96:c5:db:f4:a8:b2:0a:c4:50:47: 1e:1e:e6:6c:ac:ae:e3:fd:12:91:27:d1:20:86:0b:19:eb:91: e8:e1:32:e2:c3:c3:16:6a:f5:39:90:3e:c4:1e:b1:15:7f:f2: cc:62:93:f2:8a:99:a4:b8:1b:87:bf:69:e1:db:de:77:6e:d2: 8b:c9:ab:ec:ee:89:1e:dd:f2:d2:00:0e:b3:82:de:d3:de:23: 35:89:61:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEqe+h72NFFX1x/BhZgmk2AfGdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5 MjhBQUM0OTAeFw0yNjA2MTYxNDMxNTVaFw0yNjA2MTcxODI2NTVaMDMxMTAvBgNV BAMTKEYyQjBFOEI1OEQwOEFBREJDRDk4MDg5QkVFNDREMTY3RDE2QzM1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14rMvvNUF1roajkbY9J2OiqVD 03tYEW5U4A5deTnnUIB80ckdB65rrp/7l91TqyxvzSmT34blssJPkEvbA9l/bZNj 6QOwBiBXyUxD6sEZxuX2g8xVhbArRfgr3nPQIpoCv8m5m/21HAyB37qscw74jdFi fevubERLXYYfIVHEh7w3fd0+bT5XGbUi4DOrXDFgsXbSpLZ/ZLPC9eOoX8pqLH4o zq8Hi7CmsIy0TEtXN7KmgEIuHTa6FUM3NgpfITuKhS07Q0uoY2JzePelVSm6ta6s d+NzoktjKOyeVQQt361bbiifFQ1eILdXGlNc5BedB8cdQJE0Fx5wZV3K3kqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rDotY0IqtvNmAib7kTRZ9FsNRcwHwYDVR0j BBgwFoAUWKakfRR8YVeV15HEuhxt5ZKKrEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTA2YjFiYzctYzY1YS00YTExLTkyNzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0Qx NDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5MjhBQUM0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEE2QTQ3RDE0N0M2MTU3OTVENzkxQzRCQTFDNkRFNTkyOEFB QzQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZE RTU5MjhBQUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv9S0sPW0NsO8ANGvRHTt1LK1I6b/qFY5yF g1mWKgiV9SrsqjipNMitH2eBVeI/Xp2U4exAKQC/iKPY/VIiav/UNOBSiam81b1z s8QvqAI54i0DJff6ojy1NsKcCL890SbqCaxr4y/UYynUCTWRsshz6HEgFs17JjMW bqXNXnd4pCxS8lfBRoPqOH+GDKMwPMYJUc28WefWboS4ELWxtomiLsTuoGnWir7n lsXb9KiyCsRQRx4e5mysruP9EpEn0SCGCxnrkejhMuLDwxZq9TmQPsQesRV/8sxi k/KKmaS4G4e/aeHb3ndu0ovJq+zuiR7d8tIADrOC3tPeIzWJYXc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:25 2026 by rpki-client