
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
File: 586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json)
Hash identifier: WGsyL/p7TS6tYpzQmc0JwZU9ti71t1gmw6f3IfnGhKc=
Subject key identifier: E0:66:29:AA:44:5B:6E:02:E9:4E:D2:B6:FD:25:ED:42:5B:32:BC:CE
Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
Certificate issuer: /CN=586C54F03B92F22D9291776AE79350296DB382C8
Certificate serial: 173B36B5A584CD65F23B5F4BAAF81290A850148E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 08:43:36 +0000
Manifest this update: Wed 17 Jun 2026 08:38:36 +0000
Manifest next update: Thu 18 Jun 2026 09:11:36 +0000
Files and hashes: 1: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: vH9kAgsVOCUnYhF1AbNQD1Q9CexK59IYkLJaRy+sJtY=)
2: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=)
3: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=)
4: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3b:36:b5:a5:84:cd:65:f2:3b:5f:4b:aa:f8:12:90:a8:50:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8
Validity
Not Before: Jun 17 08:38:36 2026 GMT
Not After : Jun 18 09:11:36 2026 GMT
Subject: CN=E06629AA445B6E02E94ED2B6FD25ED425B32BCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:81:a7:c9:2d:2d:c2:af:66:db:94:7d:db:
fe:d2:c9:01:36:bf:9d:19:7b:7f:68:85:dd:08:8e:
70:d7:98:23:d4:55:34:2e:26:0a:7e:79:16:dd:71:
bb:c5:b3:9d:e5:16:0e:8d:92:97:6c:cf:c9:12:9c:
c7:27:32:a5:cf:02:7e:23:c9:a9:8f:d6:30:5a:7e:
63:a8:37:01:16:bf:f2:e5:68:56:96:9e:6f:5f:63:
f4:78:4b:92:9a:db:65:40:6e:31:85:b8:87:0c:52:
f1:1d:e5:74:84:66:df:cc:ff:fb:bb:40:a9:bf:25:
b4:50:ec:ae:cd:57:63:07:8e:d7:61:ea:69:c6:95:
1c:95:b5:40:94:72:b9:11:ea:3a:5c:76:72:d1:55:
85:30:ed:04:96:3b:7b:39:11:dc:a9:b6:a2:0e:a3:
9b:e3:70:18:e0:af:1f:0b:78:ce:16:b1:e3:43:28:
b8:54:9b:3c:cc:5e:4d:2b:4f:60:48:e3:f1:fc:0c:
61:c3:84:dd:cd:33:a2:33:0c:4d:2d:7f:34:ec:92:
a1:b8:5b:b0:40:bc:88:1b:ff:4a:ea:9c:85:8f:5e:
4e:fb:37:96:63:58:a0:a4:c7:2e:7f:7b:15:f8:3b:
ca:4e:3f:ff:5d:a8:b2:09:d0:6d:f7:ba:1b:77:27:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:29:AA:44:5B:6E:02:E9:4E:D2:B6:FD:25:ED:42:5B:32:BC:CE
X509v3 Authority Key Identifier:
keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8a:2e:8e:48:3b:72:17:15:7a:ea:f3:09:3e:df:42:1a:cd:
de:30:cd:c9:56:4d:b6:c5:af:74:c5:9a:01:86:f3:06:1c:e4:
23:c0:8c:23:fb:3f:ad:13:3b:6e:3b:96:6c:73:54:e5:d8:38:
a0:1a:92:c4:d7:1f:63:e0:35:85:34:b4:cb:64:f2:08:86:71:
1b:1e:a8:63:88:81:dc:e7:39:5f:5c:1a:01:be:fa:c8:63:4e:
53:75:a3:7c:b1:db:54:93:99:12:b5:11:2e:55:d3:b0:e6:8d:
a3:aa:ca:84:d2:59:4f:15:ba:5d:6b:06:af:55:31:14:a3:76:
a3:cc:e7:f2:c3:05:b4:cf:ef:84:8c:5c:30:d0:ee:77:3c:08:
4a:49:91:13:d6:86:25:17:0f:02:62:b3:b4:e5:b0:8d:46:76:
51:31:1b:5a:64:b2:d8:19:c9:42:e6:b7:14:32:81:2b:54:c7:
b0:a0:51:34:92:69:34:31:8d:87:e6:83:68:06:33:7a:0c:f3:
89:d9:c8:ea:91:71:fa:b8:3a:d4:4b:ca:7e:28:6f:d7:45:f2:
fd:4b:de:ce:6a:76:9a:2b:38:0c:39:69:1f:30:45:09:af:9f:
b8:3b:81:1b:fe:0f:8b:4e:9c:d9:e6:85:90:57:ef:be:f1:b3:
45:5f:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:15 2026 by rpki-client