
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft
File: 558FDCA045A9734D65FDF6A0C710F612856995B6.mft (raw, json)
Hash identifier: UULJlvySM4e6O2AzyCwvD/TbrOuCi12lIbFMH4Cq2yA=
Subject key identifier: 26:F3:FB:4F:75:C1:1D:9C:95:C7:4C:EF:6F:39:76:EA:72:E2:71:EC
Authority key identifier: 55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6
Certificate issuer: /CN=558FDCA045A9734D65FDF6A0C710F612856995B6
Certificate serial: 1D7EE6926C036FBAFC6A1BE771F72041717B616F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 00:59:11 +0000
Manifest this update: Wed 17 Jun 2026 00:54:11 +0000
Manifest next update: Thu 18 Jun 2026 03:33:11 +0000
Files and hashes: 1: 558FDCA045A9734D65FDF6A0C710F612856995B6.crl (hash: st/wOz3HWq8+m9tgklBSmuY37rgvlAWKFIzgjpU7CNM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl
rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7e:e6:92:6c:03:6f:ba:fc:6a:1b:e7:71:f7:20:41:71:7b:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558FDCA045A9734D65FDF6A0C710F612856995B6
Validity
Not Before: Jun 17 00:54:11 2026 GMT
Not After : Jun 18 03:33:11 2026 GMT
Subject: CN=26F3FB4F75C11D9C95C74CEF6F3976EA72E271EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:bf:42:88:df:b4:0c:bf:52:ba:e1:df:9a:
df:13:b4:2e:51:9c:e1:db:b5:7f:0a:5e:0e:f8:71:
f0:e3:9a:b4:29:4f:59:62:49:b5:11:5f:20:0f:c3:
55:1f:f3:17:68:0e:d8:e8:1b:34:f5:78:05:ba:bc:
52:c7:fe:b3:0a:c9:2a:90:2e:dd:2a:05:04:17:01:
ca:27:bd:0f:1f:19:42:0e:bd:78:23:12:8e:28:36:
dc:c7:ac:09:7b:21:ac:8f:db:df:f2:7b:22:6b:d4:
f1:a8:b7:88:d6:f8:f9:e9:6d:4f:df:08:48:ec:04:
a3:cd:0f:f6:3a:70:18:2f:b4:8f:60:61:c7:c6:d8:
d0:f7:68:ea:c8:d4:3d:69:e8:b3:3c:5e:70:d2:12:
63:8c:91:ed:22:d0:3c:80:7a:38:e4:0f:1f:d9:32:
d4:bc:6a:a7:50:55:50:57:c7:d3:c3:35:49:a0:de:
49:67:06:b1:3b:0f:f0:69:13:13:2a:33:99:93:43:
61:8e:9b:b0:f3:1c:47:a2:0b:4e:f9:13:d4:cd:32:
d8:77:4c:48:4f:7d:16:85:85:fb:4f:4b:65:78:ee:
c1:fb:06:c7:26:1a:7b:70:39:9b:e8:73:af:11:80:
5f:b8:35:67:c5:ba:55:d7:a3:19:e8:57:a5:22:15:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:FB:4F:75:C1:1D:9C:95:C7:4C:EF:6F:39:76:EA:72:E2:71:EC
X509v3 Authority Key Identifier:
keyid:55:8F:DC:A0:45:A9:73:4D:65:FD:F6:A0:C7:10:F6:12:85:69:95:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/558FDCA045A9734D65FDF6A0C710F612856995B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/558FDCA045A9734D65FDF6A0C710F612856995B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:19:97:0e:2e:dc:76:53:8f:c0:67:cf:0a:39:da:48:5f:
01:46:66:c1:a1:ca:4c:21:5a:bf:bf:df:4d:a0:f0:87:ff:88:
9d:52:79:60:cb:a3:20:2d:e6:82:58:8d:50:14:b6:64:66:2c:
d0:ad:b5:b7:6b:28:66:2d:76:47:56:79:50:a2:59:f7:a4:42:
9f:8e:28:4f:90:49:37:60:3a:9a:ed:4e:8c:23:1f:b9:97:96:
d9:31:99:d8:48:49:42:4e:72:db:27:e7:e1:63:5a:ae:d8:92:
d4:90:9f:6d:79:0d:37:30:e9:57:a9:da:24:8e:85:3b:2f:85:
a0:ca:93:8d:b0:2c:56:08:72:83:16:91:a4:c6:11:a7:f2:1a:
04:3d:c7:82:9d:55:ca:60:50:7e:05:dd:2f:e3:9c:21:78:8f:
9e:16:b5:33:1c:04:81:7c:94:b3:fa:b9:5d:ec:cc:84:cf:f4:
b0:ba:cc:7b:da:12:82:96:a0:00:df:17:8a:82:58:7f:99:72:
ca:8b:6b:73:9a:26:f7:2b:92:cc:ad:bf:ca:63:e6:b7:61:a3:
5a:32:b3:b7:8b:be:bd:c7:bf:f8:23:1d:c9:a4:59:79:3b:ee:
f3:a4:80:b6:95:40:4b:51:f6:27:0f:4b:16:e7:01:8d:16:67:
c3:6a:00:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHX7mkmwDb7r8ahvncfcgQXF7YW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4
NTY5OTVCNjAeFw0yNjA2MTcwMDU0MTFaFw0yNjA2MTgwMzMzMTFaMDMxMTAvBgNV
BAMTKDI2RjNGQjRGNzVDMTFEOUM5NUM3NENFRjZGMzk3NkVBNzJFMjcxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JL9CiN+0DL9SuuHfmt8TtC5R
nOHbtX8KXg74cfDjmrQpT1liSbURXyAPw1Uf8xdoDtjoGzT1eAW6vFLH/rMKySqQ
Lt0qBQQXAconvQ8fGUIOvXgjEo4oNtzHrAl7IayP29/yeyJr1PGot4jW+PnpbU/f
CEjsBKPND/Y6cBgvtI9gYcfG2ND3aOrI1D1p6LM8XnDSEmOMke0i0DyAejjkDx/Z
MtS8aqdQVVBXx9PDNUmg3klnBrE7D/BpExMqM5mTQ2GOm7DzHEeiC075E9TNMth3
TEhPfRaFhftPS2V47sH7BscmGntwOZvoc68RgF+4NWfFulXXoxnoV6UiFfFdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJvP7T3XBHZyVx0zvbzl26nLicewwHwYDVR0j
BBgwFoAUVY/coEWpc01l/fagxxD2EoVplbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDRkM2VmMmMtNzgxZC00ZDBjLWE2ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0
NUE5NzM0RDY1RkRGNkEwQzcxMEY2MTI4NTY5OTVCNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NThGRENBMDQ1QTk3MzRENjVGREY2QTBDNzEwRjYxMjg1Njk5
NUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2
ODItOTFhYzAxMWVmNmI3LzAvNTU4RkRDQTA0NUE5NzM0RDY1RkRGNkEwQzcxMEY2
MTI4NTY5OTVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGHTGZcOLtx2U4/AZ88KOdpIXwFGZsGhykwh
Wr+/302g8If/iJ1SeWDLoyAt5oJYjVAUtmRmLNCttbdrKGYtdkdWeVCiWfekQp+O
KE+QSTdgOprtTowjH7mXltkxmdhISUJOctsn5+FjWq7YktSQn215DTcw6Vep2iSO
hTsvhaDKk42wLFYIcoMWkaTGEafyGgQ9x4KdVcpgUH4F3S/jnCF4j54WtTMcBIF8
lLP6uV3szITP9LC6zHvaEoKWoADfF4qCWH+ZcsqLa3OaJvcrksytv8pj5rdho1oy
s7eLvr3Hv/gjHcmkWXk77vOkgLaVQEtR9icPSxbnAY0WZ8NqAPI=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:02:28 2026 by rpki-client