
$ rpki-client -vvf rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
File: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft (raw, json)
Hash identifier: J+APiOzASGPu59GNy1z6p2WXiNCLMMjAJwFHmYn30sU=
Subject key identifier: 4D:C7:8E:59:97:55:02:4D:28:72:DC:AE:B8:CB:6F:6A:20:5C:62:AD
Authority key identifier: 58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19
Certificate issuer: /CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
Certificate serial: 2C018BB2571B72720775E16DAF7F590DDC12FEB4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 11:49:43 +0000
Manifest this update: Tue 02 Jun 2026 11:44:43 +0000
Manifest next update: Wed 03 Jun 2026 12:26:43 +0000
Files and hashes: 1: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl (hash: QxCrXc5QwO60YC3pSIeOKowcyDwAOS9A+IN3Rn64qHI=)
2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: //BNbGEHF8EA4DRII1hDL8v8FS3Stqlu+4PQCjhVKuc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl
rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 12:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:01:8b:b2:57:1b:72:72:07:75:e1:6d:af:7f:59:0d:dc:12:fe:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
Validity
Not Before: Jun 2 11:44:43 2026 GMT
Not After : Jun 3 12:26:43 2026 GMT
Subject: CN=4DC78E599755024D2872DCAEB8CB6F6A205C62AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:36:81:97:62:5f:0f:0d:e5:8d:a2:c9:68:
c5:9f:a7:0d:dc:0e:2c:ac:5f:72:9b:ed:f1:13:56:
19:00:c2:21:cc:e8:a8:ed:dc:98:ba:42:17:31:86:
39:1e:ca:d4:48:bc:00:b9:fd:30:b0:38:27:8c:c8:
99:90:a5:22:0e:d7:f4:7a:1f:9b:c2:fe:a6:a0:0c:
a6:3a:29:39:3c:32:77:14:1b:11:a3:8c:cb:0d:79:
aa:7a:95:13:25:02:bd:13:dc:89:29:9a:da:93:2b:
e1:13:ff:5e:d4:8b:74:18:69:10:59:f2:75:22:8b:
77:08:42:30:6f:7c:a5:33:08:fc:ae:f2:1d:35:7e:
29:1d:55:5b:ba:01:34:cb:9f:1f:0f:35:2c:ba:9a:
e0:73:e0:3f:40:71:94:12:c1:07:e9:62:15:58:4c:
6a:31:9e:33:92:de:5b:6e:b0:0e:ee:52:4d:3e:48:
00:87:ef:ef:47:75:08:4a:3b:5b:e6:4a:df:2f:7d:
f0:f9:bb:f5:56:40:5c:69:fc:62:75:a5:e5:c2:b8:
e8:b0:28:3f:c5:af:c6:aa:00:9b:12:8f:db:4d:fb:
cf:1b:70:4c:96:d3:ee:07:24:4a:18:d9:45:0d:4a:
c1:00:29:74:be:c6:35:bb:54:54:ef:d1:88:03:0d:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:8E:59:97:55:02:4D:28:72:DC:AE:B8:CB:6F:6A:20:5C:62:AD
X509v3 Authority Key Identifier:
keyid:58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:96:71:b8:af:a4:e4:42:3b:4a:91:f7:b3:4a:14:22:05:c3:
0f:21:cf:93:5d:48:b7:44:64:92:56:e0:84:3c:35:4a:ee:ac:
d1:83:6c:25:db:2c:62:e7:a4:23:7e:6b:ae:09:39:45:ae:ee:
6a:93:c4:6a:ce:25:2c:11:4e:ff:36:a8:ec:bc:c6:fe:63:9c:
54:fe:bd:bd:a7:43:14:48:cb:1d:29:56:96:fc:6a:02:18:d1:
74:78:7d:6f:36:97:43:f4:ce:54:9b:8a:a2:e7:8f:f8:d2:2a:
de:42:cb:fb:2e:16:56:0f:b3:88:d8:48:6a:41:f2:06:7f:6d:
14:4a:41:0c:1e:0e:49:7c:06:86:16:65:00:c6:2f:44:32:f2:
46:c6:03:1c:e3:f4:fc:35:2a:92:db:e5:44:61:cb:d8:97:b8:
e7:38:a5:1b:7c:e0:51:54:06:68:14:71:b0:fa:38:20:55:e3:
ce:cf:d0:27:7e:c7:a9:c9:88:dd:70:3e:49:75:ce:c1:c5:5f:
30:c0:97:a6:d6:ea:60:b0:4d:e2:2c:43:58:41:93:7c:79:ed:
12:c5:35:89:8c:ab:55:8a:c8:3d:8b:3e:87:8e:80:aa:c8:44:
13:c3:ee:9e:eb:54:05:1c:16:b5:b5:40:dd:8c:5c:cb:e7:52:
1b:cb:0a:72
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULAGLslcbcnIHdeFtr39ZDdwS/rQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5
QzZERjUxOTAeFw0yNjA2MDIxMTQ0NDNaFw0yNjA2MDMxMjI2NDNaMDMxMTAvBgNV
BAMTKDREQzc4RTU5OTc1NTAyNEQyODcyRENBRUI4Q0I2RjZBMjA1QzYyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4STaBl2JfDw3ljaLJaMWfpw3c
DiysX3Kb7fETVhkAwiHM6Kjt3Ji6QhcxhjkeytRIvAC5/TCwOCeMyJmQpSIO1/R6
H5vC/qagDKY6KTk8MncUGxGjjMsNeap6lRMlAr0T3IkpmtqTK+ET/17Ui3QYaRBZ
8nUii3cIQjBvfKUzCPyu8h01fikdVVu6ATTLnx8PNSy6muBz4D9AcZQSwQfpYhVY
TGoxnjOS3ltusA7uUk0+SACH7+9HdQhKO1vmSt8vffD5u/VWQFxp/GJ1peXCuOiw
KD/Fr8aqAJsSj9tN+88bcEyW0+4HJEoY2UUNSsEAKXS+xjW7VFTv0YgDDdT3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTceOWZdVAk0octyuuMtvaiBcYq0wHwYDVR0j
BBgwFoAUWLuhkkv94r44YdPC6kOCb5xt9RkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGI4NDNmMDAtMjgyMy00NzMyLTliN2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0
QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5QzZERjUxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OEJCQTE5MjRCRkRFMkJFMzg2MUQzQzJFQTQzODI2RjlDNkRG
NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli
N2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0Mzgy
NkY5QzZERjUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADOWcbivpORCO0qR97NKFCIFww8hz5NdSLdE
ZJJW4IQ8NUrurNGDbCXbLGLnpCN+a64JOUWu7mqTxGrOJSwRTv82qOy8xv5jnFT+
vb2nQxRIyx0pVpb8agIY0XR4fW82l0P0zlSbiqLnj/jSKt5Cy/suFlYPs4jYSGpB
8gZ/bRRKQQweDkl8BoYWZQDGL0Qy8kbGAxzj9Pw1KpLb5URhy9iXuOc4pRt84FFU
BmgUcbD6OCBV487P0Cd+x6nJiN1wPkl1zsHFXzDAl6bW6mCwTeIsQ1hBk3x57RLF
NYmMq1WKyD2LPoeOgKrIRBPD7p7rVAUcFrW1QN2MXMvnUhvLCnI=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:18 2026 by rpki-client