$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: 1xZkzYvhetBoEArWtT5YlZuBkYJegBmG06X94u+TvLY= Subject key identifier: 1E:0A:B1:E9:90:F1:99:36:03:3A:01:AB:ED:72:94:59:8E:D7:E6:E2 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 5242852BF0D95D80CF597C88E28A01A712DF7853 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 0538 Signing time: Sun 19 Apr 2026 22:12:18 +0000 Manifest this update: Sun 19 Apr 2026 22:07:18 +0000 Manifest next update: Wed 22 Apr 2026 23:37:18 +0000 Files and hashes: 1: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: uOf7X0gaYHlRMI8hCym3d1AVy6qPHr01bSIDMhQJdtA=) 2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 23:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:85:2b:f0:d9:5d:80:cf:59:7c:88:e2:8a:01:a7:12:df:78:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Apr 19 22:07:18 2026 GMT Not After : Apr 22 23:37:18 2026 GMT Subject: CN=1E0AB1E990F19936033A01ABED7294598ED7E6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:79:ac:ff:70:84:28:9e:8e:33:0c:59:31: bb:3c:ac:9c:97:86:bf:78:1e:dc:f1:3e:5e:8c:dd: f7:d0:25:66:93:46:0f:47:90:bf:8a:e2:a7:97:46: f6:40:3c:b6:18:44:9c:32:eb:38:ef:01:1f:85:32: f3:6a:7f:6c:52:0a:7a:2c:02:2c:69:5a:fb:01:e3: 5b:4b:66:9c:0d:d5:f7:14:92:98:ad:20:03:94:96: 0c:6c:ec:ec:cd:18:82:e6:3d:97:2d:26:1a:a1:67: 53:2c:df:de:0d:68:97:71:82:b0:41:ff:f4:26:89: 68:8d:7d:82:c2:d5:a6:a7:3d:5d:1c:7a:3d:96:24: f8:5c:20:96:05:ad:e3:5b:24:82:2c:ae:33:ad:d0: b0:e8:1b:56:8c:fd:d4:90:08:96:cd:16:8f:58:b3: c1:45:a0:d2:12:4f:a4:d1:8d:24:eb:13:f7:d3:81: 67:77:dd:92:2e:40:7f:e1:2b:21:9e:a1:c9:4e:f2: 6b:2c:b9:f2:06:32:25:21:17:cd:da:4d:53:e1:28: d7:fb:48:8c:71:d9:c0:e1:88:18:c2:5e:f4:ac:3b: c8:29:f0:8d:37:e6:ae:57:a2:d6:eb:5c:5b:bd:1d: 2d:08:23:e8:15:53:4f:5c:36:b7:f7:75:94:d3:42: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0A:B1:E9:90:F1:99:36:03:3A:01:AB:ED:72:94:59:8E:D7:E6:E2 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:35:80:bb:c2:a8:3b:a0:b8:fc:67:2b:75:8e:9c:e6:61:9f: af:3d:fe:66:fa:74:6e:01:e7:31:37:d0:83:76:11:f9:d7:0a: db:e5:19:71:dd:11:6f:1b:fb:3a:c4:d7:cf:16:91:3e:92:ec: 9a:14:c2:ca:a7:18:2c:03:f3:f4:3f:45:e0:e4:95:cf:74:95: 62:f5:1b:b9:55:79:b8:da:3f:7d:75:22:89:75:f2:34:e6:46: dd:dc:f4:16:94:54:f4:5a:db:78:34:8a:fc:d8:76:13:c2:b4: 43:9c:10:a6:68:f9:4b:f2:88:35:5f:52:99:e5:e3:5d:c9:13: 23:1c:b7:22:d8:0f:27:d8:3d:9a:81:e8:1b:d6:4f:00:e2:7a: 71:83:e1:a9:73:8e:0e:ee:25:79:25:96:87:4b:f7:46:bf:9f: e4:2f:92:1e:38:a3:88:4a:6e:54:3e:6f:b6:15:6c:d8:2a:b6: b2:b9:26:90:02:2c:b5:93:1f:86:cf:a4:76:9b:65:77:e8:46: 0e:5a:0f:1c:1e:d1:ed:f6:99:21:d2:5c:fd:76:10:d1:03:b5: ec:8f:4d:52:c3:1f:3f:d2:90:39:89:d9:b2:cb:ac:04:58:1e: 44:38:99:e3:2a:73:c4:15:20:ac:10:cf:dd:08:a3:4f:1d:cb: 67:9b:74:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkKFK/DZXYDPWXyI4ooBpxLfeFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNjA0MTkyMjA3MThaFw0yNjA0MjIyMzM3MThaMDMxMTAvBgNV BAMTKDFFMEFCMUU5OTBGMTk5MzYwMzNBMDFBQkVENzI5NDU5OEVEN0U2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRHms/3CEKJ6OMwxZMbs8rJyX hr94HtzxPl6M3ffQJWaTRg9HkL+K4qeXRvZAPLYYRJwy6zjvAR+FMvNqf2xSCnos AixpWvsB41tLZpwN1fcUkpitIAOUlgxs7OzNGILmPZctJhqhZ1Ms394NaJdxgrBB //QmiWiNfYLC1aanPV0cej2WJPhcIJYFreNbJIIsrjOt0LDoG1aM/dSQCJbNFo9Y s8FFoNIST6TRjSTrE/fTgWd33ZIuQH/hKyGeoclO8mssufIGMiUhF83aTVPhKNf7 SIxx2cDhiBjCXvSsO8gp8I035q5XotbrXFu9HS0II+gVU09cNrf3dZTTQvl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgqx6ZDxmTYDOgGr7XKUWY7X5uIwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY1gLvCqDuguPxnK3WOnOZhn689/mb6dG4B 5zE30IN2EfnXCtvlGXHdEW8b+zrE188WkT6S7JoUwsqnGCwD8/Q/ReDklc90lWL1 G7lVebjaP311Iol18jTmRt3c9BaUVPRa23g0ivzYdhPCtEOcEKZo+UvyiDVfUpnl 413JEyMctyLYDyfYPZqB6BvWTwDienGD4alzjg7uJXkllodL90a/n+Qvkh44o4hK blQ+b7YVbNgqtrK5JpACLLWTH4bPpHabZXfoRg5aDxwe0e32mSHSXP12ENEDteyP TVLDHz/SkDmJ2bLLrARYHkQ4meMqc8QVIKwQz90Io08dy2ebdKo= -----END CERTIFICATE-----Generated at Mon Apr 20 09:40:37 2026 by rpki-client