
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
File: 58775F16B86C66299D9AF904F73786CD365D8787.mft (raw, json)
Hash identifier: 7S5eqN41b284FEbfYeCP0pr8h6YvAly9sjJ5VFPZkXk=
Subject key identifier: A4:45:52:6D:58:12:F0:C1:68:6B:B3:8C:3C:78:77:DB:8E:A2:B5:1B
Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787
Certificate serial: 43CC901E4ADB13AC104819045F05AC74CD0A7185
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
Manifest number: E9
Signing time: Sat 24 Oct 2026 16:24:35 +0000
Manifest this update: Sat 24 Oct 2026 16:19:35 +0000
Manifest next update: Sun 25 Oct 2026 20:12:35 +0000
Files and hashes: 1: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: H3eiKQ1rH4KKbSKlbbugmJZ0bk81cXXLmDh4ZWXXp9o=)
2: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: DSYc7pVKbHIfveW5SkkYCHzEWtZN+Ia+cl23XhbufI8=)
3: 58775F16B86C66299D9AF904F73786CD365D8787.crl (hash: EonWC3UUqpxWY/nz4+SDzacGurfs1rebha3OWhabH8o=)
4: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c=)
5: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: 8gGQkutirDXD8N7BapuXn91tRtkNIPwIx69eLjqIVd4=)
6: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: g14LcNrrW54yrzbA/vRmcLiMXBlSRO/YFYlVg+H2Jjk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cc:90:1e:4a:db:13:ac:10:48:19:04:5f:05:ac:74:cd:0a:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787
Validity
Not Before: Oct 24 16:19:35 2026 GMT
Not After : Oct 25 20:12:35 2026 GMT
Subject: CN=A445526D5812F0C1686BB38C3C7877DB8EA2B51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:2f:a4:ba:86:02:a2:d6:d2:04:6c:52:79:
6e:e0:b6:5c:65:6d:21:12:80:be:13:ca:95:74:7b:
f0:c5:f0:d0:63:3c:e7:bf:ac:a3:f3:63:8f:65:22:
49:f5:78:47:93:8e:5a:79:05:45:1b:d9:a5:8e:b9:
7b:09:a6:8b:a7:59:d9:08:ed:dd:1c:cb:a6:12:da:
84:aa:11:bb:e6:e4:4c:c9:81:9f:a3:f7:c6:70:29:
bd:64:14:02:c3:82:7a:7b:d2:fc:03:d6:c8:91:30:
f9:7a:95:97:a2:ec:89:e4:23:41:d5:47:47:57:cf:
3c:a4:ff:b8:e7:58:38:67:e5:5c:06:36:91:21:ab:
f0:41:ae:25:00:25:11:20:74:61:69:c5:f2:d1:fc:
30:e0:95:2e:16:03:90:fb:49:83:f3:bc:7e:3e:82:
1b:af:35:07:28:06:d5:d5:89:a3:ed:8a:f7:e8:02:
b1:c7:be:10:7f:37:c6:34:a6:a0:a5:07:bc:b2:3d:
e6:4b:05:78:ed:12:d1:e6:b2:5e:1e:db:ed:c5:71:
2a:5a:e1:16:20:34:5b:ce:b0:25:52:94:4e:1c:6c:
2a:30:c4:bf:bb:33:53:3f:8c:97:0e:af:95:f3:d7:
e9:f8:4f:fe:9f:d0:55:cf:66:b1:81:8b:68:c6:36:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:45:52:6D:58:12:F0:C1:68:6B:B3:8C:3C:78:77:DB:8E:A2:B5:1B
X509v3 Authority Key Identifier:
keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:80:93:d2:6a:86:9d:b9:09:ad:17:50:9f:93:db:d7:5f:a2:
0c:8f:ab:76:d3:d6:16:8a:a6:87:c1:01:cd:2d:a4:52:52:5b:
8e:95:55:6a:89:2c:79:7f:6d:99:ec:ed:87:26:a8:18:92:79:
f5:98:ac:b7:73:cd:6a:ff:f1:b0:2f:15:53:7d:22:c0:67:60:
2b:37:a3:19:26:a8:1c:7b:5d:bb:8c:b1:86:fa:9b:0e:4a:bd:
cf:51:91:5d:f7:b9:8c:1b:16:cc:4e:a8:e0:ea:7f:10:95:05:
91:c5:61:05:da:d3:e4:6f:91:3f:1e:de:1d:c6:10:0e:c5:ca:
e8:9c:48:92:d6:ef:c0:de:46:6e:a3:ba:42:ba:0a:8c:19:30:
56:b4:26:58:36:4f:85:5e:4d:85:3f:ff:68:89:ae:2e:62:ad:
d6:15:48:5c:f1:8a:d6:09:b9:57:48:2b:f8:19:21:71:75:ed:
c1:4b:4c:c9:93:f8:2e:00:cb:74:ff:fa:e7:63:10:be:14:c8:
76:c4:de:c3:e2:7f:4d:10:7b:70:01:29:c3:5c:f6:86:b9:50:
5e:81:32:35:51:73:9f:35:22:0d:7f:8a:42:d3:31:82:12:a4:
aa:57:5f:08:58:b1:e6:77:fe:b2:a1:97:98:40:4c:77:68:9e:
8c:47:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:48 2026 by rpki-client