$ rpki-client -vvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json) Hash identifier: yIr56wXKByt7caVKU7A7YGjRKjiqhWMxPZdTRb53qLU= Subject key identifier: 04:91:33:49:3C:6C:BB:79:E6:15:B9:C5:D3:D3:25:E0:D8:3A:86:17 Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Certificate serial: 1DA34C8E6CF009995893F8829D4111787894C6DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:16:45 +0000 Manifest this update: Fri 19 Jun 2026 17:11:45 +0000 Manifest next update: Sat 20 Jun 2026 17:39:45 +0000 Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: rcEe4dJ01djxltKRwJEyHvnu2aNVF/b6f5z79GvQYYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a3:4c:8e:6c:f0:09:99:58:93:f8:82:9d:41:11:78:78:94:c6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Validity Not Before: Jun 19 17:11:45 2026 GMT Not After : Jun 20 17:39:45 2026 GMT Subject: CN=049133493C6CBB79E615B9C5D3D325E0D83A8617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:be:29:6a:a2:d3:12:f7:29:d4:32:8f:40: cb:15:df:46:11:ee:ab:09:43:c7:c4:52:d5:6c:e0: 05:77:d8:53:77:8b:08:4f:05:38:ad:ea:e5:b1:08: 4b:75:c8:23:da:d6:41:b3:11:77:35:d0:0c:10:8a: 31:9a:9f:de:1b:92:83:51:f4:4c:5d:7c:e5:f8:f0: e8:96:ed:a2:c2:52:b0:d3:a2:1c:bc:83:7d:11:d1: 29:13:21:bd:58:14:1f:e6:5c:d8:c5:49:2d:63:10: 09:1b:84:f1:86:79:62:55:5d:7e:82:02:1d:6d:27: e5:62:18:dc:59:0b:a4:99:b5:95:7d:0e:4b:3b:a1: 0b:4b:d9:19:92:4b:ce:a0:ab:d1:a5:e3:29:e3:29: 7a:19:60:8d:b3:a8:4d:68:bc:d4:46:88:83:9c:67: e1:4a:47:90:99:7f:5f:4e:d8:58:60:bb:7b:dc:4a: 53:2d:45:97:ec:fb:62:02:bf:e7:5a:7a:3f:cd:ef: bc:98:a0:4f:66:65:93:be:cd:23:c8:df:72:5e:37: 26:d5:60:d6:89:74:98:16:90:bd:80:6d:31:13:05: a7:6b:83:11:63:4f:c7:2b:af:bf:83:35:9f:e6:f8: 84:32:33:99:7b:cf:67:15:ae:f2:ce:4f:c3:ca:aa: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:91:33:49:3C:6C:BB:79:E6:15:B9:C5:D3:D3:25:E0:D8:3A:86:17 X509v3 Authority Key Identifier: keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fb:10:e6:52:e6:42:7a:a0:90:70:97:e3:6d:61:cf:8e:6b: 3a:c6:e8:ef:5d:2b:f8:a5:36:36:37:78:e4:00:16:4f:43:7a: 1e:05:05:20:44:ac:14:26:8e:f9:60:eb:2d:f8:22:4d:a6:1c: 9f:bc:59:11:4d:e6:68:47:50:cd:e2:ed:4d:17:d7:ee:60:3e: 83:1e:a4:d3:ac:e9:22:5e:72:31:ea:7a:2d:c9:3d:a2:ad:aa: 5b:b1:fd:0b:d2:91:eb:06:b3:9d:8d:3f:4c:26:01:c5:09:b3: 2e:8c:65:09:50:bd:22:e0:d2:37:85:36:36:3f:3b:0c:9b:db: be:cf:8f:3c:04:69:c8:b8:33:ce:d2:f7:71:68:93:3b:0d:2e: 9e:98:71:60:48:6c:d4:8c:bb:05:c8:f9:28:d7:bd:39:1d:dc: a8:47:c7:5f:2f:6a:6b:d9:3e:6e:a8:ff:bc:6d:2e:d6:df:78: 4c:ce:de:68:bf:b8:ea:d9:75:ce:60:52:e3:18:3d:bb:e8:cf: 72:86:53:7a:e4:3f:ad:6a:f4:32:1c:c1:b8:ee:46:c4:5d:b0: a4:53:af:a6:fa:ab:1e:4f:27:4c:2f:90:6a:23:61:22:ee:8e: 52:09:8f:05:b1:c4:f7:75:7f:f1:ad:88:88:a9:7f:9a:bb:42: 35:4a:54:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaNMjmzwCZlYk/iCnUEReHiUxt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5 MjhBQUM0OTAeFw0yNjA2MTkxNzExNDVaFw0yNjA2MjAxNzM5NDVaMDMxMTAvBgNV BAMTKDA0OTEzMzQ5M0M2Q0JCNzlFNjE1QjlDNUQzRDMyNUUwRDgzQTg2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Vb4paqLTEvcp1DKPQMsV30YR 7qsJQ8fEUtVs4AV32FN3iwhPBTit6uWxCEt1yCPa1kGzEXc10AwQijGan94bkoNR 9ExdfOX48OiW7aLCUrDTohy8g30R0SkTIb1YFB/mXNjFSS1jEAkbhPGGeWJVXX6C Ah1tJ+ViGNxZC6SZtZV9Dks7oQtL2RmSS86gq9Gl4ynjKXoZYI2zqE1ovNRGiIOc Z+FKR5CZf19O2Fhgu3vcSlMtRZfs+2ICv+daej/N77yYoE9mZZO+zSPI33JeNybV YNaJdJgWkL2AbTETBadrgxFjT8crr7+DNZ/m+IQyM5l7z2cVrvLOT8PKqvpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJEzSTxsu3nmFbnF09Ml4Ng6hhcwHwYDVR0j BBgwFoAUWKakfRR8YVeV15HEuhxt5ZKKrEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTA2YjFiYzctYzY1YS00YTExLTkyNzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0Qx NDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5MjhBQUM0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEE2QTQ3RDE0N0M2MTU3OTVENzkxQzRCQTFDNkRFNTkyOEFB QzQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZE RTU5MjhBQUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn7EOZS5kJ6oJBwl+NtYc+OazrG6O9dK/il NjY3eOQAFk9Deh4FBSBErBQmjvlg6y34Ik2mHJ+8WRFN5mhHUM3i7U0X1+5gPoMe pNOs6SJecjHqei3JPaKtqlux/QvSkesGs52NP0wmAcUJsy6MZQlQvSLg0jeFNjY/ Owyb277PjzwEaci4M87S93FokzsNLp6YcWBIbNSMuwXI+SjXvTkd3KhHx18vamvZ Pm6o/7xtLtbfeEzO3mi/uOrZdc5gUuMYPbvoz3KGU3rkP61q9DIcwbjuRsRdsKRT r6b6qx5PJ0wvkGojYSLujlIJjwWxxPd1f/GtiIipf5q7QjVKVGc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:10 2026 by rpki-client