$ rpki-client -vvvf rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft File: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft (raw, json) Hash identifier: EuOlPSSq6+DwajRCn09MdEe8+nKcGhkFzLrHt8KJN78= Subject key identifier: 85:87:09:8C:41:BB:DB:D6:AC:3C:02:C5:95:B9:16:6D:78:C5:50:FD Authority key identifier: 58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 Certificate issuer: /CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Certificate serial: 64BF2D416098548259CEFE2D8BB91F5BE506B42D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 09:40:39 +0000 Manifest this update: Thu 17 Sep 2026 09:35:39 +0000 Manifest next update: Fri 18 Sep 2026 13:03:39 +0000 Files and hashes: 1: 58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl (hash: lhHWZ/0DiTAkzjmpE9pF2bS+mRLFfsCZwIeTI6wQHlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bf:2d:41:60:98:54:82:59:ce:fe:2d:8b:b9:1f:5b:e5:06:b4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A6A47D147C615795D791C4BA1C6DE5928AAC49 Validity Not Before: Sep 17 09:35:39 2026 GMT Not After : Sep 18 13:03:39 2026 GMT Subject: CN=8587098C41BBDBD6AC3C02C595B9166D78C550FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:36:b5:91:a5:ef:ec:0b:6d:f1:0e:40:50: 7e:a2:25:fc:6e:31:bd:c2:0d:e8:26:1c:07:47:8f: 83:7e:c1:28:f5:a3:40:69:95:b1:28:53:d0:06:4d: ec:c3:f5:15:20:b8:75:89:69:af:2e:a9:21:b6:87: f7:80:4a:7e:10:43:63:ea:c8:66:4e:f0:31:ed:55: 20:3f:d5:1c:e8:d0:bf:9e:e0:c7:e5:f0:a7:32:1d: 45:16:eb:c0:02:35:2d:ca:50:3e:55:7c:56:91:48: 04:1e:63:bc:51:59:71:2c:ac:38:28:a3:c2:a5:cf: c1:06:1b:a7:79:15:8a:54:69:38:70:88:bd:c7:32: f1:78:59:34:d5:6c:60:f8:cd:62:6b:f1:9e:2d:51: 5e:ef:95:75:8d:de:e5:a8:a4:99:8a:82:70:ab:6a: f0:3d:08:4c:8b:73:af:bd:49:d1:90:55:5c:c4:8b: 93:aa:dc:a7:69:4c:b6:0d:6c:99:50:33:24:66:35: 9f:cc:91:5a:68:39:55:7f:08:e1:26:28:7d:1b:7a: e5:44:8e:a0:cc:4b:6e:cf:21:de:77:10:aa:f0:9d: 37:15:00:49:f3:9e:83:b5:fc:03:dd:d3:bd:3f:b2: 16:dd:94:98:b7:9a:dd:1f:33:69:c3:32:35:07:a4: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:09:8C:41:BB:DB:D6:AC:3C:02:C5:95:B9:16:6D:78:C5:50:FD X509v3 Authority Key Identifier: keyid:58:A6:A4:7D:14:7C:61:57:95:D7:91:C4:BA:1C:6D:E5:92:8A:AC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58A6A47D147C615795D791C4BA1C6DE5928AAC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/58A6A47D147C615795D791C4BA1C6DE5928AAC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bb:f5:7e:bb:03:89:fd:da:f7:84:f6:7e:cd:86:0a:c9:32: 1c:dc:c7:98:c7:28:a3:ac:9f:94:b8:c9:a8:00:11:34:b0:e8: ab:bd:90:68:87:bf:9f:ea:7b:c3:2c:5a:9a:b3:8c:5d:c7:50: 71:15:ae:6d:90:8c:97:88:87:75:d4:2e:ac:5f:8b:01:b4:38: 21:6a:ea:59:4b:69:6e:52:75:9d:e1:64:1d:77:43:82:b4:f6: 3c:70:4f:65:7c:bc:ad:56:ab:85:eb:61:05:35:86:c3:08:d8: 0a:88:a1:1c:08:41:89:82:ee:26:4c:ed:46:9e:a4:93:1a:24: d0:b9:e4:a5:e5:3d:78:9e:87:bf:67:6c:5f:ae:38:ef:ac:25: f7:ff:37:51:17:83:4d:b3:93:85:69:51:c5:ed:42:8b:4c:9b: 24:eb:e1:7d:4b:aa:2a:c0:77:46:37:bf:7c:2e:b1:45:06:d6: f3:b2:d0:1b:0d:89:bf:f3:0e:5e:6f:53:b1:cf:d6:f1:31:de: 26:97:7e:2e:38:ad:86:d6:3f:7c:70:a3:6a:41:14:22:43:55: 41:f7:52:35:11:b2:5f:64:42:fc:d7:9d:5c:8b:ec:1c:e9:bb: 48:e5:34:ce:b0:a8:0a:b6:dc:60:a7:33:9b:bc:0a:42:57:d6: 75:e6:dc:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL8tQWCYVIJZzv4ti7kfW+UGtC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5 MjhBQUM0OTAeFw0yNjA5MTcwOTM1MzlaFw0yNjA5MTgxMzAzMzlaMDMxMTAvBgNV BAMTKDg1ODcwOThDNDFCQkRCRDZBQzNDMDJDNTk1QjkxNjZENzhDNTUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6ja1kaXv7Att8Q5AUH6iJfxu Mb3CDegmHAdHj4N+wSj1o0BplbEoU9AGTezD9RUguHWJaa8uqSG2h/eASn4QQ2Pq yGZO8DHtVSA/1Rzo0L+e4Mfl8KcyHUUW68ACNS3KUD5VfFaRSAQeY7xRWXEsrDgo o8Klz8EGG6d5FYpUaThwiL3HMvF4WTTVbGD4zWJr8Z4tUV7vlXWN3uWopJmKgnCr avA9CEyLc6+9SdGQVVzEi5Oq3KdpTLYNbJlQMyRmNZ/MkVpoOVV/COEmKH0beuVE jqDMS27PId53EKrwnTcVAEnznoO1/APd070/shbdlJi3mt0fM2nDMjUHpGcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYcJjEG729asPALFlbkWbXjFUP0wHwYDVR0j BBgwFoAUWKakfRR8YVeV15HEuhxt5ZKKrEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTA2YjFiYzctYzY1YS00YTExLTkyNzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0Qx NDdDNjE1Nzk1RDc5MUM0QkExQzZERTU5MjhBQUM0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEE2QTQ3RDE0N0M2MTU3OTVENzkxQzRCQTFDNkRFNTkyOEFB QzQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvNThBNkE0N0QxNDdDNjE1Nzk1RDc5MUM0QkExQzZE RTU5MjhBQUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+79X67A4n92veE9n7NhgrJMhzcx5jHKKOs n5S4yagAETSw6Ku9kGiHv5/qe8MsWpqzjF3HUHEVrm2QjJeIh3XULqxfiwG0OCFq 6llLaW5SdZ3hZB13Q4K09jxwT2V8vK1Wq4XrYQU1hsMI2AqIoRwIQYmC7iZM7Uae pJMaJNC55KXlPXieh79nbF+uOO+sJff/N1EXg02zk4VpUcXtQotMmyTr4X1LqirA d0Y3v3wusUUG1vOy0BsNib/zDl5vU7HP1vEx3iaXfi44rYbWP3xwo2pBFCJDVUH3 UjURsl9kQvzXnVyL7Bzpu0jlNM6wqAq23GCnM5u8CkJX1nXm3Ag= -----END CERTIFICATE-----Generated at Thu Sep 17 14:49:02 2026 by rpki-client