$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft File: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft (raw, json) Hash identifier: eiCtq1r8GDGVvaAQlegzkcVRT+C+pdu7vaMMjq3eUeA= Subject key identifier: E3:15:62:C2:D0:DF:AD:A1:AA:31:F6:56:CC:5A:21:B0:11:62:FC:A6 Authority key identifier: 58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19 Certificate issuer: /CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519 Certificate serial: 5DF4F69150B847BCA69CAE75232D379E5AFD4E9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:57:07 +0000 Manifest this update: Thu 17 Sep 2026 06:52:07 +0000 Manifest next update: Fri 18 Sep 2026 08:49:07 +0000 Files and hashes: 1: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl (hash: EEY4ufsU7reG1nv7DQ8aIoIviuOk9vkg9zOwApiUKRw=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: //BNbGEHF8EA4DRII1hDL8v8FS3Stqlu+4PQCjhVKuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f4:f6:91:50:b8:47:bc:a6:9c:ae:75:23:2d:37:9e:5a:fd:4e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519 Validity Not Before: Sep 17 06:52:07 2026 GMT Not After : Sep 18 08:49:07 2026 GMT Subject: CN=E31562C2D0DFADA1AA31F656CC5A21B01162FCA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:eb:1b:e9:65:28:8b:8f:2d:49:b8:53:0d: 93:69:0d:13:5f:14:de:e6:c7:81:dc:61:16:4a:69: 73:bd:a6:c5:4f:80:f1:f4:79:5c:54:20:7d:1d:8a: 7d:40:28:d2:d7:2e:08:ec:a6:24:d2:84:2f:dd:74: a3:7f:05:e5:89:b2:74:cc:39:08:a0:ec:77:98:25: df:0b:bb:7d:c3:8c:e0:15:fe:fa:5e:fa:49:8a:42: 5d:8b:ee:9e:09:2b:ef:a8:65:11:30:89:48:94:b4: a1:16:86:cc:d3:55:93:3e:de:14:a8:ec:2a:9a:5f: 46:e5:db:1a:d8:e7:a3:61:e5:a3:3d:31:cd:b1:84: 7c:98:2b:be:1c:f5:9b:0c:0c:80:f5:20:b8:80:e6: 0e:60:8b:bf:ee:4b:11:8d:6e:d9:97:ac:63:95:3f: 00:05:4c:e6:77:05:d9:95:0a:0e:94:06:c3:e5:ed: 41:86:d0:c4:95:47:a4:6b:ac:bd:9e:b5:24:a0:d8: 53:9a:b2:be:e8:f9:99:8d:4d:1b:ac:7f:5e:ad:e6: 68:51:9a:98:6a:47:21:97:33:35:fa:65:87:0a:14: c0:ad:30:06:08:7d:d0:19:c2:6b:c0:09:e8:05:ce: b9:65:da:cb:ed:27:16:4c:5f:c9:27:fb:3f:34:5e: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:15:62:C2:D0:DF:AD:A1:AA:31:F6:56:CC:5A:21:B0:11:62:FC:A6 X509v3 Authority Key Identifier: keyid:58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:71:83:d3:a5:96:b8:5e:57:4a:3f:af:c3:10:62:a9:40:40: e2:e8:6f:9c:ed:e5:91:df:ca:0c:8d:57:7d:05:14:71:f0:b5: 72:33:b0:81:65:d9:a1:de:36:99:37:64:1a:ad:e9:4d:12:ab: 97:21:ef:3d:cf:61:ee:e0:f8:52:76:cd:68:a3:fa:6c:6f:4a: 6b:95:c5:37:7d:0c:2c:2b:69:9e:b5:c1:d0:f3:f5:8d:ca:8c: 6c:73:c5:7f:41:b2:26:0b:99:02:24:45:2a:44:d6:28:9a:e1: 76:e0:b7:d1:29:05:e2:1a:02:cd:74:3d:4c:fb:c8:05:99:6d: 24:5a:7f:9d:1c:ab:ec:e2:e2:85:37:49:7d:a5:56:37:9e:69: 6e:42:4f:e0:89:31:06:6b:6f:9d:42:84:9f:ce:71:8e:a0:b6: 74:e9:a9:9c:46:db:2b:9b:64:00:4b:cd:a5:01:31:af:1c:16: 89:f5:0d:80:f1:34:6f:39:30:3f:0b:1a:4f:ba:9a:bf:4b:af: 5b:85:6d:cc:1d:7b:1c:9a:f9:c5:4c:f9:a3:02:bd:e3:8d:58: 2e:32:06:e4:1d:80:c4:26:4e:cc:8b:da:4e:4f:c1:98:8f:50: 3a:2f:9d:bc:b8:f2:e7:78:bf:cc:cc:a9:34:ea:9d:19:43:67: 4a:48:9e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfT2kVC4R7ymnK51Iy03nlr9Tp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5 QzZERjUxOTAeFw0yNjA5MTcwNjUyMDdaFw0yNjA5MTgwODQ5MDdaMDMxMTAvBgNV BAMTKEUzMTU2MkMyRDBERkFEQTFBQTMxRjY1NkNDNUEyMUIwMTE2MkZDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36usb6WUoi48tSbhTDZNpDRNf FN7mx4HcYRZKaXO9psVPgPH0eVxUIH0din1AKNLXLgjspiTShC/ddKN/BeWJsnTM OQig7HeYJd8Lu33DjOAV/vpe+kmKQl2L7p4JK++oZREwiUiUtKEWhszTVZM+3hSo 7CqaX0bl2xrY56Nh5aM9Mc2xhHyYK74c9ZsMDID1ILiA5g5gi7/uSxGNbtmXrGOV PwAFTOZ3BdmVCg6UBsPl7UGG0MSVR6RrrL2etSSg2FOasr7o+ZmNTRusf16t5mhR mphqRyGXMzX6ZYcKFMCtMAYIfdAZwmvACegFzrll2svtJxZMX8kn+z80XgGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xViwtDfraGqMfZWzFohsBFi/KYwHwYDVR0j BBgwFoAUWLuhkkv94r44YdPC6kOCb5xt9RkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4NDNmMDAtMjgyMy00NzMyLTliN2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0 QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5QzZERjUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OEJCQTE5MjRCRkRFMkJFMzg2MUQzQzJFQTQzODI2RjlDNkRG NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0Mzgy NkY5QzZERjUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpxg9OllrheV0o/r8MQYqlAQOLob5zt5ZHf ygyNV30FFHHwtXIzsIFl2aHeNpk3ZBqt6U0Sq5ch7z3PYe7g+FJ2zWij+mxvSmuV xTd9DCwraZ61wdDz9Y3KjGxzxX9BsiYLmQIkRSpE1iia4Xbgt9EpBeIaAs10PUz7 yAWZbSRaf50cq+zi4oU3SX2lVjeeaW5CT+CJMQZrb51ChJ/OcY6gtnTpqZxG2yub ZABLzaUBMa8cFon1DYDxNG85MD8LGk+6mr9Lr1uFbcwdexya+cVM+aMCveONWC4y BuQdgMQmTsyL2k5PwZiPUDovnby48ud4v8zMqTTqnRlDZ0pInt4= -----END CERTIFICATE-----Generated at Thu Sep 17 11:31:40 2026 by rpki-client