
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json)
Hash identifier: 4Ao/qxYJfJkj5n3CINJWZE7YzbYK50fK5GRvo9AYYrQ=
Subject key identifier: D9:BE:99:28:6F:EF:A2:FE:E2:51:38:4E:91:3F:2A:F7:87:EA:51:33
Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B
Certificate serial: 37F930059A73D9D24BC06ABB06242B39AC74F4EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 15:15:23 +0000
Manifest this update: Tue 28 Jul 2026 15:10:23 +0000
Manifest next update: Wed 29 Jul 2026 18:17:23 +0000
Files and hashes: 1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=)
2: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: vc6jR46pcIhPem2QbmrG/k2ThcXiWuqPYBNoNFHP8Cc=)
3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:30:05:9a:73:d9:d2:4b:c0:6a:bb:06:24:2b:39:ac:74:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B
Validity
Not Before: Jul 28 15:10:23 2026 GMT
Not After : Jul 29 18:17:23 2026 GMT
Subject: CN=D9BE99286FEFA2FEE251384E913F2AF787EA5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:47:11:7a:34:a0:3e:93:da:9a:10:d7:19:
e2:cf:9b:8e:42:5e:e6:cf:0f:c9:99:6b:13:59:43:
ee:f7:57:87:3d:bb:c4:76:9c:64:fc:21:42:8a:7f:
70:bd:df:1d:0f:a6:fc:0d:36:c7:7d:41:ae:43:a0:
e1:d7:4b:83:f4:18:79:0e:f8:31:73:9d:17:c4:42:
d6:ac:42:2b:80:d2:0c:09:71:34:51:29:c1:7a:8c:
ef:e4:91:c3:65:3a:7a:6a:42:8e:e7:b7:18:c7:4a:
91:c7:a0:c0:94:ad:93:35:c7:7c:d3:a9:c1:ac:b6:
ac:3a:79:08:a2:e2:d3:0f:36:8e:a6:53:16:4f:e0:
f3:00:08:42:73:ba:2d:f7:26:fe:56:ae:d8:b1:0f:
75:b7:da:fc:fb:a6:b3:1e:c0:10:3f:0f:fe:83:2f:
a0:29:b4:7e:87:27:af:ab:0d:c4:3f:ff:c7:73:02:
c4:a8:80:53:58:48:d1:50:54:17:79:cf:91:47:17:
51:c3:a8:84:fb:56:d9:fd:2c:51:12:9b:68:eb:5f:
74:06:c5:96:44:cd:17:a7:d4:8a:fa:f3:19:77:38:
59:fe:ad:6a:c2:88:51:4f:f4:a2:64:0d:8c:45:d4:
aa:c9:1a:ea:6d:e2:4a:ba:2f:b4:8b:0a:b0:a3:84:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:99:28:6F:EF:A2:FE:E2:51:38:4E:91:3F:2A:F7:87:EA:51:33
X509v3 Authority Key Identifier:
keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:14:31:f7:ad:e0:38:1f:5a:ad:f5:bf:c2:00:ae:f6:6c:
3d:37:33:04:1e:9b:08:c5:99:83:23:96:2b:cd:90:43:09:d4:
4c:d2:e8:08:3f:51:10:60:d0:c2:04:87:8f:6e:87:cb:84:60:
ac:40:fa:df:d5:7e:75:8c:03:a6:e6:1d:84:37:26:44:48:05:
81:b1:14:5c:85:73:25:05:1c:de:75:89:8a:82:cc:f9:d2:f9:
62:99:13:d4:85:bd:a7:fd:5b:e9:c1:1e:52:09:16:08:17:a4:
ac:7d:98:11:88:64:a0:4d:8c:de:92:e9:fa:b3:d4:95:fc:d7:
8f:20:29:72:5f:fb:80:59:69:5a:05:d3:b8:2b:31:eb:b9:6b:
c2:51:2c:0d:bf:2a:b3:27:b9:ec:61:e8:00:dd:2c:49:26:12:
91:8e:44:d7:e8:46:d4:52:bb:61:22:28:67:23:2e:1b:3c:13:
96:d8:6d:55:ec:83:84:97:2f:34:e3:d0:14:a2:62:6c:60:fc:
f5:60:e5:78:60:55:3d:db:a9:ee:12:3d:e5:0c:87:33:a5:a2:
6c:91:f5:62:2f:bd:4f:b1:e7:49:a0:cc:3b:c6:e4:51:c0:a1:
b8:cb:1d:7f:1e:60:50:f4:92:63:5a:a9:6a:ad:fd:6e:a7:f8:
f8:a3:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:01 2026 by rpki-client