
$ rpki-client -vvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json)
Hash identifier: +vchciacqTzxmSVbN4W+DED1xpjA6pvltnWoEpmnkao=
Subject key identifier: 76:82:A1:39:07:04:77:44:DD:26:6B:0E:FB:25:34:8B:12:1F:31:19
Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35
Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135
Certificate serial: 5662C097A89EDFEA9F23464F9C143AB5032322C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:00:07 +0000
Manifest this update: Wed 17 Jun 2026 05:55:07 +0000
Manifest next update: Thu 18 Jun 2026 06:59:07 +0000
Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=)
2: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: LfG5TOONH0hfLcVhXhoekM7p499pXegHQbUrviVAjT0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl
rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:62:c0:97:a8:9e:df:ea:9f:23:46:4f:9c:14:3a:b5:03:23:22:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135
Validity
Not Before: Jun 17 05:55:07 2026 GMT
Not After : Jun 18 06:59:07 2026 GMT
Subject: CN=7682A13907047744DD266B0EFB25348B121F3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:9a:05:b3:58:19:20:7a:9b:cc:f0:d2:7f:
a7:b3:42:67:81:2d:7c:05:b6:0f:48:a5:b5:c2:4c:
b9:af:cc:cc:6e:32:73:95:10:3f:85:f6:68:d1:ba:
14:e0:57:89:29:66:83:c1:5a:53:23:eb:b6:42:61:
3b:40:6c:a2:c6:3f:be:09:d7:d6:a8:46:08:6a:9d:
52:3c:7c:55:dd:0e:3c:43:9f:8e:23:76:7d:ae:9b:
32:ce:ba:37:2d:88:84:70:e3:2f:31:ab:e4:2b:48:
12:07:c1:f4:2c:ec:2e:75:e0:be:37:72:62:93:6d:
8c:cb:6c:1c:59:47:bc:d9:cb:2a:b2:a7:1d:88:d5:
6c:da:10:d4:bf:3a:ab:1c:4a:de:82:a2:83:62:1a:
a5:58:22:f8:47:e3:b7:c6:22:8c:e4:aa:48:23:1d:
9e:91:d5:ab:b6:66:d1:e7:55:50:cf:ba:01:75:58:
83:6e:2c:bb:ef:d7:e7:e2:c2:63:cc:17:d9:09:0c:
3b:ab:75:2f:de:48:34:d6:b7:e1:8d:f8:91:cf:98:
cc:aa:ed:49:dc:98:75:b9:07:00:c0:d4:10:74:37:
b0:09:b5:0b:2e:f4:26:95:fa:ca:89:7e:b9:8f:18:
f9:36:7c:d0:c3:89:41:9b:9e:86:0a:0b:51:91:12:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:A1:39:07:04:77:44:DD:26:6B:0E:FB:25:34:8B:12:1F:31:19
X509v3 Authority Key Identifier:
keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9f:6c:6f:a7:05:23:06:16:53:6a:c6:44:d5:6c:cd:70:fb:
8e:00:ee:80:e3:7d:16:4f:c8:d0:c3:ba:ae:1b:24:e9:cb:83:
3d:de:71:cf:86:2f:ab:4a:5c:9f:e2:ab:cc:bd:94:de:f7:db:
f2:d3:e7:5e:2f:4c:c6:99:a5:75:73:85:a9:ab:50:85:d3:8a:
29:fd:40:02:7d:0a:25:de:2d:17:22:9c:62:6d:3a:55:b1:32:
a9:d8:57:b8:e6:4f:d8:4a:b6:dd:e0:18:1f:7c:aa:de:27:46:
dd:45:0e:64:61:28:3b:da:61:df:33:00:6c:ab:d0:ee:b9:39:
b3:5c:b5:d9:df:76:04:eb:dc:a1:34:dd:6f:01:31:35:f7:e7:
cd:f4:14:6d:9d:2a:8f:a2:3b:bc:82:8a:b7:0d:b6:27:c3:20:
52:68:92:40:d8:17:16:77:ee:fb:61:c8:49:96:93:31:a3:61:
4d:08:f7:a4:39:c6:26:83:74:80:6e:23:9b:d3:35:fc:e9:7b:
12:08:ef:98:d3:cb:45:39:7d:c3:b2:6c:a8:3c:8e:cd:c8:42:
3f:21:cd:f9:1f:59:36:96:80:57:c0:94:92:be:d3:54:6e:d2:
a7:c1:7c:4b:4e:8b:e1:3f:e3:fd:f8:ec:18:6b:46:15:a8:bb:
11:49:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:29 2026 by rpki-client