
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
File: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft (raw, json)
Hash identifier: F+rajnIgsqe2j1FJlz15EAjacM7Z22JdoPYxt4y16Lg=
Subject key identifier: 89:B4:A7:8B:E5:6E:35:F8:63:86:94:E6:47:19:C2:B6:DF:06:E7:FE
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial: 1808ED65E53A4392834DF779900AFD33674678F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 05:03:59 +0000
Manifest this update: Wed 17 Jun 2026 04:58:59 +0000
Manifest next update: Thu 18 Jun 2026 06:06:59 +0000
Files and hashes: 1: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl (hash: UkRpzrSCdagLFrwTuGad92SdRhKjDxl8yjpeGpN5s9g=)
2: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: 4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=)
3: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=)
4: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: 7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=)
5: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 5ip0zyOFzxKc/CLTR+cuhj/u/zV2t14XhZlqC+WxFAQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:08:ed:65:e5:3a:43:92:83:4d:f7:79:90:0a:fd:33:67:46:78:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Validity
Not Before: Jun 17 04:58:59 2026 GMT
Not After : Jun 18 06:06:59 2026 GMT
Subject: CN=89B4A78BE56E35F8638694E64719C2B6DF06E7FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:17:65:4a:e1:4a:02:3f:d7:01:8c:fb:0c:
a3:d7:c4:9b:bc:e0:ae:4c:51:d2:f8:ec:7d:0e:1f:
28:32:8d:c0:3a:c9:8a:9a:5e:2f:eb:4d:a5:2e:3c:
4c:aa:58:41:63:2b:6d:9c:ab:36:f5:f4:50:5a:6a:
4f:6d:25:0e:14:b9:a9:b4:4b:2c:61:90:e5:d8:dc:
2c:fc:79:ab:b2:49:62:2a:0a:50:b4:ac:52:78:39:
07:de:eb:9a:7c:8b:14:4f:bd:5b:a7:7d:d7:c5:61:
db:21:ac:63:eb:a8:ca:a7:86:c3:22:c1:2b:27:69:
54:5e:46:28:6b:72:84:c0:95:57:78:f9:db:07:c2:
4a:83:26:66:5f:11:c4:ba:ff:8b:2a:97:a6:9c:f5:
47:80:2f:fa:00:d6:e5:d7:b2:fb:65:12:fc:c1:ea:
ba:34:70:ed:4b:ce:7f:8b:a0:b0:0c:cd:82:2d:b5:
0c:bc:fa:3c:a2:36:63:df:7d:8c:c7:8e:56:93:7d:
0a:3b:56:a8:06:59:74:3c:b5:b4:a6:39:71:b1:1f:
ae:b0:e1:38:bc:eb:a0:38:3b:6a:31:43:f0:58:28:
fc:ce:bc:12:fc:4a:e4:9a:2b:4e:fa:01:23:12:cd:
c4:dd:51:a5:64:0b:67:5d:fb:1c:ff:f4:70:19:ce:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:A7:8B:E5:6E:35:F8:63:86:94:E6:47:19:C2:B6:DF:06:E7:FE
X509v3 Authority Key Identifier:
keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:94:2a:ad:66:6e:f5:2d:2f:9e:b1:44:7d:6a:4a:9c:15:1f:
6c:fe:a7:5b:48:d8:fc:4e:2e:c3:36:ea:7e:fb:14:ee:98:dc:
24:01:4a:97:ff:f8:4f:7b:f3:91:de:01:65:ab:c7:12:17:d7:
66:f4:5e:72:98:9e:1c:0d:4f:5e:1f:12:19:f7:18:ca:45:17:
e4:e4:dc:c4:18:87:2e:6b:61:6e:98:7d:3a:fe:bc:d6:c3:b4:
73:34:c0:e6:2c:1f:ce:00:6e:c6:2d:65:5d:9a:46:8a:37:79:
05:dd:82:a7:e0:e5:f4:09:62:fb:10:4c:ba:56:d7:2c:9e:d8:
4a:e2:f2:6b:d0:b9:c1:9d:ff:aa:2a:31:e3:16:90:d7:0c:f5:
a5:c1:ab:db:36:c5:c7:cd:cb:90:c7:55:79:02:2f:09:7b:36:
b0:21:98:ac:07:30:ba:26:34:38:f8:85:c7:de:0c:18:94:a3:
51:17:0a:ba:f1:d0:5e:59:d5:85:d5:e6:a3:bb:b8:fc:c9:1d:
f7:5b:d0:cf:c5:6e:5d:db:ac:96:75:55:1b:9a:68:8e:0c:fc:
90:00:9b:27:f1:29:8d:46:e7:a1:94:2e:97:94:85:67:88:77:
7f:01:7b:21:d1:96:3d:4a:f6:c8:1e:67:37:7f:34:32:a8:b2:
74:ec:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:53:15 2026 by rpki-client