
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json)
Hash identifier: Bi/TtvNxCkUyi6KUCsEt+1zhyoEhdWSSGABxs1+mKFQ=
Subject key identifier: 3D:D6:C7:E2:8A:88:B1:F5:2B:20:E9:A5:FC:4B:66:B7:D9:5E:4E:93
Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004
Certificate serial: 4EC891843F7AD826908067040B46E257B66614E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 16:21:53 +0000
Manifest this update: Mon 21 Sep 2026 16:16:53 +0000
Manifest next update: Tue 22 Sep 2026 19:02:53 +0000
Files and hashes: 1: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: 4Q70YG63fG9K/HcLNeRmcHUiIqBwD71JWVKueae5Mg4=)
2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 19:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c8:91:84:3f:7a:d8:26:90:80:67:04:0b:46:e2:57:b6:66:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004
Validity
Not Before: Sep 21 16:16:53 2026 GMT
Not After : Sep 22 19:02:53 2026 GMT
Subject: CN=3DD6C7E28A88B1F52B20E9A5FC4B66B7D95E4E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:91:7c:1a:16:78:6a:1b:3d:1a:44:fb:67:
0d:4d:00:28:91:ae:34:ce:73:22:fb:de:21:8a:a5:
cf:fe:b8:f1:8e:a0:bd:63:cc:9a:83:91:49:de:e4:
e2:6d:72:72:73:3f:6c:38:3f:db:65:7d:bf:fe:5b:
01:15:d4:2c:76:bd:ee:9d:3d:99:96:42:d3:bc:9f:
86:6a:e8:b4:87:39:ec:e1:c6:5b:44:a9:aa:4e:eb:
d6:eb:5c:e4:cf:06:0d:cf:d3:08:bb:5c:53:87:eb:
cd:70:fc:d6:b4:b8:67:c5:10:ed:5f:ce:f5:6b:cf:
aa:da:70:39:61:91:79:88:49:b7:0e:fa:31:0c:3a:
1c:18:60:82:a6:66:e2:15:ad:0d:d9:b2:73:b1:88:
a3:ef:7a:c2:6b:f2:78:03:79:9e:c5:a0:d9:e2:7b:
d7:f3:c1:ef:e6:df:45:22:6f:71:8f:aa:44:29:ec:
9e:10:5a:4c:bf:45:15:1e:f1:c4:da:fb:a2:e8:53:
c9:6d:b8:02:25:a5:41:f2:45:89:dc:ef:20:ba:d2:
ee:63:c5:1b:7b:30:8c:fd:ab:da:28:ca:be:84:87:
2b:5e:96:41:5f:ff:f3:8e:29:13:70:c1:f9:7c:7d:
93:5d:c1:2d:80:3d:8b:37:6c:d8:e6:05:31:08:20:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D6:C7:E2:8A:88:B1:F5:2B:20:E9:A5:FC:4B:66:B7:D9:5E:4E:93
X509v3 Authority Key Identifier:
keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c1:fd:02:c8:12:eb:dc:96:f0:a2:e0:b1:3f:19:65:1d:f9:
7e:1e:1b:0e:ef:49:87:13:c2:bd:95:02:87:74:b4:6c:39:eb:
42:a2:73:be:63:9f:ee:8d:3f:32:a9:d8:1a:3f:89:a1:b7:00:
6e:6f:40:b0:39:87:14:b4:ea:10:a9:ea:48:e0:a1:78:f5:44:
c2:44:d6:d7:a3:4e:81:6a:4a:c0:11:1d:05:6e:ec:a8:31:d1:
f2:49:34:17:76:75:5e:f2:6c:a1:8e:59:d9:12:2e:e2:3d:9e:
6d:d0:33:5e:09:83:0b:88:6f:66:59:9e:5d:58:ee:66:e6:ad:
40:8f:a6:22:64:ae:f3:7c:16:e0:46:be:c7:ca:a1:52:76:51:
a4:f9:fc:ce:90:c2:19:90:a8:34:79:b3:b1:79:8a:d2:69:8e:
b0:a8:d7:0f:72:09:7b:ae:bf:d9:c5:54:56:4a:dd:60:59:ee:
19:28:c2:5b:49:f7:9c:28:91:ad:32:3e:99:9c:59:ab:0a:28:
c1:8d:9d:ec:1c:f9:36:15:5b:15:6d:e7:e9:18:5d:86:bf:cd:
2d:1b:3a:da:33:2b:fc:d7:63:42:ed:af:f3:51:c4:74:3c:41:
c1:1b:31:dc:cc:92:44:eb:7c:c2:86:3f:6f:58:3a:d3:e7:7c:
8a:98:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:29 2026 by rpki-client