
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
File: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json)
Hash identifier: W7mp1ITs8qCvVTBMxi6J6efr/bhWQJxV5a6L/1hV1VE=
Subject key identifier: 88:40:5F:82:A0:56:5B:CA:9F:BE:A2:87:CB:3F:14:B5:D9:B5:48:8C
Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Certificate serial: 312AAD01D2CE145E85127C3BF66542DF3E89C7E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 07:01:21 +0000
Manifest this update: Wed 17 Jun 2026 06:56:21 +0000
Manifest next update: Thu 18 Jun 2026 08:00:21 +0000
Files and hashes: 1: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=)
2: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=)
3: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: gKnYbP6EY6jgM2E+D2a8p6Aco+h7H7TFQxuMeWLEkgo=)
4: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2a:ad:01:d2:ce:14:5e:85:12:7c:3b:f6:65:42:df:3e:89:c7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Validity
Not Before: Jun 17 06:56:21 2026 GMT
Not After : Jun 18 08:00:21 2026 GMT
Subject: CN=88405F82A0565BCA9FBEA287CB3F14B5D9B5488C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:a4:47:f0:27:e5:c1:87:f4:7a:5e:a5:b5:
a0:c5:cc:d2:79:1d:f8:ec:f2:8c:b4:0a:c2:87:4a:
f9:77:11:82:2e:da:8e:91:9f:48:48:39:0f:29:df:
d2:99:88:71:39:53:db:56:be:74:d1:5f:e3:21:33:
97:d8:d8:da:d5:30:ad:32:1b:5e:73:25:48:66:01:
c6:f8:17:38:4a:b2:1e:90:35:9f:79:d3:f3:e4:75:
71:7f:59:20:93:4a:b5:2a:20:33:75:c5:7c:1b:7a:
d2:34:44:b2:4d:af:54:09:1d:f3:b9:8c:c0:0b:de:
85:2e:13:a6:7b:0e:75:d5:0c:8f:b1:a5:05:4f:72:
cd:62:a4:a7:14:f8:17:16:ca:68:ac:4e:c0:89:d9:
4c:a1:db:11:ed:1c:7c:b6:97:a4:f6:1f:b9:7e:05:
64:01:7c:5e:6f:87:a1:48:34:13:10:9d:f0:44:8a:
01:66:d7:82:49:fd:09:48:3a:1e:c9:20:5d:7f:98:
3d:6c:0a:90:1f:2a:7b:3e:2e:5b:2a:38:e0:69:b4:
7d:0e:9f:41:ea:94:bf:23:b9:bf:af:88:fc:10:74:
cd:83:3e:9e:9e:04:f5:b1:63:09:ef:07:17:57:e5:
3d:5c:15:00:23:61:9c:74:e8:a0:4a:95:e7:2b:49:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:5F:82:A0:56:5B:CA:9F:BE:A2:87:CB:3F:14:B5:D9:B5:48:8C
X509v3 Authority Key Identifier:
keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4e:4d:11:2a:f3:fc:5b:b2:f4:a8:39:90:87:10:51:30:21:
a7:64:ff:66:6e:88:23:18:1c:b8:9e:36:35:e1:73:1a:6e:e6:
fb:9c:12:53:f3:8f:ee:59:f2:c3:c9:fe:4a:99:ca:7b:6a:b8:
99:ec:e9:2e:cb:52:55:3b:0b:8e:04:0e:a4:ec:b9:12:2e:30:
7a:90:d6:fc:92:6a:7e:3a:ed:6d:78:f0:85:26:3b:e3:d0:20:
08:45:af:9a:8a:e1:d0:05:cd:44:ba:2b:f3:43:1d:81:29:37:
43:92:1a:d7:ea:5a:d0:b0:a0:d7:58:28:61:7c:14:bb:94:51:
74:cc:41:48:47:7f:3a:e6:75:ff:a1:21:e2:47:eb:73:d1:7d:
e7:fd:ac:f3:3d:ba:32:d7:ab:7b:1f:15:e2:58:9a:85:5a:e9:
e9:8e:01:c7:81:af:b5:66:03:61:80:d4:44:49:f6:83:c7:76:
d2:40:80:a5:dc:00:1a:b7:3c:fa:24:50:94:85:ae:e1:48:75:
d3:52:31:0f:3b:0f:b3:dd:a2:c9:45:7d:ab:3a:9d:1a:97:b3:
39:8e:0e:e8:e6:4a:2d:99:85:5a:58:9a:4e:61:e1:61:7f:48:
84:6b:1b:f9:4b:47:97:38:a5:8f:d8:1b:df:a4:1f:01:9e:5f:
17:5e:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:41 2026 by rpki-client