
$ rpki-client -vvf rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
File: 5256FBBE2FC545F984496DD4986EC64B662694E0.mft (raw, json)
Hash identifier: 34GW4CNkBdhC/6Znll8HI5Z7mvPyO20ncnPrUtph2g0=
Subject key identifier: E0:B3:22:CF:9F:1B:BD:E5:97:D0:36:BB:37:4D:9F:79:0C:46:51:A5
Authority key identifier: 52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0
Certificate issuer: /CN=5256FBBE2FC545F984496DD4986EC64B662694E0
Certificate serial: 0BAF2F9EFEA5D34A6A5C2D47338DC8AD0D410A85
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 01:24:34 +0000
Manifest this update: Wed 17 Jun 2026 01:19:34 +0000
Manifest next update: Thu 18 Jun 2026 04:43:34 +0000
Files and hashes: 1: 5256FBBE2FC545F984496DD4986EC64B662694E0.crl (hash: VEXHrIve8XwMhfyaR8OXg2vomANSHfWpdjFpus6xTiI=)
2: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: PVeUI9LzABp9X4uUesClPYyGG94/1D9llRU48PC0AGA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl
rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:af:2f:9e:fe:a5:d3:4a:6a:5c:2d:47:33:8d:c8:ad:0d:41:0a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5256FBBE2FC545F984496DD4986EC64B662694E0
Validity
Not Before: Jun 17 01:19:34 2026 GMT
Not After : Jun 18 04:43:34 2026 GMT
Subject: CN=E0B322CF9F1BBDE597D036BB374D9F790C4651A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:f8:bb:8b:71:7d:79:a8:29:d9:8c:4e:6e:
1a:f5:f6:66:eb:04:38:4b:ea:e5:ea:32:81:f9:f1:
1e:5f:b8:9f:3a:12:cb:a5:1b:26:27:c3:7f:71:f6:
87:19:5d:46:7e:b6:2d:68:76:87:d1:9e:1f:c9:a3:
f3:59:45:32:6f:9a:e9:bf:61:d2:aa:51:d9:35:ff:
29:db:a2:94:c6:b1:6f:b5:0b:fd:ef:7a:1d:83:4e:
02:8b:72:c4:a7:e4:3b:9a:86:93:e5:ee:1f:a8:4e:
fd:6c:2b:2f:f9:db:0c:4d:43:12:9b:14:4f:63:d3:
4c:6b:57:1b:6b:36:ed:9c:1f:c0:8a:8e:11:3b:11:
6e:f5:f1:8c:01:e7:e5:de:66:bf:be:ad:d1:ff:34:
27:ba:0c:bc:16:c4:4a:82:ba:55:ae:40:38:8e:17:
dd:51:b8:3f:c7:29:fc:8e:0c:83:37:9d:e0:cc:fa:
8e:46:a4:70:27:d7:ed:f1:5e:8d:1c:49:10:fe:8d:
d7:c5:74:3f:93:84:b9:e3:9a:f6:5f:c9:5c:32:24:
f1:72:21:fd:ab:b6:e0:df:23:50:e0:13:01:7f:a5:
92:db:90:85:dc:93:f3:82:24:df:fb:f7:2d:8a:5b:
e2:f1:61:7f:7e:42:8a:35:84:61:33:6c:74:7d:53:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:22:CF:9F:1B:BD:E5:97:D0:36:BB:37:4D:9F:79:0C:46:51:A5
X509v3 Authority Key Identifier:
keyid:52:56:FB:BE:2F:C5:45:F9:84:49:6D:D4:98:6E:C6:4B:66:26:94:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5256FBBE2FC545F984496DD4986EC64B662694E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/5256FBBE2FC545F984496DD4986EC64B662694E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:58:c1:3e:54:25:0b:f6:0b:91:00:78:6f:66:dc:7b:6a:73:
4f:d0:23:71:53:f2:44:7c:5e:d4:23:e6:4f:ab:84:0d:f5:6d:
37:83:71:98:e9:8e:9a:24:2a:55:36:e7:19:44:91:e9:f7:bc:
18:5f:54:28:1d:65:2c:95:cb:e6:cb:30:dc:59:b7:5c:98:c7:
19:fb:f0:44:8f:43:2d:36:d1:27:b2:12:92:39:b9:0f:dc:82:
10:bd:b2:d4:fc:0d:96:0b:da:00:d2:08:a4:67:2f:59:79:8b:
fe:ea:47:69:d1:61:aa:0f:2c:0c:d3:56:ff:34:0d:0b:25:a5:
7e:1b:1e:f9:ec:58:52:1c:02:78:eb:41:58:ac:38:f0:f4:ff:
0b:ea:c7:ac:e2:63:96:7f:53:27:10:97:01:a5:21:0f:a2:46:
18:74:e2:8c:38:b6:ad:a5:26:6b:f8:10:44:0c:f6:43:f2:2d:
49:ce:c6:02:8f:3d:26:a7:5e:71:8b:e9:17:95:2b:27:7b:87:
65:6f:c2:6e:47:23:16:39:dd:73:65:bf:3c:71:54:a0:46:73:
8a:b1:d1:02:1a:a2:40:02:9c:90:13:82:34:79:45:8b:67:d7:
63:3a:00:fc:3a:53:70:4b:48:c8:f6:63:a2:b5:29:d9:b5:a5:
72:0e:48:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:54:14 2026 by rpki-client