
$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft
File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json)
Hash identifier: SqmwwrCed5VvlGMqmlSlU2vsZtayWswaVz/TjMUamCQ=
Subject key identifier: 43:CD:95:E3:43:06:C8:47:BB:44:AB:77:48:BE:B3:E8:13:D8:98:D7
Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61
Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61
Certificate serial: 37D579057A29B7204BB7E4EA37BCF9C08C05AACA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 08:07:41 +0000
Manifest this update: Wed 17 Jun 2026 08:02:41 +0000
Manifest next update: Thu 18 Jun 2026 11:28:41 +0000
Files and hashes: 1: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: /I/JuUfeYH592MoVpQVU6wLhYSnVSehmvh7YiW6NHKQ=)
2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=)
3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl
rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d5:79:05:7a:29:b7:20:4b:b7:e4:ea:37:bc:f9:c0:8c:05:aa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61
Validity
Not Before: Jun 17 08:02:41 2026 GMT
Not After : Jun 18 11:28:41 2026 GMT
Subject: CN=43CD95E34306C847BB44AB7748BEB3E813D898D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:0e:d7:24:6d:cd:4e:24:a7:05:cc:df:12:
40:aa:e0:02:22:d8:16:8a:fe:ff:ce:a2:f2:ca:9a:
0f:66:4e:59:04:73:28:14:38:af:10:16:ed:3b:d8:
06:28:38:37:25:09:f8:6d:42:88:e4:4a:d0:65:28:
29:f4:53:a0:55:b9:93:3e:82:35:cf:e7:c9:2d:d4:
0b:8d:34:8a:69:a8:d3:ac:d8:05:f7:53:a6:32:2b:
a2:64:b7:b7:7d:5d:60:06:75:8a:0e:31:a2:1b:d6:
ce:e5:94:68:0e:d7:d9:ef:cb:7c:51:6e:ae:6a:d2:
f8:26:6f:69:6e:5e:47:00:ed:87:45:fa:3a:6c:27:
c0:f7:a9:79:04:7b:70:bb:e7:ce:5d:69:07:13:9f:
71:45:b4:7c:5f:28:5d:d6:c1:f9:70:9c:e0:de:5c:
46:3b:c6:93:88:5b:4c:e4:db:e3:5e:7e:06:8e:10:
2b:f3:1d:26:61:39:2c:86:63:a9:ec:59:c9:83:79:
e0:39:5e:e0:e1:91:d0:0a:fd:4f:4a:50:93:9d:d3:
59:e3:e0:59:94:22:44:68:c5:9b:1e:a7:c5:df:e9:
fa:80:a4:28:14:cd:66:19:97:54:b3:d7:ab:3d:d0:
96:88:3d:da:83:43:ef:87:e4:c2:17:ab:3a:fa:28:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:95:E3:43:06:C8:47:BB:44:AB:77:48:BE:B3:E8:13:D8:98:D7
X509v3 Authority Key Identifier:
keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:bc:56:af:6f:78:59:07:a5:03:70:79:df:40:be:1f:b0:
7c:bf:32:85:c1:cc:88:75:8c:15:34:a5:59:06:f3:3b:1b:62:
20:05:4e:6e:4d:15:88:ae:d6:31:e6:39:fe:a8:b0:c7:c1:48:
8e:cd:7b:3b:9a:fb:6a:fe:00:11:0f:97:1a:ac:dc:71:73:08:
88:21:b0:df:f3:c8:b7:8a:30:88:ea:5c:b9:04:d8:d3:88:03:
af:56:d2:24:a8:3f:86:15:ea:94:34:7b:dd:d9:dd:8f:db:79:
49:86:e8:c9:91:f2:19:31:0c:0f:b4:85:4d:38:c5:ba:60:bc:
58:5f:3b:ad:9b:af:0a:96:ed:71:db:56:ba:f3:1b:7b:91:d2:
bd:1b:19:38:46:1d:45:81:c1:6f:05:06:68:3e:21:04:80:4d:
83:02:dc:e3:b7:7b:3c:e2:d7:26:db:d1:8f:54:56:96:9d:7c:
27:87:a2:2c:3b:58:17:65:7c:f1:7c:6f:0d:02:c3:64:e7:78:
13:8b:d9:19:40:47:76:6c:87:47:ab:a1:db:1a:9d:cd:45:7a:
4c:fc:6f:07:e1:30:26:90:20:5c:46:80:c3:84:4b:bf:b8:d2:
a4:74:e6:d2:0c:a8:22:15:f3:65:27:b0:7c:c3:13:bb:d3:89:
00:08:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:10 2026 by rpki-client