
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft
File: 5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft (raw, json)
Hash identifier: TEjlDLf3QInTlveb4k6tjbDRJcLddRqH3ml8IrUskWA=
Subject key identifier: F3:42:09:0F:D0:84:5F:8A:7D:25:2B:3A:D2:B8:FD:3B:85:E5:64:31
Authority key identifier: 5C:7B:4D:D7:0B:98:3A:D6:8F:0F:A4:B3:03:61:CD:A4:C1:83:71:E7
Certificate issuer: /CN=5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7
Certificate serial: 3B32AF1CB3FF6D89C55EE609D5149FF0DF70A984
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft
Manifest number: 23
Signing time: Sat 14 Nov 2026 23:59:17 +0000
Manifest this update: Sat 14 Nov 2026 23:54:17 +0000
Manifest next update: Mon 16 Nov 2026 03:03:17 +0000
Files and hashes: 1: 5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.crl (hash: OAzL3M+oHIc4CblHbXr6XFBOmVMyWn1gNrwBdJbk7kc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.crl
rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 03:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:af:1c:b3:ff:6d:89:c5:5e:e6:09:d5:14:9f:f0:df:70:a9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7
Validity
Not Before: Nov 14 23:54:17 2026 GMT
Not After : Nov 16 03:03:17 2026 GMT
Subject: CN=F342090FD0845F8A7D252B3AD2B8FD3B85E56431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:fb:a2:18:4a:59:b5:15:8a:51:f1:c4:ee:
89:99:52:be:01:06:c4:0a:8e:e7:75:f2:58:03:d0:
9d:2c:1e:07:97:28:16:ff:d6:5d:59:6a:73:d4:05:
56:62:87:b3:aa:5b:5c:fa:ce:17:17:33:16:63:31:
14:2f:89:b8:d0:86:54:76:ae:98:c7:23:2d:5c:9c:
47:95:af:26:07:fd:c2:71:85:ab:59:c4:04:a7:05:
ab:6e:cb:63:50:e9:28:30:c6:2e:b3:0c:45:91:d9:
a1:ec:7f:6a:26:2a:2c:33:8f:91:09:ad:a8:6e:44:
c5:50:f7:ba:aa:5f:23:8f:6d:61:dd:f3:b4:ce:1e:
9c:28:70:c1:4f:40:3f:33:6a:81:c2:07:cd:6f:1e:
06:7f:4c:7e:f5:cd:2f:1c:83:af:43:96:3b:a2:d7:
58:ed:ef:cd:ac:47:ad:7a:16:49:d5:7e:25:5e:4a:
d3:48:63:7e:b2:60:44:15:8b:14:b8:33:6d:ff:b5:
10:c8:c3:8b:0c:d5:b9:81:d6:f7:75:7d:eb:8b:99:
ce:ba:d1:dd:b2:3e:8f:bb:42:ee:3c:c9:23:0b:73:
04:35:4d:0b:91:ad:9a:c5:35:c3:a1:96:37:e4:46:
cd:bf:60:f9:f6:c2:70:e8:6f:bb:1d:2b:f4:e5:8a:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:42:09:0F:D0:84:5F:8A:7D:25:2B:3A:D2:B8:FD:3B:85:E5:64:31
X509v3 Authority Key Identifier:
keyid:5C:7B:4D:D7:0B:98:3A:D6:8F:0F:A4:B3:03:61:CD:A4:C1:83:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/0/5C7B4DD70B983AD68F0FA4B30361CDA4C18371E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b8:68:df:15:cb:7c:f4:7f:a3:a1:2b:10:3b:01:50:06:45:
d7:8b:6a:fe:16:44:bf:9e:d2:5b:33:3f:65:23:f7:47:6e:fb:
a4:98:fb:90:6c:21:92:a7:ae:9c:e6:a2:01:68:92:9d:17:9b:
70:d6:a3:5a:30:14:ba:33:d1:9e:aa:31:d2:22:8a:e0:42:60:
6b:62:99:bd:8b:a9:8f:89:39:a2:66:97:cd:70:ac:20:a9:3a:
3b:54:78:0a:27:f7:f0:17:e9:98:31:ac:2d:9e:d2:8c:97:bc:
88:77:7c:11:d4:49:1a:ca:87:31:85:3f:8b:61:a4:91:0d:84:
5a:fa:95:f2:56:f3:38:c1:e0:68:44:02:c9:7f:26:68:c8:34:
53:34:d8:57:ac:b9:76:4b:60:24:e1:04:4c:02:7c:f3:f4:73:
a0:87:92:01:37:30:4a:82:1c:27:d9:18:a1:47:d4:43:6d:b9:
a5:f8:22:5e:94:bf:5e:8b:95:8d:47:67:58:4c:94:85:22:b2:
3d:99:79:4d:2d:61:9f:74:3a:f8:2b:eb:49:da:e9:3d:bf:2d:
c7:79:60:d8:4e:17:b3:20:e6:8e:3e:f1:7b:e4:b5:49:6b:3b:
b2:9b:43:bb:dd:20:07:4e:54:7d:42:fa:f1:6d:1c:95:70:f9:
12:71:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:32:06 2026 by rpki-client