
$ rpki-client -vvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
File: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft (raw, json)
Hash identifier: Va9vbPEjOBJAKnjFvCLhd08bvrTt74VcsX3SP+lfZtU=
Subject key identifier: BE:82:80:DC:A4:A5:24:49:53:86:06:F6:1B:DF:40:48:E8:E9:F6:E0
Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
Certificate issuer: /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Certificate serial: 22C0939C9020064CB784D4702F5FD4012E0A77FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:58:55 +0000
Manifest this update: Wed 17 Jun 2026 04:53:55 +0000
Manifest next update: Thu 18 Jun 2026 05:47:55 +0000
Files and hashes: 1: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=)
2: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl (hash: HdQOV7FjXg5l34OnQoJ51tBWLPKj+RPXQzbmi6BsOkw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c0:93:9c:90:20:06:4c:b7:84:d4:70:2f:5f:d4:01:2e:0a:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Validity
Not Before: Jun 17 04:53:55 2026 GMT
Not After : Jun 18 05:47:55 2026 GMT
Subject: CN=BE8280DCA4A52449538606F61BDF4048E8E9F6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:29:3f:c6:15:40:8a:e7:7b:8c:5d:ae:37:
0f:63:c9:90:82:ca:b1:db:3c:86:3e:88:07:43:82:
a2:45:92:06:2d:7e:81:18:10:3e:bd:cd:50:12:ab:
e6:d7:59:1b:28:2f:c3:fc:69:d9:d9:a4:20:c6:3e:
0f:e9:b6:23:b5:2f:ed:ab:68:b1:88:50:52:02:07:
41:76:64:f4:d5:61:8e:1f:dd:b4:f0:6c:ce:b6:29:
68:40:7b:81:1a:81:05:e1:05:c9:c0:47:fd:1f:d2:
c8:ff:3f:0c:bf:c4:18:ab:bf:f0:58:be:c2:8b:7c:
f8:e8:fb:01:57:78:f5:c3:c5:3b:dc:ff:b0:a4:44:
00:1b:8c:cf:72:a3:22:5a:9a:3c:00:1e:02:06:fb:
8b:87:5c:1c:66:12:db:be:f2:cb:ac:e5:b6:a4:41:
14:00:12:7a:88:1b:dc:67:99:30:aa:2d:b5:e9:11:
bd:86:c7:27:4a:7c:c3:60:75:17:ee:ed:ee:c9:39:
38:66:d8:fa:f4:28:00:fb:12:a0:30:ac:bf:e8:6d:
03:05:46:17:3b:12:8e:21:6a:02:9a:e6:6b:12:74:
22:9d:64:47:77:4e:1e:cd:39:bd:54:c7:da:f5:29:
cf:00:77:8c:3f:6c:e6:49:60:74:ae:dd:bc:8d:73:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:80:DC:A4:A5:24:49:53:86:06:F6:1B:DF:40:48:E8:E9:F6:E0
X509v3 Authority Key Identifier:
keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:84:80:a2:2f:f8:0a:2c:2b:a4:09:22:69:5e:8b:1e:67:2e:
4d:46:01:11:57:f5:67:f7:6f:83:af:ec:9c:41:ec:5e:28:e9:
83:8f:63:0d:2c:6d:94:b4:bd:6f:63:0f:3c:29:e3:28:b5:94:
3e:4e:88:3c:39:13:bc:7b:e3:45:aa:07:5a:3f:b0:88:35:aa:
14:98:91:35:9d:8b:c8:79:ea:d9:84:f9:36:64:2c:23:ae:29:
f7:02:92:70:08:17:50:6e:0d:f3:1e:12:4e:63:3d:b4:85:b8:
cb:bb:dd:41:cc:f8:b0:a3:18:e5:31:8c:51:32:ec:3c:cb:5e:
70:fb:fc:46:f6:5a:49:11:55:3a:0f:a8:1e:17:76:8c:78:02:
c4:39:66:63:40:6b:98:2b:9b:54:4e:9f:18:a0:04:00:ee:bf:
07:0e:bd:b0:96:ae:aa:0a:ad:33:61:eb:a4:96:13:49:17:e0:
6e:ed:f9:6d:78:1f:38:b4:13:e5:dc:e0:db:d4:94:7e:ba:18:
8b:ff:18:b6:c5:f0:00:3f:00:db:4d:89:3f:5a:b8:ff:bf:d0:
7d:66:ea:27:18:f8:42:96:e4:85:6a:dd:cc:b2:2f:33:fd:25:
6c:f1:11:76:74:ae:2c:59:79:3b:10:23:81:e3:2c:12:ee:41:
df:8a:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:38:47 2026 by rpki-client