
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
File: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft (raw, json)
Hash identifier: wloK3iid8kkuGRyTx4WjBC4Zn5YnzWP7mJ7M6+1oq/4=
Subject key identifier: 63:4F:FC:89:99:D8:4E:C2:A9:A4:63:9D:DE:09:B4:68:42:96:64:77
Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
Certificate issuer: /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Certificate serial: 046BAEB30D48199A3D234283355BD9DB066CBF7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 10:44:49 +0000
Manifest this update: Tue 22 Sep 2026 10:39:49 +0000
Manifest next update: Wed 23 Sep 2026 14:07:49 +0000
Files and hashes: 1: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl (hash: eqgXcRBaStIYPrUApvWuYrS9NEsi3Rc6oaN5w15/lD4=)
2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 12:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6b:ae:b3:0d:48:19:9a:3d:23:42:83:35:5b:d9:db:06:6c:bf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Validity
Not Before: Sep 22 10:39:49 2026 GMT
Not After : Sep 23 14:07:49 2026 GMT
Subject: CN=634FFC8999D84EC2A9A4639DDE09B46842966477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:04:27:3d:ae:08:69:4c:e4:46:44:98:1e:
70:97:2c:35:2e:e0:39:87:59:80:b1:6c:72:27:e5:
8e:96:86:70:5e:44:08:f7:92:5f:df:87:53:95:5a:
7a:51:ff:9d:1f:bf:89:b8:ef:b2:72:f1:4f:f3:78:
99:f6:85:d0:2e:22:4d:00:69:19:00:cc:89:8b:67:
a6:59:0b:bb:b2:da:d8:a0:93:f1:42:fc:a4:ed:01:
94:bb:a1:f6:b5:38:f9:9a:80:68:cc:ab:f5:b3:a1:
fa:d7:d9:90:05:ec:9f:b5:c9:00:5e:40:7a:4a:45:
d8:7e:ae:ca:d3:76:ea:9f:c0:aa:92:1c:22:3f:3a:
18:da:88:fd:63:27:56:cf:e7:31:7b:dc:c2:62:e6:
d5:62:ff:55:fc:83:af:85:52:97:0e:7b:1f:31:67:
56:a8:21:57:d1:e7:5b:c1:d0:f6:38:72:97:40:c3:
c8:d3:b1:1d:f0:62:8f:b9:d6:49:ce:2b:76:7f:82:
4b:25:a3:a7:59:2c:62:c6:7e:aa:b1:aa:4b:b5:5b:
33:4b:85:8b:7c:3d:6e:df:6f:62:4b:2b:c9:59:fa:
f4:93:55:51:bb:45:60:5d:f5:dc:3f:c0:f6:ab:59:
c8:5b:f3:97:52:10:fe:40:ba:fd:33:e1:57:d8:1c:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:FC:89:99:D8:4E:C2:A9:A4:63:9D:DE:09:B4:68:42:96:64:77
X509v3 Authority Key Identifier:
keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:10:03:43:d3:41:ab:7c:7a:1d:5d:b1:f1:28:8b:c8:e8:22:
1b:07:76:75:3d:55:e1:1f:5b:7c:ad:d6:d7:81:de:42:28:53:
d7:2e:14:c8:b9:d8:d9:d1:9d:3f:36:94:36:55:f2:23:66:c0:
da:d2:6d:0a:53:73:25:89:c7:ab:34:72:48:42:a5:9d:39:45:
65:c2:13:d3:8c:3c:d8:3d:28:f6:2c:48:9e:8d:55:9e:32:60:
9c:33:21:d4:3d:8d:1e:5e:cd:44:62:fe:56:a4:ab:61:e5:df:
5e:f0:58:dd:f5:4d:31:15:8b:eb:5e:db:b7:57:96:3a:b2:55:
df:2a:48:2d:55:53:1d:41:4e:44:d1:a4:08:bc:12:94:e3:89:
b8:24:41:0b:91:38:ea:df:a8:df:3e:18:97:0b:1a:99:65:7b:
d3:64:9d:f4:48:2d:e7:78:b2:1a:f7:66:40:fa:10:3c:2f:4c:
eb:9a:09:b2:08:d8:b9:3a:b5:36:b0:be:47:4e:97:f5:57:b6:
fb:c2:cb:e6:4c:7d:0b:d3:f1:8f:59:2b:d0:cb:41:d2:ed:49:
79:bb:c8:9a:f1:62:b7:9f:1c:df:34:fb:9c:32:14:a5:8b:44:
3b:8b:19:c0:67:5a:68:bf:e9:db:4c:83:aa:8d:2e:b9:98:18:
ae:70:d4:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBGuusw1IGZo9I0KDNVvZ2wZsv3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3
QTNCQjFEODAeFw0yNjA5MjIxMDM5NDlaFw0yNjA5MjMxNDA3NDlaMDMxMTAvBgNV
BAMTKDYzNEZGQzg5OTlEODRFQzJBOUE0NjM5RERFMDlCNDY4NDI5NjY0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHgwQnPa4IaUzkRkSYHnCXLDUu
4DmHWYCxbHIn5Y6WhnBeRAj3kl/fh1OVWnpR/50fv4m477Jy8U/zeJn2hdAuIk0A
aRkAzImLZ6ZZC7uy2tigk/FC/KTtAZS7ofa1OPmagGjMq/WzofrX2ZAF7J+1yQBe
QHpKRdh+rsrTduqfwKqSHCI/OhjaiP1jJ1bP5zF73MJi5tVi/1X8g6+FUpcOex8x
Z1aoIVfR51vB0PY4cpdAw8jTsR3wYo+51knOK3Z/gkslo6dZLGLGfqqxqku1WzNL
hYt8PW7fb2JLK8lZ+vSTVVG7RWBd9dw/wParWchb85dSEP5Auv0z4VfYHIUZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUY0/8iZnYTsKppGOd3gm0aEKWZHcwHwYDVR0j
BBgwFoAUXPB1HQkAiSc1tnz8d/K6wXo7sdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzI0ZGI1NjctMzNhOC00Y2UwLWJjZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQw
OTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3QTNCQjFEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81Q0YwNzUxRDA5MDA4OTI3MzVCNjdDRkM3N0YyQkFDMTdBM0JC
MUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj
ZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJB
QzE3QTNCQjFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJcQA0PTQat8eh1dsfEoi8joIhsHdnU9VeEf
W3yt1teB3kIoU9cuFMi52NnRnT82lDZV8iNmwNrSbQpTcyWJx6s0ckhCpZ05RWXC
E9OMPNg9KPYsSJ6NVZ4yYJwzIdQ9jR5ezURi/lakq2Hl317wWN31TTEVi+te27dX
ljqyVd8qSC1VUx1BTkTRpAi8EpTjibgkQQuROOrfqN8+GJcLGplle9NknfRILed4
shr3ZkD6EDwvTOuaCbII2Lk6tTawvkdOl/VXtvvCy+ZMfQvT8Y9ZK9DLQdLtSXm7
yJrxYrefHN80+5wyFKWLRDuLGcBnWmi/6dtMg6qNLrmYGK5w1IY=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:32:25 2026 by rpki-client