
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json)
Hash identifier: aQ2OtwwB2evKDAXUGvv9dt/mrhIKnJYPoBebMn+npkY=
Subject key identifier: ED:66:52:DC:82:3B:C4:52:BC:5C:91:30:69:77:E7:EA:97:56:87:F9
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial: 5E3DBBD10985105B6662CF6B183C3A52C4DFBB85
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 17:23:13 +0000
Manifest this update: Tue 28 Jul 2026 17:18:13 +0000
Manifest next update: Wed 29 Jul 2026 19:10:13 +0000
Files and hashes: 1: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: Nk8q9CRugsp8wNHXa9LVuEkBFAnDktfTtav1wN4e0NQ=)
2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:3d:bb:d1:09:85:10:5b:66:62:cf:6b:18:3c:3a:52:c4:df:bb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
Validity
Not Before: Jul 28 17:18:13 2026 GMT
Not After : Jul 29 19:10:13 2026 GMT
Subject: CN=ED6652DC823BC452BC5C91306977E7EA975687F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:c2:ff:06:2f:01:9b:e3:64:9b:a0:73:32:
41:3d:e7:12:6c:f0:f0:64:46:ac:07:d5:4f:a7:57:
88:1a:2b:e6:05:4d:a2:93:cb:26:4d:07:e0:e2:3a:
a7:1b:d2:58:86:06:6b:16:52:19:00:97:aa:8d:f2:
b6:a1:f6:32:1e:e0:2c:bc:38:b4:f7:7d:8e:6f:c3:
51:6c:2f:2b:31:3c:ce:c2:5a:b0:86:47:d7:d2:7f:
10:ad:11:22:38:55:53:78:fd:58:53:80:6e:f4:a7:
5b:b1:fb:7f:84:3c:a2:5b:d3:6e:58:4f:13:2c:fa:
d5:4b:e8:e6:ef:5f:e4:c1:87:bf:a6:a4:3b:f4:1d:
72:3f:93:22:47:88:a3:e2:d1:9f:e5:d7:a4:57:3a:
6d:1f:9e:59:f6:6f:5b:be:0f:db:2b:de:7c:f5:be:
9a:ad:fe:4b:55:e4:ab:99:46:89:c8:a7:96:23:c0:
bf:a9:7b:5a:21:d3:46:61:f6:3a:37:9c:6a:94:87:
0b:73:24:4e:b3:e6:de:8d:14:a2:93:5f:ee:0e:f9:
5e:44:ad:1a:77:40:e9:e7:60:1d:bb:1b:f1:e4:c2:
5d:a3:17:f9:77:a6:76:42:dd:ca:83:e2:fe:60:2d:
62:76:a5:65:d6:66:7d:97:e5:f4:9d:5e:0b:85:2c:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:52:DC:82:3B:C4:52:BC:5C:91:30:69:77:E7:EA:97:56:87:F9
X509v3 Authority Key Identifier:
keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:52:dd:f2:3b:c8:ca:0e:2b:0a:10:5d:11:9d:3e:ba:cb:
f8:69:b0:1b:12:b4:69:75:11:14:bf:d1:25:47:11:c4:ac:89:
fa:54:a9:5e:92:e2:77:39:9d:33:44:7f:1d:d5:82:2c:c8:7b:
60:8b:8d:78:50:8c:2d:c7:9a:49:9e:bd:85:07:d1:00:03:3e:
c6:6c:3e:91:de:a2:da:3e:4b:a2:88:a6:90:06:33:50:81:c4:
3f:6f:96:dc:b9:f6:f4:9b:52:6e:7e:b8:4e:01:c0:d8:d7:75:
5a:07:9e:dc:9e:66:29:c6:4e:6c:5c:4d:83:a7:24:38:78:16:
fc:91:57:38:c6:ce:a5:20:83:be:96:d0:93:72:54:72:48:ba:
51:ff:42:ed:40:9e:41:37:7c:c9:c0:c4:ca:cb:1f:6a:6e:42:
e8:60:ca:39:76:fb:d3:5f:8c:94:85:83:ba:1f:e2:2c:ba:dc:
48:d3:f6:88:29:80:5b:aa:cc:88:de:12:0a:96:ec:97:3b:cc:
d0:c6:c5:74:ff:69:4d:3b:f3:20:b9:4a:45:7f:ab:b7:ff:4d:
30:32:cc:50:0a:fc:87:76:6e:38:4e:fb:95:d7:6d:60:37:1e:
d9:3d:bf:27:e4:e7:ab:71:9c:bd:1b:c3:53:12:35:e3:81:06:
d1:79:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:10 2026 by rpki-client