
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft
File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json)
Hash identifier: npD/MD8FlAO/YCkyYAVYTPh7vvmQiTm8qZ8m0gOeMe0=
Subject key identifier: E0:4F:C9:CC:17:F3:F0:9C:F9:13:4F:D4:34:CE:02:C2:41:08:4E:1C
Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29
Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729
Certificate serial: 73D2BE7B7D10C8812EE1ABDAB110B043998BD690
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:25:42 +0000
Manifest this update: Wed 17 Jun 2026 02:20:42 +0000
Manifest next update: Thu 18 Jun 2026 06:13:42 +0000
Files and hashes: 1: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=)
2: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: kWS4odoYf1VzpmltXHE/78M2fKT9SyS1/VWnpEFHGdk=)
3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl
rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d2:be:7b:7d:10:c8:81:2e:e1:ab:da:b1:10:b0:43:99:8b:d6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729
Validity
Not Before: Jun 17 02:20:42 2026 GMT
Not After : Jun 18 06:13:42 2026 GMT
Subject: CN=E04FC9CC17F3F09CF9134FD434CE02C241084E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:d1:78:f2:6c:d2:17:56:35:11:85:1c:d2:
9a:52:42:ce:b5:5d:85:b8:de:c1:da:c1:d9:1a:75:
46:4f:1e:b0:c0:63:f2:49:59:95:05:2f:5c:f4:b6:
23:6f:81:4c:b6:36:3a:6f:c7:5a:4c:18:9b:ad:07:
75:57:c6:82:8b:04:9f:f3:5b:44:bb:5c:41:bd:ad:
a5:ee:e6:9e:06:31:80:ea:d2:c5:f8:51:95:b8:ad:
ac:a1:9f:8d:f0:78:31:a4:4f:5c:ea:60:1c:cd:a2:
d0:09:21:11:79:14:b5:dc:e3:88:aa:f4:7d:4b:21:
b5:6c:ef:64:b0:a9:8c:01:84:c4:45:03:8a:62:ce:
d1:39:eb:4c:8f:98:47:6b:e2:23:5e:de:80:5c:53:
38:10:6a:5c:6d:0f:4e:19:f2:a3:cc:b4:36:9f:8e:
81:e4:a3:ad:65:58:dd:6c:44:e8:a5:3a:8a:1c:6c:
03:b2:b7:e7:bd:c0:87:de:b7:6d:f6:85:1a:f3:01:
d2:c0:e4:b8:0c:c1:f5:8b:21:41:9b:5b:5c:a8:88:
20:95:03:35:95:97:2b:a6:8d:6f:ce:11:77:34:bb:
98:2d:e5:f9:7e:76:ca:a4:1a:1a:d9:1c:4a:4a:a0:
e6:fa:64:6d:00:5e:8e:65:f9:36:1d:d4:0f:29:37:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4F:C9:CC:17:F3:F0:9C:F9:13:4F:D4:34:CE:02:C2:41:08:4E:1C
X509v3 Authority Key Identifier:
keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:52:3a:05:4d:a1:dc:5f:e3:0b:95:9f:c2:a1:e2:1a:23:
90:93:92:7f:bf:ae:54:ff:9d:91:50:a3:3f:d5:44:22:9b:f1:
21:d5:78:04:8b:70:45:ca:da:97:67:1e:ef:83:b2:87:19:24:
8b:c8:2d:85:a5:00:11:e0:89:ff:a7:ff:16:95:4e:e4:e4:0b:
81:93:62:7f:eb:77:47:2e:74:c3:67:67:44:3a:35:b3:be:88:
37:28:d1:7a:0c:65:d7:31:f1:a7:cb:9a:ad:91:f1:0e:2c:e2:
00:2c:3b:8a:17:a1:05:0f:c8:5c:01:b3:fb:30:85:81:ad:69:
0e:5f:29:d5:06:49:5c:88:4a:f6:30:b2:b2:4f:7e:52:57:a5:
45:da:9e:22:c2:41:bb:a0:25:a9:a1:7a:4d:9b:dd:af:20:b8:
e5:ca:8e:cf:dd:fc:79:9c:98:d0:08:db:44:05:67:ae:f2:ef:
98:56:f5:d6:d7:4d:44:a9:11:f4:f8:69:86:49:61:a2:da:b3:
f8:7f:8e:2e:f8:49:25:e9:00:6b:6f:fe:56:76:94:45:b7:d7:
5f:9a:1c:1e:e2:51:3f:50:6f:17:56:2f:28:86:22:31:a7:38:
54:da:be:99:f0:84:10:7a:85:3e:f4:90:79:94:34:e6:f6:72:
4d:94:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:49 2026 by rpki-client