
$ rpki-client -vvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json)
Hash identifier: fVT8EDl+1zX/No3rzQVBnDO3kbSBhc1HJQOtg6VM1Oo=
Subject key identifier: 0F:81:48:AD:85:F1:88:FF:72:F3:4E:A0:3F:CE:0C:17:ED:98:B9:95
Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA
Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
Certificate serial: 731155EBF64315BAFD7926917C767712C9D15EBA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 22:16:13 +0000
Manifest this update: Tue 16 Jun 2026 22:11:13 +0000
Manifest next update: Wed 17 Jun 2026 23:41:13 +0000
Files and hashes: 1: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: sGzhXQhJCICs4HgZln38KoVDqn+Uoav5Z2dGW0YzqJU=)
2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=)
3: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=)
4: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl
rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:11:55:eb:f6:43:15:ba:fd:79:26:91:7c:76:77:12:c9:d1:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
Validity
Not Before: Jun 16 22:11:13 2026 GMT
Not After : Jun 17 23:41:13 2026 GMT
Subject: CN=0F8148AD85F188FF72F34EA03FCE0C17ED98B995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:06:42:44:54:ac:a6:af:af:8d:1e:f7:df:
19:eb:a4:d2:24:e9:d3:44:b8:b4:e2:37:83:7e:83:
8c:d7:10:5a:a0:e4:ac:bf:dc:ac:d7:65:79:65:70:
d9:be:fd:c6:e8:eb:f9:4c:ab:20:38:70:db:40:81:
de:15:f2:07:ee:bf:40:b9:ed:23:f1:0f:f5:c7:23:
74:89:3f:4a:f5:3a:85:fd:9a:fd:61:10:e8:11:61:
2f:6b:a2:4f:d8:0b:f1:12:d2:60:43:60:c0:29:e3:
52:05:a8:a6:d2:2c:69:2e:a5:ae:ee:03:b5:3e:8e:
2d:4c:5c:99:50:66:4c:73:34:3a:61:32:21:98:8b:
75:53:77:7b:2e:30:74:fa:b5:be:21:4b:9d:1a:2d:
90:7a:d5:b5:d6:2b:d7:56:f2:6e:7c:b2:6e:76:e5:
4f:5c:01:eb:c2:0f:4e:77:8c:49:d9:8b:af:8b:f5:
00:79:52:de:59:a7:ad:b9:3c:2b:18:70:45:eb:55:
2b:47:66:bb:98:9c:56:c9:4d:0a:2f:c9:8d:4c:c7:
3f:d8:25:6d:54:6c:15:c9:1e:62:43:f2:33:5b:c2:
58:ea:9e:7d:07:c6:92:5f:c9:10:f5:a7:36:bd:39:
dc:23:8b:03:a2:d5:ea:cf:73:72:e3:b5:bf:72:96:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:48:AD:85:F1:88:FF:72:F3:4E:A0:3F:CE:0C:17:ED:98:B9:95
X509v3 Authority Key Identifier:
keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c9:a2:57:bc:3e:8b:38:23:14:7a:0c:89:12:91:70:32:49:
1a:f7:05:10:b4:62:38:70:13:0e:ef:52:75:ca:d8:b8:8d:2f:
8a:bb:dd:d6:98:70:95:e8:be:11:de:be:87:9b:9f:43:f9:3a:
05:c2:fb:5b:f3:5c:0a:34:ad:ad:0e:74:69:9e:53:71:6c:a0:
11:5b:e9:81:e2:32:ff:39:5d:b0:41:85:36:9b:7a:41:31:4e:
ea:88:d7:27:76:e1:29:51:1f:32:ce:53:c8:fe:0b:f5:d1:86:
50:8e:e8:bf:af:c3:e2:ee:bc:7a:44:2c:04:49:92:a4:60:dd:
89:92:54:8e:26:6f:15:65:44:1c:25:7b:85:55:19:2b:66:b2:
b7:58:ae:66:3c:c6:c3:8c:d5:97:c6:fc:2d:8e:be:24:eb:e9:
2a:24:b7:ab:b2:77:2d:5b:99:83:72:26:07:d7:a3:4d:bc:dc:
5d:60:6a:e1:97:33:30:d6:02:99:d9:d3:6f:f5:a7:c1:eb:a4:
f1:b3:e7:76:0d:ee:9d:bf:9d:26:d9:0f:45:c1:c3:22:68:66:
4d:87:67:07:7e:b5:f1:4a:40:09:81:60:5b:37:c0:8b:7d:bd:
95:4d:f0:d9:3d:dc:06:77:48:ca:6e:ec:ad:b0:e0:a8:54:92:
e0:25:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:54 2026 by rpki-client