
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json)
Hash identifier: pliDGXjpxoeG3YT4NFrmNcjFb0j2V6JXqPgRLbkRB4c=
Subject key identifier: 45:EB:D3:B6:56:53:1D:16:CF:9B:DA:FA:1E:82:9C:97:32:98:47:DA
Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Certificate serial: 603A88F9B10B9582AC510BD420B758868571BCE7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 05:05:08 +0000
Manifest this update: Sat 13 Jun 2026 05:00:08 +0000
Manifest next update: Sun 14 Jun 2026 07:24:08 +0000
Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=)
2: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: oC0I76wUQiElA038BbIeRWW8nvtcOqe1cfE2eVAI8sk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3a:88:f9:b1:0b:95:82:ac:51:0b:d4:20:b7:58:86:85:71:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Validity
Not Before: Jun 13 05:00:08 2026 GMT
Not After : Jun 14 07:24:08 2026 GMT
Subject: CN=45EBD3B656531D16CF9BDAFA1E829C97329847DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:21:07:15:1b:1c:ae:5a:74:99:09:b3:78:
4c:c9:26:b4:8a:37:6a:a5:0a:3d:7f:30:cd:9a:09:
45:c4:32:69:ca:56:16:ec:d8:49:77:76:72:bf:f5:
5e:61:a7:8a:71:74:e8:08:ed:ad:b8:ca:24:8c:b3:
b4:bc:fe:31:c8:cf:9e:ec:64:1d:2b:55:67:f7:b0:
30:1e:8c:1c:ee:65:db:8f:d4:92:e9:44:25:87:95:
82:f6:d7:39:86:74:9a:34:6f:d0:44:9e:68:7f:ef:
1b:3d:c5:48:77:7c:ff:8f:f6:b4:15:e5:fb:2e:cb:
5e:4d:99:0e:20:55:d6:e7:7d:b3:ce:4d:52:ba:1b:
9a:69:e0:b8:ef:60:fc:49:3d:28:82:68:ca:4d:b5:
72:9f:40:aa:c0:89:9e:1c:8d:56:3a:db:0e:d8:ef:
12:2e:88:fb:26:88:c6:d5:51:ea:18:61:ff:3d:b3:
8e:79:b9:6c:e5:42:72:91:25:59:18:ec:4e:76:2b:
0b:3c:ff:13:2a:b5:54:8c:97:7b:27:06:7e:9a:d7:
85:20:29:56:3b:b4:49:f8:6e:20:b4:e8:22:7b:2e:
49:63:1e:e4:66:9d:0c:37:05:01:95:08:1a:1b:3e:
9f:bb:75:ef:b0:0b:ad:31:12:d4:3c:b3:02:c3:dc:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:D3:B6:56:53:1D:16:CF:9B:DA:FA:1E:82:9C:97:32:98:47:DA
X509v3 Authority Key Identifier:
keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0e:d2:e0:38:68:a2:38:8c:b5:ed:8f:61:40:f6:15:af:2a:
26:7b:ee:10:17:2b:10:ae:a7:eb:9f:85:37:d9:2b:37:78:b1:
d8:f1:14:47:17:72:e5:be:c3:17:99:ab:a6:50:72:b3:01:dd:
18:53:7b:97:09:44:c6:d2:e5:3a:00:86:64:92:0e:8a:ad:53:
42:27:58:cf:af:81:41:92:21:c3:4e:a8:45:a3:ee:66:f0:1b:
80:61:5e:a3:c5:4c:dc:39:29:e7:2e:5a:c5:14:24:11:dc:a8:
b6:e9:37:c7:07:d8:85:1f:9d:c5:2b:99:67:27:ff:9f:15:f1:
43:44:5f:ba:74:a5:23:51:07:4f:b5:d1:6a:db:ae:1a:f6:42:
89:32:11:bb:98:d2:00:db:01:1f:78:76:36:88:3b:2b:a8:ff:
32:41:04:eb:2d:b8:83:98:8d:1b:fd:78:48:dd:dd:81:85:e7:
63:3c:d4:5a:6b:21:db:41:2d:9b:46:24:07:d2:aa:ee:ee:c6:
48:7e:5c:b5:de:e3:da:38:77:c9:a1:03:3d:c9:ef:6c:5e:dc:
3f:a2:1b:e2:b0:76:49:12:ec:9e:38:ef:a7:c1:b4:f5:b4:84:
be:a2:87:39:e9:01:3e:38:8b:be:17:e4:24:94:2c:da:a0:eb:
53:d8:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:47 2026 by rpki-client