
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json)
Hash identifier: 84xy3sV3kNnFyxUAso9X2vbveJZ67HnsD+ubktnBfso=
Subject key identifier: 58:E5:4A:50:FE:66:A6:EA:D8:C4:EB:DF:1D:FA:80:9D:F5:F6:25:F2
Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Certificate serial: 19D4CAB643DF02F55112F54C9EF2D176302F55DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 22:19:19 +0000
Manifest this update: Tue 28 Jul 2026 22:14:19 +0000
Manifest next update: Wed 29 Jul 2026 22:47:19 +0000
Files and hashes: 1: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: NVqdO5LGcqzcOgcm5rjl+as8BOpjktDcmAg1EhzjMNY=)
2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d4:ca:b6:43:df:02:f5:51:12:f5:4c:9e:f2:d1:76:30:2f:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Validity
Not Before: Jul 28 22:14:19 2026 GMT
Not After : Jul 29 22:47:19 2026 GMT
Subject: CN=58E54A50FE66A6EAD8C4EBDF1DFA809DF5F625F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:56:40:00:bb:98:c2:b6:3c:91:13:c6:1e:
17:03:87:fb:df:c0:e0:53:e3:da:01:81:5c:46:5c:
d3:71:0a:bd:cf:7a:a5:52:b5:57:e4:7f:1f:a7:ff:
24:5b:d5:1c:d7:c8:2e:53:73:64:5b:b0:78:78:98:
28:cf:e2:88:10:74:36:3e:e6:a9:7f:06:be:ef:42:
ce:60:81:3c:6f:ba:90:66:13:82:3a:c9:e2:55:98:
2b:15:dd:5b:30:a7:63:b5:62:5e:a4:95:38:a7:f6:
ae:a7:42:b9:74:d3:c4:67:9b:09:11:eb:de:44:c9:
12:56:3e:51:c9:12:cf:ff:4a:21:4d:cf:a3:93:17:
c9:0a:8f:45:7f:68:cc:23:b6:b1:17:cf:56:36:60:
05:9c:75:a2:e1:6f:9d:62:f9:fd:f8:c6:02:f4:24:
cc:1b:9c:3c:70:5d:28:ab:97:43:41:75:fc:6f:d3:
24:61:49:f4:f8:cf:df:e9:34:fc:e5:09:ce:fb:3e:
6a:00:1f:db:58:44:69:4b:4a:8d:37:87:dd:ac:26:
03:53:39:e6:88:20:ce:18:e0:27:5f:82:cc:c2:59:
c5:18:61:2c:46:71:73:1f:ba:5b:6d:13:f4:43:41:
ec:66:cd:41:b9:99:2f:16:ae:bf:89:c9:22:14:8c:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E5:4A:50:FE:66:A6:EA:D8:C4:EB:DF:1D:FA:80:9D:F5:F6:25:F2
X509v3 Authority Key Identifier:
keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:03:31:a8:3c:2f:c3:87:88:35:9b:a2:52:d1:69:e3:b5:3d:
34:a2:d2:65:15:1f:da:e6:46:b7:a7:39:9c:d5:e6:9e:a3:90:
03:dd:b8:88:eb:4f:c6:34:25:dc:72:65:42:48:56:40:e7:20:
a1:ad:8a:2b:6e:0e:4d:34:07:d7:0c:94:b7:1e:1e:d6:9b:be:
d4:70:c7:3c:7e:85:cd:a7:f0:14:6d:14:38:ca:68:d3:cb:8e:
06:8b:2f:26:b3:4c:8b:17:e7:b0:ec:d8:62:6b:92:85:83:fe:
ce:cb:16:c2:74:67:5c:2a:bc:82:e3:ca:0e:e5:74:dd:27:5e:
cd:7b:16:9b:c2:5c:94:ab:b6:0d:77:39:76:de:9e:51:fa:d6:
8e:1c:0b:99:24:27:2c:fa:f6:7d:4e:de:41:fc:97:fa:a8:7a:
71:61:c4:53:4a:a9:41:02:76:9f:1f:50:8b:f3:b4:b6:f5:66:
c8:a0:6d:9c:02:ac:1b:f5:12:1e:52:a7:d4:96:e6:1e:c1:17:
4d:6a:f8:44:a1:e6:5e:ed:e3:ac:c5:f7:34:ce:c2:79:53:1a:
c6:99:64:10:54:b3:17:91:8c:88:a9:27:c5:c1:56:9c:f4:96:
13:84:f5:59:b2:6c:07:03:d7:32:ff:86:97:87:42:fd:55:ac:
54:1e:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:11 2026 by rpki-client