
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json)
Hash identifier: 3ITEznLfJ/ApqnwZ/06oB2O5Vxkoo+NMn3premUn+Wo=
Subject key identifier: AC:86:78:B7:29:80:9A:43:C9:34:16:58:37:AD:4E:D5:72:7E:1A:65
Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Certificate serial: 5785942DEA5658B40520E787FA50DF99D938025B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 14:14:30 +0000
Manifest this update: Sun 20 Sep 2026 14:09:30 +0000
Manifest next update: Mon 21 Sep 2026 15:25:30 +0000
Files and hashes: 1: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: nFuF0tHwZM49A4Pgxyw3VrbJv7B1HvFCQSfH7+QmAo8=)
2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 15:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:85:94:2d:ea:56:58:b4:05:20:e7:87:fa:50:df:99:d9:38:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Validity
Not Before: Sep 20 14:09:30 2026 GMT
Not After : Sep 21 15:25:30 2026 GMT
Subject: CN=AC8678B729809A43C934165837AD4ED5727E1A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:86:9e:db:09:e7:96:a7:52:5a:89:aa:ca:
fb:14:9a:20:72:0d:9f:e5:ab:a1:bb:de:78:76:7f:
ee:95:59:29:81:5d:68:a2:a7:27:17:9f:b7:59:a2:
d5:80:56:46:19:7d:83:f9:51:68:82:da:88:1f:91:
c1:85:56:bb:91:2e:e4:ab:a7:e5:63:91:2f:8e:b0:
8a:c4:b1:48:9a:eb:c4:65:c3:fb:99:8e:1d:ec:00:
33:29:e3:2b:6c:f0:17:53:14:6e:9c:23:7c:6b:ea:
8d:a6:05:f2:5f:a8:ea:a3:4b:37:29:2a:d5:07:08:
64:ae:c8:3a:38:fe:65:44:38:2b:b3:6c:9e:85:86:
50:a6:6a:ba:7a:15:92:25:fc:e3:28:0f:60:52:ab:
d6:2f:d1:cb:18:62:2e:c2:57:a2:ed:56:d5:13:ff:
93:93:fb:ae:ff:10:53:35:83:5c:75:a3:6d:18:2d:
cb:5b:4b:b3:05:be:cb:21:35:56:77:42:01:12:1f:
76:eb:45:28:29:46:32:7a:b6:1e:e6:23:8e:7c:e0:
dd:3e:e2:cb:5f:83:2b:8c:e2:b6:95:55:1f:e6:ed:
89:bd:4f:93:c2:b3:3d:0d:46:b3:b6:bb:10:c7:b3:
64:c9:ec:b1:12:66:74:6f:a2:b5:38:9b:09:f0:ec:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:78:B7:29:80:9A:43:C9:34:16:58:37:AD:4E:D5:72:7E:1A:65
X509v3 Authority Key Identifier:
keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a3:78:31:f3:3e:11:26:cf:14:2c:20:f3:ca:f9:92:71:55:
62:43:e1:85:eb:9e:94:70:6e:61:ca:51:16:05:cd:96:5d:8f:
b0:88:47:fc:2b:5c:08:d8:6c:79:32:a6:7d:0d:6f:a1:69:e2:
a0:36:d5:1f:ba:29:a5:f9:1c:0c:e2:d9:ba:41:62:13:f1:90:
72:9b:ea:c3:a3:5c:fa:ed:06:c1:11:4e:4b:29:b0:b0:da:1d:
d1:13:e4:f5:76:b5:c2:f0:6b:17:7d:db:73:c8:1f:8c:6b:65:
e1:84:32:b2:2f:bc:0a:1c:27:0b:8f:5f:fd:ec:9d:e4:79:d1:
88:cf:f1:c2:f4:6a:98:6c:49:b7:d6:da:11:65:78:b1:87:b5:
49:b4:cd:1c:7f:42:e8:5a:76:f8:7c:3a:bf:1a:a8:dc:a7:43:
36:69:82:e7:a9:e5:1a:19:0b:f9:96:8b:9b:33:ff:6b:dd:a9:
59:0b:42:64:50:a3:c4:d2:bb:88:ef:ec:a3:35:b8:9d:34:42:
4b:17:18:d3:5d:9f:2c:96:ee:18:8b:82:65:21:d5:8b:35:a6:
aa:c2:67:81:4e:8e:88:11:1a:34:ec:26:01:b6:27:61:8f:d7:
c4:11:88:c7:2c:e5:22:33:20:fd:3c:64:0a:54:87:e5:4a:7f:
0d:f9:a5:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV4WULepWWLQFIOeH+lDfmdk4AlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0MTcz
NjBDMkVCNTAeFw0yNjA5MjAxNDA5MzBaFw0yNjA5MjExNTI1MzBaMDMxMTAvBgNV
BAMTKEFDODY3OEI3Mjk4MDlBNDNDOTM0MTY1ODM3QUQ0RUQ1NzI3RTFBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG4ae2wnnlqdSWomqyvsUmiBy
DZ/lq6G73nh2f+6VWSmBXWiipycXn7dZotWAVkYZfYP5UWiC2ogfkcGFVruRLuSr
p+VjkS+OsIrEsUia68Rlw/uZjh3sADMp4yts8BdTFG6cI3xr6o2mBfJfqOqjSzcp
KtUHCGSuyDo4/mVEOCuzbJ6FhlCmarp6FZIl/OMoD2BSq9Yv0csYYi7CV6LtVtUT
/5OT+67/EFM1g1x1o20YLctbS7MFvsshNVZ3QgESH3brRSgpRjJ6th7mI4584N0+
4stfgyuM4raVVR/m7Ym9T5PCsz0NRrO2uxDHs2TJ7LESZnRvorU4mwnw7Bj3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrIZ4tymAmkPJNBZYN61O1XJ+GmUwHwYDVR0j
BBgwFoAUX6iH1MQilk+2jN2HfZq0FzYMLrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWM0NWMyMmMtMjc1Yi00Mjk1LWI0NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRD
NDIyOTY0RkI2OENERDg3N0Q5QUI0MTczNjBDMkVCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkE4ODdENEM0MjI5NjRGQjY4Q0REODc3RDlBQjQxNzM2MEMy
RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0
NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0
MTczNjBDMkVCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAImjeDHzPhEmzxQsIPPK+ZJxVWJD4YXrnpRw
bmHKURYFzZZdj7CIR/wrXAjYbHkypn0Nb6Fp4qA21R+6KaX5HAzi2bpBYhPxkHKb
6sOjXPrtBsERTkspsLDaHdET5PV2tcLwaxd923PIH4xrZeGEMrIvvAocJwuPX/3s
neR50YjP8cL0aphsSbfW2hFleLGHtUm0zRx/Quhadvh8Or8aqNynQzZpguep5RoZ
C/mWi5sz/2vdqVkLQmRQo8TSu4jv7KM1uJ00QksXGNNdnyyW7hiLgmUh1Ys1pqrC
Z4FOjogRGjTsJgG2J2GP18QRiMcs5SIzIP08ZApUh+VKfw35pe0=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:08 2026 by rpki-client