
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
File: 5340DB769DA0690FFA8A696A6047EDC148F1991A.mft (raw, json)
Hash identifier: 25PBUtLlWCzEQn6RyNT7X5207a4y2o6h7sKsGhnUj40=
Subject key identifier: 26:41:B9:E3:11:67:15:9B:AA:F9:BD:DC:AC:5E:7F:99:C4:EE:98:32
Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
Certificate issuer: /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Certificate serial: 17CB11C72000A19C6CAA2B5EAAD381D36BD2D614
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:20:31 +0000
Manifest this update: Wed 17 Jun 2026 06:15:31 +0000
Manifest next update: Thu 18 Jun 2026 07:31:31 +0000
Files and hashes: 1: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=)
2: 5340DB769DA0690FFA8A696A6047EDC148F1991A.crl (hash: iN+Ivp/bfLKk8/0SRefVn1Wm0s/JyeiDk9bN/nWQHLc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:cb:11:c7:20:00:a1:9c:6c:aa:2b:5e:aa:d3:81:d3:6b:d2:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Validity
Not Before: Jun 17 06:15:31 2026 GMT
Not After : Jun 18 07:31:31 2026 GMT
Subject: CN=2641B9E31167159BAAF9BDDCAC5E7F99C4EE9832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:90:d5:43:98:45:d7:ae:96:b3:05:18:8b:
59:bb:55:1e:a1:ab:4c:77:52:7f:1c:16:b7:c9:85:
62:fa:36:45:a1:2a:de:18:10:5c:02:7e:44:68:b5:
67:47:5b:23:93:bd:a2:d5:6f:c8:ea:cb:d8:5d:85:
d0:0e:45:74:67:ac:2d:80:39:70:f5:c1:01:12:ad:
b7:09:d4:1a:11:97:26:a9:92:ab:4d:7b:7a:e3:8a:
c6:22:d4:e7:30:90:6a:b8:b3:eb:39:93:66:25:b4:
04:dd:ec:07:aa:4a:52:7e:68:ac:48:b4:fd:27:21:
12:92:dd:46:7e:b8:96:8a:d4:e6:ba:76:b2:b5:75:
3c:6b:00:dc:66:7c:51:6c:4a:d1:ea:6c:d8:c6:91:
86:7b:bf:f8:37:45:08:25:25:88:9c:5e:fe:ce:b4:
af:74:e9:a1:1b:ab:7c:4f:69:85:07:5c:ed:70:60:
c8:41:23:4c:9f:30:d3:f4:c9:7d:da:56:b9:b6:a8:
8a:a5:1b:a4:1f:cc:08:5f:f2:ae:b2:79:24:32:07:
fc:e5:33:17:1b:5a:ab:c6:bb:c7:a4:18:9e:7b:6c:
1e:be:b9:56:7f:d3:ff:31:f8:0e:82:9e:d5:e7:f6:
10:76:2d:6f:af:1d:ae:12:ac:d9:d0:df:dd:a8:4f:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:B9:E3:11:67:15:9B:AA:F9:BD:DC:AC:5E:7F:99:C4:EE:98:32
X509v3 Authority Key Identifier:
keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:69:ff:62:5b:71:53:44:6f:ea:9b:0a:3d:bb:61:c0:90:23:
6e:9c:18:cb:35:51:2a:9e:43:3e:ae:a8:49:cc:70:83:66:0c:
f2:9c:1a:41:68:d5:dc:b1:bf:1a:4c:d9:48:5e:64:66:57:44:
19:97:c7:f3:b1:90:01:b0:a7:e7:98:7b:18:2c:a6:ea:a7:c4:
d3:21:13:d8:8a:30:0e:ad:a2:55:61:ff:65:b1:e5:f5:6f:43:
0f:4e:51:fc:67:d2:10:db:2b:8e:2f:c3:89:3b:84:bc:58:fa:
e0:8c:2c:33:f8:15:9f:c8:23:e3:49:32:69:dc:f8:e2:aa:a2:
e0:b4:e1:1e:ab:d8:c8:03:41:18:18:fd:6c:15:f4:03:80:35:
c8:c2:f3:92:cd:d1:67:87:b6:bb:4f:c4:98:74:cd:56:87:75:
7b:af:bb:db:22:39:ac:fe:85:ce:6b:e2:f1:6b:67:98:69:09:
f1:d0:83:35:00:64:3e:4c:e8:24:1a:cb:75:36:99:62:14:e8:
e6:1b:03:9c:03:de:00:0f:ee:f6:f4:9c:aa:8c:c3:3e:54:8a:
43:79:11:ec:75:5b:58:58:84:26:63:78:5c:f1:ec:31:f2:b2:
08:f6:83:f5:ab:96:92:fe:46:87:c7:7b:89:9c:76:90:1e:a1:
b3:15:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:04 2026 by rpki-client