
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
File: 5340DB769DA0690FFA8A696A6047EDC148F1991A.mft (raw, json)
Hash identifier: z1HmVixbnN9+2E/wVtejxt7STvT75D/TpMox6TQagN0=
Subject key identifier: E1:32:AF:4D:DD:52:D8:08:2A:F2:2E:AC:6E:1F:9B:1D:45:DA:1F:84
Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
Certificate issuer: /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Certificate serial: 67D8EC4308B13D2746B52275BFD357D30D909160
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 04:27:03 +0000
Manifest this update: Mon 21 Sep 2026 04:22:03 +0000
Manifest next update: Tue 22 Sep 2026 07:31:03 +0000
Files and hashes: 1: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=)
2: 5340DB769DA0690FFA8A696A6047EDC148F1991A.crl (hash: xpzDn6mgE6Nk36Q4NPh68WFyRaqdLE1lGqsJwmNyjqs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 07:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d8:ec:43:08:b1:3d:27:46:b5:22:75:bf:d3:57:d3:0d:90:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Validity
Not Before: Sep 21 04:22:03 2026 GMT
Not After : Sep 22 07:31:03 2026 GMT
Subject: CN=E132AF4DDD52D8082AF22EAC6E1F9B1D45DA1F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:e8:fe:9c:0b:68:71:a1:e2:0e:3e:16:a4:
a2:06:48:8e:b7:10:c7:15:e2:22:37:1a:af:fb:e4:
b0:d4:61:07:76:5f:df:ec:38:43:7c:4b:0b:d3:41:
98:d8:13:df:a2:4b:c1:eb:32:68:f0:f6:d7:72:4e:
22:66:e3:66:d6:64:05:0d:cb:78:94:02:24:f7:8c:
db:1f:cf:1a:da:f4:79:01:28:cb:f4:d8:a5:79:c5:
ba:d9:89:82:d9:4e:a0:3e:11:98:d0:e8:97:2a:ad:
5d:67:19:0d:c9:54:33:e3:f7:e0:cc:4d:8b:04:ef:
02:71:17:2e:cd:bd:44:21:ce:32:46:94:96:80:f5:
0b:07:68:27:bb:4f:80:93:9d:ee:e6:5e:2d:76:a4:
68:2e:e9:98:7b:d2:a6:80:a6:45:fa:bf:68:49:53:
3c:fb:35:97:cf:d5:b0:b3:f0:d1:57:f7:d2:80:f3:
df:10:e1:c4:be:96:15:5d:d2:74:0a:88:b8:22:dd:
e3:44:39:a5:53:38:3b:68:09:2c:ab:9c:12:1a:56:
0e:85:8e:bf:8d:c1:97:7a:db:5d:df:6f:f6:91:93:
20:bc:34:27:76:76:8b:b9:1b:37:ae:9b:67:a3:db:
43:1b:11:c9:e8:92:5e:67:f0:11:37:fa:25:dd:d3:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:32:AF:4D:DD:52:D8:08:2A:F2:2E:AC:6E:1F:9B:1D:45:DA:1F:84
X509v3 Authority Key Identifier:
keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:3f:c7:47:27:ac:60:d5:37:8d:61:63:d8:df:99:4f:df:
0b:f9:1a:c8:23:f4:58:b8:16:e6:b2:4d:d4:48:d9:17:02:3e:
92:da:41:92:f5:cc:ac:0e:e9:9f:75:51:0e:fe:ad:99:f5:91:
ab:1b:a6:79:fe:e1:ea:7d:ba:91:0c:09:69:df:76:96:88:71:
44:e1:bb:20:03:4b:fa:02:e8:69:4d:99:de:82:72:01:e8:07:
aa:12:bd:64:72:25:3b:b9:cc:50:6c:a4:83:05:78:97:88:28:
66:5f:cf:dd:6b:5b:da:ca:14:27:ac:9f:69:82:d4:e4:f6:15:
3a:23:6d:07:0b:ee:70:c6:e9:8e:95:1a:a1:76:7f:85:58:02:
df:ab:6c:09:da:fb:aa:24:f3:b2:4c:a6:cf:92:e1:a9:e5:47:
a8:d8:11:7d:72:90:40:fb:f9:b0:4f:19:ac:e3:c4:0d:27:fa:
2d:9e:ff:0a:38:2f:43:0b:e5:1e:82:10:50:c8:fe:44:2d:d6:
24:fa:ad:b8:89:61:ae:08:c3:42:89:76:fb:e1:20:9d:09:0f:
b5:43:7d:04:78:32:03:b4:b5:c2:6e:82:88:59:78:17:45:1d:
85:c1:39:bb:3f:d6:3b:ac:1c:07:fe:fd:14:8d:98:09:53:00:
74:93:65:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ9jsQwixPSdGtSJ1v9NX0w2QkWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0
OEYxOTkxQTAeFw0yNjA5MjEwNDIyMDNaFw0yNjA5MjIwNzMxMDNaMDMxMTAvBgNV
BAMTKEUxMzJBRjREREQ1MkQ4MDgyQUYyMkVBQzZFMUY5QjFENDVEQTFGODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i+j+nAtocaHiDj4WpKIGSI63
EMcV4iI3Gq/75LDUYQd2X9/sOEN8SwvTQZjYE9+iS8HrMmjw9tdyTiJm42bWZAUN
y3iUAiT3jNsfzxra9HkBKMv02KV5xbrZiYLZTqA+EZjQ6JcqrV1nGQ3JVDPj9+DM
TYsE7wJxFy7NvUQhzjJGlJaA9QsHaCe7T4CTne7mXi12pGgu6Zh70qaApkX6v2hJ
Uzz7NZfP1bCz8NFX99KA898Q4cS+lhVd0nQKiLgi3eNEOaVTODtoCSyrnBIaVg6F
jr+NwZd6213fb/aRkyC8NCd2dou5Gzeum2ej20MbEcnokl5n8BE3+iXd01GZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4TKvTd1S2Agq8i6sbh+bHUXaH4QwHwYDVR0j
BBgwFoAUU0Dbdp2gaQ/6imlqYEftwUjxmRowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWM3MTQxMjItODYwYy00MTRlLWE2N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5
REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0OEYxOTkxQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MzQwREI3NjlEQTA2OTBGRkE4QTY5NkE2MDQ3RURDMTQ4RjE5
OTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM3MTQxMjItODYwYy00MTRlLWE2
N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VE
QzE0OEYxOTkxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADG1P8dHJ6xg1TeNYWPY35lP3wv5Gsgj9Fi4
FuayTdRI2RcCPpLaQZL1zKwO6Z91UQ7+rZn1kasbpnn+4ep9upEMCWnfdpaIcUTh
uyADS/oC6GlNmd6CcgHoB6oSvWRyJTu5zFBspIMFeJeIKGZfz91rW9rKFCesn2mC
1OT2FTojbQcL7nDG6Y6VGqF2f4VYAt+rbAna+6ok87JMps+S4anlR6jYEX1ykED7
+bBPGazjxA0n+i2e/wo4L0ML5R6CEFDI/kQt1iT6rbiJYa4Iw0KJdvvhIJ0JD7VD
fQR4MgO0tcJugohZeBdFHYXBObs/1jusHAf+/RSNmAlTAHSTZXk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:12:42 2026 by rpki-client