
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json)
Hash identifier: lF/VRA/0FuXa/ZZwgLjaGRlnsUKrTWEC9iDPWFdDQC8=
Subject key identifier: 91:0C:03:70:6F:8D:75:1E:63:67:7E:50:EC:5C:8B:DE:19:6A:14:AA
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial: 32DD01A695D9CDBDBD3A5025C98F90219E2D3EA4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 10:48:59 +0000
Manifest this update: Wed 29 Jul 2026 10:43:59 +0000
Manifest next update: Thu 30 Jul 2026 10:57:59 +0000
Files and hashes: 1: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=)
2: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=)
3: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=)
4: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=)
5: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=)
6: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: 2dqAUM6NEaOxOJKNB7ICpthzxjqLBqHTlzF5CEllG9w=)
7: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: bF7MXIfp5h8uckMq7JCvq4uvQ9qMJ5YCdRjxIwunYqI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:dd:01:a6:95:d9:cd:bd:bd:3a:50:25:c9:8f:90:21:9e:2d:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Validity
Not Before: Jul 29 10:43:59 2026 GMT
Not After : Jul 30 10:57:59 2026 GMT
Subject: CN=910C03706F8D751E63677E50EC5C8BDE196A14AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:52:42:fd:76:75:a5:97:93:c4:ff:0a:10:
71:fe:bd:86:b3:33:29:76:12:3d:bb:c6:3a:13:d9:
aa:48:ac:ed:7d:72:87:3b:bf:bb:62:b5:cf:20:4f:
a1:19:58:61:13:6c:e0:47:e8:46:fe:75:dc:c3:70:
b5:d0:95:33:c2:a2:8f:d3:3d:1c:3d:46:b3:7b:3f:
ee:6f:57:52:fe:a1:2b:15:4a:1a:a0:27:a3:65:a5:
76:51:9e:38:f8:7e:d1:36:3d:34:13:90:9c:b4:25:
6e:bf:79:cd:03:65:25:72:ac:28:2d:2c:da:16:b1:
b3:d3:b3:2d:23:a6:28:0f:58:f3:8e:ee:a7:0b:75:
6d:65:a9:f1:4d:8b:89:28:23:19:70:76:bd:b2:43:
ae:08:ad:05:67:d0:95:3c:fb:d1:db:a1:d2:7a:94:
f5:11:f7:c7:40:b0:c5:14:b0:39:f1:dd:ca:a9:4d:
99:2a:e2:07:68:4e:76:69:48:66:63:7e:9a:d7:ec:
8b:c6:f1:58:7f:ae:a7:ea:40:d9:99:98:79:c8:05:
1f:15:f3:e3:36:a9:ad:03:50:ca:fb:41:3f:e2:fd:
c0:42:25:f2:fc:83:2d:2b:1c:59:bc:82:d6:7c:4d:
14:30:66:43:3b:f7:9d:be:cc:01:6b:40:d3:a3:28:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:03:70:6F:8D:75:1E:63:67:7E:50:EC:5C:8B:DE:19:6A:14:AA
X509v3 Authority Key Identifier:
keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fc:2b:8c:7d:9f:80:19:b6:83:03:31:e6:ad:a6:a7:8b:3d:
cd:c5:de:82:22:6a:31:79:c8:e9:b7:d3:d1:dd:0d:5d:39:91:
df:99:80:73:53:5b:54:56:d0:41:cd:68:64:16:86:c4:53:00:
24:28:36:f2:2c:63:fd:7c:a4:51:7c:90:57:0d:8a:70:43:4d:
b3:57:5f:be:55:20:8a:70:33:c5:45:30:08:99:9f:a1:a9:3c:
8b:0e:b2:05:18:28:68:a0:fb:f8:a7:37:6c:2b:b9:73:3c:e9:
d0:1a:83:29:6a:f5:b9:a7:5b:24:60:9d:e3:69:fb:38:da:e7:
4e:cb:9f:4e:d8:44:51:8a:22:9d:8f:88:1d:9d:1f:65:8e:0b:
5f:aa:26:19:db:97:28:b2:c5:f0:06:90:4c:7d:5c:d1:ff:17:
34:ba:c1:01:f8:54:c4:cf:b4:f5:89:8d:6d:b9:b5:bc:15:d1:
03:e6:19:e4:c1:e3:b3:7f:46:04:ca:d9:c0:30:62:45:5e:e9:
9a:0b:72:68:4b:67:71:66:90:a7:a6:00:a1:82:85:e4:53:92:
63:cd:54:9f:0d:f0:44:e7:47:15:5d:3e:84:1c:e6:69:a6:9f:
f2:e7:26:af:5b:50:c5:a3:87:1f:29:0f:95:27:29:78:31:88:
a5:14:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:43 2026 by rpki-client