
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json)
Hash identifier: JHI1tEuNZ9xJo8Hxw5hG/ebWUETlSAJ99zlANHk73mc=
Subject key identifier: CF:4A:FD:ED:DF:7E:FF:6C:48:73:69:24:35:99:44:30:AA:1D:CC:53
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial: 5B5AFA989E8ACCC52DA61B2C8A8D6781B5682917
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 16:04:06 +0000
Manifest this update: Sat 13 Jun 2026 15:59:06 +0000
Manifest next update: Sun 14 Jun 2026 18:37:06 +0000
Files and hashes: 1: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: fXgDvLK83saSxumRzXk6HPpoe7RTN2/MdjGFLCXT82E=)
2: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: bF7MXIfp5h8uckMq7JCvq4uvQ9qMJ5YCdRjxIwunYqI=)
3: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=)
4: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=)
5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=)
6: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=)
7: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5a:fa:98:9e:8a:cc:c5:2d:a6:1b:2c:8a:8d:67:81:b5:68:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Validity
Not Before: Jun 13 15:59:06 2026 GMT
Not After : Jun 14 18:37:06 2026 GMT
Subject: CN=CF4AFDEDDF7EFF6C4873692435994430AA1DCC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:4c:46:88:f6:93:04:50:24:10:65:b8:b2:
93:c3:b9:94:3d:28:f0:c8:09:e2:4d:bd:ba:9a:19:
af:37:88:a6:0c:4d:29:46:d5:f4:48:6f:10:89:2e:
7d:66:d2:c1:ce:2f:63:67:6a:2d:8f:dc:66:f8:75:
81:5d:ea:f8:e9:76:54:a9:11:a4:2b:4a:ac:69:fd:
70:69:02:b2:c3:d1:82:15:64:17:ac:01:4e:68:2a:
c4:e2:69:0d:ac:f3:cd:89:85:e8:b0:69:86:7e:e8:
67:29:e2:43:d0:0e:ef:c8:df:8f:c0:01:dd:ce:7d:
ad:11:ac:20:5f:74:38:0a:49:1f:c2:55:ba:bb:cb:
5e:72:90:73:6c:16:56:0c:17:23:f1:12:a3:61:98:
76:c4:7c:a3:82:23:bc:ab:e8:6a:3f:5d:45:20:62:
a9:b4:4a:75:07:f6:23:88:05:4b:da:21:f2:db:56:
40:6b:6c:9c:de:87:88:de:42:ca:87:d5:7d:50:45:
68:a3:c4:6c:4f:b6:6d:ae:98:c1:ed:35:ce:ce:98:
35:d0:69:24:87:bd:af:eb:1e:7d:38:fc:fc:fb:db:
70:29:98:bb:03:41:f4:29:55:09:19:1b:91:18:fe:
79:57:46:fd:55:de:dd:bf:0f:f9:70:07:6f:90:b6:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4A:FD:ED:DF:7E:FF:6C:48:73:69:24:35:99:44:30:AA:1D:CC:53
X509v3 Authority Key Identifier:
keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:35:19:11:02:25:39:7a:70:45:5e:dd:70:78:81:4a:20:cf:
f4:fb:5e:85:d2:43:41:29:0a:ef:0c:4f:15:d4:ea:a1:b8:8f:
dd:36:5f:4e:85:7b:a4:51:97:20:40:18:cc:9b:ee:50:33:50:
74:c2:5e:b5:42:51:96:f8:a4:04:6a:e8:91:f5:19:54:a0:3b:
55:26:ab:68:bd:97:d7:4e:41:be:23:b0:5a:d4:06:d3:21:80:
b1:15:b8:98:37:83:a8:c6:06:3d:83:b6:bf:de:1a:92:63:6b:
a8:bf:9e:d6:d5:c2:f5:e5:af:50:7a:f9:a3:ad:5c:ef:97:d1:
79:90:5c:6c:45:92:bb:99:aa:23:91:08:73:4d:81:be:d7:68:
5f:bc:c7:cd:74:a6:1c:a3:56:f4:4a:31:da:f2:04:7a:42:32:
32:15:5e:4c:65:f5:cc:88:1c:86:e1:cc:e6:7f:a3:fb:e5:7e:
82:7f:ba:5e:e2:ff:b8:99:39:8e:1b:a3:6c:e5:e4:0b:13:46:
c4:08:fd:c8:81:bf:09:81:e5:70:3b:98:91:46:f7:98:f7:3d:
2c:18:67:e0:af:e3:07:5b:b1:ee:f9:5f:6e:ba:32:76:f6:e6:
be:83:c8:48:31:eb:13:74:92:94:a0:b9:f3:0b:d8:fb:da:f9:
ab:b8:1b:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW1r6mJ6KzMUtphssio1ngbVoKRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD
MUVBM0YxMDAeFw0yNjA2MTMxNTU5MDZaFw0yNjA2MTQxODM3MDZaMDMxMTAvBgNV
BAMTKENGNEFGREVEREY3RUZGNkM0ODczNjkyNDM1OTk0NDMwQUExRENDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCASUxGiPaTBFAkEGW4spPDuZQ9
KPDICeJNvbqaGa83iKYMTSlG1fRIbxCJLn1m0sHOL2Nnai2P3Gb4dYFd6vjpdlSp
EaQrSqxp/XBpArLD0YIVZBesAU5oKsTiaQ2s882JheiwaYZ+6Gcp4kPQDu/I34/A
Ad3Ofa0RrCBfdDgKSR/CVbq7y15ykHNsFlYMFyPxEqNhmHbEfKOCI7yr6Go/XUUg
Yqm0SnUH9iOIBUvaIfLbVkBrbJzeh4jeQsqH1X1QRWijxGxPtm2umMHtNc7OmDXQ
aSSHva/rHn04/Pz723ApmLsDQfQpVQkZG5EY/nlXRv1V3t2/D/lwB2+QtqJJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz0r97d9+/2xIc2kkNZlEMKodzFMwHwYDVR0j
BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC
OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz
RjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3
MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlG
MURDMUVBM0YxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMU1GRECJTl6cEVe3XB4gUogz/T7XoXSQ0Ep
Cu8MTxXU6qG4j902X06Fe6RRlyBAGMyb7lAzUHTCXrVCUZb4pARq6JH1GVSgO1Um
q2i9l9dOQb4jsFrUBtMhgLEVuJg3g6jGBj2Dtr/eGpJja6i/ntbVwvXlr1B6+aOt
XO+X0XmQXGxFkruZqiORCHNNgb7XaF+8x810phyjVvRKMdryBHpCMjIVXkxl9cyI
HIbhzOZ/o/vlfoJ/ul7i/7iZOY4bo2zl5AsTRsQI/ciBvwmB5XA7mJFG95j3PSwY
Z+Cv4wdbse75X266Mnb25r6DyEgx6xN0kpSgufML2Pva+au4Gxg=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:56 2026 by rpki-client