
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
File: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft (raw, json)
Hash identifier: +XoaDGj3IALOB12rwDx4bGWq+Q0ls8QTEWuKJhXagh4=
Subject key identifier: 0D:63:99:0A:93:12:79:D4:3F:7F:D1:8D:55:16:22:05:74:B9:AB:4B
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial: 16170D09E98E873B316D36DB1D47BA0B8C0A2177
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 12:31:53 +0000
Manifest this update: Tue 22 Sep 2026 12:26:53 +0000
Manifest next update: Wed 23 Sep 2026 12:50:53 +0000
Files and hashes: 1: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: T2qYaU04VQzWeYCnQwxqbKhnW+Yc8luFZj24cheJV1Y=)
2: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 0ARU4umpFLyMta2vB6qYPPj5Ig4hYBGPCu9MzyUF/8A=)
3: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl (hash: GyslxW45tK1HRvER9pWpc6jA+beVaMxgzwSZqHMqHjo=)
4: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: dxfdhNXh202P44oHhJYRmZOKu5Lqt6H/PJxnBPCKWdo=)
5: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: djEgtSTkE/m5IayWnkoTKB0EhOrsppytUQzWTVEnG/A=)
6: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: k71wAWLK9lWSB9of2XNi/2f+HUpw7qh91wC52CYzZ9I=)
7: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: hSK8N/vC2/9gXsGi7sFYityEE3YHIpxX/5Nfow0h5pI=)
8: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: /gmLM+AlvVZmZ1aC4xTqncyP3CJDlsdR9nXHmByTkCU=)
9: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: zhBd5a5gGTbtet5YBbXE5S+qo1B6mGLmWLRBGJ6q7+o=)
10: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0qSPCAZrOfi5Y9XILy5crgt/ktdpcPhlsL8t7vKQnzI=)
11: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: mjGJxH6ziPyBnTtwEJk9cCU5dFx1hVDJJz3eyJDrtfU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 12:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:17:0d:09:e9:8e:87:3b:31:6d:36:db:1d:47:ba:0b:8c:0a:21:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Validity
Not Before: Sep 22 12:26:53 2026 GMT
Not After : Sep 23 12:50:53 2026 GMT
Subject: CN=0D63990A931279D43F7FD18D5516220574B9AB4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:ea:f2:fb:a2:17:6c:29:e9:d5:5c:d7:ab:
93:fc:96:93:b6:ab:b0:2c:e8:40:0f:6d:ad:af:b2:
6e:dc:7c:41:85:6c:e2:90:c6:94:c1:db:86:93:86:
29:4e:af:da:ec:88:b7:d4:8c:79:a5:33:e5:e8:59:
62:4a:68:a5:9c:af:5d:3e:5d:5d:72:d6:58:72:d4:
e3:df:42:f9:47:3b:e1:d2:f0:bb:df:5a:2d:84:a8:
17:73:ee:ee:9d:75:33:01:97:91:4e:c5:2e:fa:6f:
c9:99:22:63:6a:65:7b:4a:f8:39:c9:ca:b8:df:b3:
0b:a3:d9:ce:a5:ad:90:21:9c:11:86:34:a0:35:5b:
0a:b5:b0:9a:1a:fc:45:ed:84:6c:70:a8:24:53:2e:
10:b3:11:f2:9c:82:4c:46:59:f9:9f:24:c0:f0:ad:
46:81:b1:49:30:94:8c:4b:2a:ae:9b:87:14:12:e7:
c4:f4:07:f6:57:3e:a1:9c:4f:c0:7b:f5:32:04:4c:
0d:e0:4b:e5:c6:9d:b2:e4:9a:c0:0b:0e:78:20:81:
1e:27:b9:e1:ca:e9:07:b1:0a:eb:22:5a:36:ee:8c:
8d:24:4e:99:fe:b4:d3:5e:4c:a6:d5:61:86:bc:ad:
2e:b1:10:95:bf:51:6e:16:4b:d2:ed:93:61:e8:e0:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:99:0A:93:12:79:D4:3F:7F:D1:8D:55:16:22:05:74:B9:AB:4B
X509v3 Authority Key Identifier:
keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:7a:38:67:cc:ae:54:1e:78:9c:50:9f:7b:4f:b4:91:ef:
5f:b6:b2:51:37:ef:78:7d:65:38:23:a9:7e:70:0e:17:9d:3a:
f4:c6:57:11:b9:4d:27:45:1d:20:ba:07:04:1f:f4:69:49:41:
df:c8:da:b3:26:bb:de:43:a9:8f:aa:3f:78:22:e7:37:d4:f3:
d9:7c:16:be:49:46:ee:97:75:fe:70:72:75:97:45:95:0d:32:
22:07:91:58:97:65:cf:35:9c:4c:4d:75:87:50:74:b1:d6:3a:
57:85:e6:cc:a7:bc:33:8d:53:c4:e2:fe:41:f1:2f:aa:e9:e3:
0b:15:dc:96:c3:b0:d4:55:c5:57:b5:16:57:13:cc:55:fb:d5:
c4:2a:7c:30:6d:ae:19:65:b5:a8:10:78:41:0e:42:87:84:40:
cb:93:05:29:bc:27:b5:81:14:aa:3f:06:46:eb:9a:37:49:f3:
89:bf:76:3d:61:ab:45:88:70:1a:4e:11:8d:9f:f2:70:a2:ef:
36:5a:71:a4:39:1f:bb:8d:18:d6:18:92:9f:8b:4f:31:08:cc:
90:81:51:1c:34:05:ad:ae:83:4f:5a:5f:1a:95:fd:f5:bf:9d:
25:cc:d4:02:35:a0:36:e7:27:bb:bf:96:a1:7e:da:33:36:47:
d9:47:64:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:11:29 2026 by rpki-client