
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json)
Hash identifier: mu5ubKcXRCrAri5EhwWaDRYKtSvC7VQ6Io353EslBAM=
Subject key identifier: DA:AF:7B:A6:D6:22:92:5F:9E:45:EE:E7:F9:2B:4A:A8:05:2E:83:19
Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1
Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
Certificate serial: 78E1147C93FC0DA73DB571F08F89872AAD6EA667
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
Manifest number: D5
Signing time: Thu 08 Oct 2026 17:03:26 +0000
Manifest this update: Thu 08 Oct 2026 16:58:26 +0000
Manifest next update: Fri 09 Oct 2026 20:19:26 +0000
Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=)
2: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: OgO4uBZYBfYrbmYT5bJxjIr07r/kdmKAqWZzpYSEyJA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl
rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 11:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e1:14:7c:93:fc:0d:a7:3d:b5:71:f0:8f:89:87:2a:ad:6e:a6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
Validity
Not Before: Oct 8 16:58:26 2026 GMT
Not After : Oct 9 20:19:26 2026 GMT
Subject: CN=DAAF7BA6D622925F9E45EEE7F92B4AA8052E8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:c6:ce:21:93:1c:31:b0:d1:36:df:88:16:
49:b3:e5:8f:68:7a:55:2e:a9:c2:42:52:45:ec:b2:
7a:77:8a:5e:1f:f5:2c:2e:45:27:bf:29:5a:06:6c:
7f:c7:ed:1c:07:18:19:45:58:41:91:b4:81:38:12:
35:9f:f7:d9:89:bb:74:29:13:19:ef:67:f4:c8:02:
34:05:91:6e:81:2b:46:56:52:f6:1e:72:c6:23:cb:
56:07:8c:74:25:4f:0e:a9:51:fe:45:d3:43:2e:93:
97:0a:11:ea:9c:68:7b:6f:81:c1:3f:a6:f4:6f:06:
c7:56:16:ab:46:1a:85:e4:93:89:c4:90:9d:76:4d:
de:86:4e:36:20:f1:34:06:6e:0c:42:9c:54:90:13:
fb:12:f8:c3:16:6e:e7:43:32:83:3c:be:f0:7c:a8:
23:26:51:91:a6:35:51:05:ce:33:2e:39:32:8c:45:
6c:1a:8b:95:fa:d8:eb:8e:be:0a:12:88:42:7a:31:
49:02:14:4e:27:39:a2:86:20:1e:0c:6f:9a:bc:c0:
e0:1e:95:3a:ce:30:22:fa:09:d1:71:45:2c:94:11:
49:e5:36:e7:d0:24:85:ac:72:77:22:48:35:fb:6f:
db:89:6e:8e:29:c9:75:4b:e2:62:41:db:07:a0:24:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:7B:A6:D6:22:92:5F:9E:45:EE:E7:F9:2B:4A:A8:05:2E:83:19
X509v3 Authority Key Identifier:
keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:83:fc:8a:fb:25:a6:76:1b:52:21:bf:a7:41:b1:37:43:de:
3d:20:7a:6f:31:37:f5:35:d8:88:fe:0a:2e:bd:25:7f:e2:51:
c0:bb:c4:38:da:79:67:df:26:ea:e7:a0:94:61:95:9f:5a:38:
2a:d4:62:22:d6:7a:40:a5:ec:cf:4a:b2:e7:7f:4c:10:1c:e6:
ea:c5:94:23:91:ff:b0:1c:17:7a:ac:7f:0b:68:26:ab:f3:7d:
e0:80:8b:88:51:fb:37:e3:ff:e0:90:31:84:d4:32:cb:41:13:
f3:74:40:fc:7d:cc:1a:36:c4:6d:dc:fb:5f:d6:a5:fc:dc:1e:
6d:9f:44:be:c4:93:83:69:7f:c5:d6:01:66:ac:27:66:2b:38:
f2:c8:1a:31:98:a0:62:0b:c4:b4:ec:8c:67:60:4e:33:c9:10:
e3:a6:80:71:37:3f:3d:d6:80:a8:6b:13:78:ea:5f:8a:50:27:
e0:46:82:49:6f:70:20:93:5f:90:54:51:fd:76:5f:55:3c:a1:
1f:68:d8:76:62:16:4c:cf:c6:39:1d:19:1a:ce:35:0d:1f:b0:
e0:16:8d:c2:e3:02:39:bf:e3:46:29:16:59:1c:50:ff:22:08:
4d:44:37:f5:cb:0c:30:ed:7a:b2:61:c1:53:96:58:75:ea:28:
a2:20:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:16:59 2026 by rpki-client