
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
File: 5675AA245CEF919DAFAE165474D97FEABD97EF27.mft (raw, json)
Hash identifier: cmlL4k3Ne3hV50kTMOE5w+/P4J77lY/n9Wphla+CZH8=
Subject key identifier: 2C:94:92:E1:4F:27:5E:72:13:88:4F:1E:CA:3A:2F:E6:E2:C6:B9:DD
Authority key identifier: 56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27
Certificate issuer: /CN=5675AA245CEF919DAFAE165474D97FEABD97EF27
Certificate serial: 6C93F014BC0C28C9C673FABF2B875B98493E2E8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:50:39 +0000
Manifest this update: Tue 16 Jun 2026 21:45:39 +0000
Manifest next update: Thu 18 Jun 2026 01:32:39 +0000
Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: HxzvTIopg+934/St0RtxMZkBEPYX29d8UkuRMlyo12U=)
2: 5675AA245CEF919DAFAE165474D97FEABD97EF27.crl (hash: 2nkBPCSvVgKusKde8pqwcL6QTmhSlKhwI9RIpNsni7c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl
rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:93:f0:14:bc:0c:28:c9:c6:73:fa:bf:2b:87:5b:98:49:3e:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5675AA245CEF919DAFAE165474D97FEABD97EF27
Validity
Not Before: Jun 16 21:45:39 2026 GMT
Not After : Jun 18 01:32:39 2026 GMT
Subject: CN=2C9492E14F275E7213884F1ECA3A2FE6E2C6B9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:ab:ae:32:1b:bf:a9:63:f7:de:40:f7:2c:
82:3f:27:99:ac:ab:0c:a2:34:ec:29:a3:af:b4:f8:
8d:62:ba:18:ca:8f:a6:61:13:a9:d4:47:f6:b0:78:
fa:ff:3e:a2:59:99:f6:f3:d3:52:27:e5:5d:ac:7e:
46:04:ff:9f:20:8e:46:e3:24:86:83:e5:aa:fc:ee:
5e:73:91:3e:2e:0a:10:10:f3:18:2d:e6:14:f7:af:
fc:90:20:f8:9f:12:6b:63:0d:83:11:34:47:a6:12:
ab:6b:cc:a5:e5:72:d9:5f:7d:5b:80:b0:56:84:ff:
44:0f:a0:c4:b4:0d:4c:f5:b5:82:18:69:cd:d2:f3:
61:51:6d:ff:a5:99:bf:d7:8a:cb:95:8c:29:68:07:
62:ff:61:5d:6d:bb:ed:91:1c:06:b8:33:c1:16:d5:
59:0a:01:61:51:d5:15:86:86:28:05:28:9d:20:0c:
e6:dc:09:13:a7:59:da:9d:58:5b:f9:86:44:29:90:
fc:8d:52:62:bf:12:b9:a4:ab:cf:1e:6b:26:90:30:
60:65:d6:74:19:87:ef:fb:f1:a6:ee:08:fd:78:57:
6c:4d:93:93:27:f8:c4:12:85:28:85:5d:17:dc:30:
8d:82:ec:ac:b8:06:8b:4d:26:48:e7:fe:9b:3a:5f:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:94:92:E1:4F:27:5E:72:13:88:4F:1E:CA:3A:2F:E6:E2:C6:B9:DD
X509v3 Authority Key Identifier:
keyid:56:75:AA:24:5C:EF:91:9D:AF:AE:16:54:74:D9:7F:EA:BD:97:EF:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5675AA245CEF919DAFAE165474D97FEABD97EF27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/5675AA245CEF919DAFAE165474D97FEABD97EF27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:b6:5d:e7:15:ab:f3:2e:f4:ba:49:48:31:59:54:06:0b:
f5:75:b2:dc:73:0f:29:93:5e:c4:f4:ef:fe:47:d7:2e:2c:34:
c0:50:b2:5d:d4:ca:d1:04:ce:16:2d:bf:07:87:31:9f:9e:1b:
ea:c4:a9:50:39:92:d9:7a:2c:8a:87:8b:7b:99:a0:83:27:99:
9e:89:99:57:6d:6d:78:d2:ba:64:57:23:bc:94:b1:c9:05:6b:
be:65:96:48:0f:3a:86:18:65:21:ef:6c:67:28:ba:1e:c7:33:
e8:2d:94:df:8c:4b:8a:2b:78:34:66:cf:f0:90:f7:16:18:47:
13:a6:a4:65:9e:14:9f:e9:67:02:51:a0:9c:ff:88:b9:13:d5:
01:21:1d:80:af:4a:17:42:a7:99:e4:80:e0:0c:6e:67:dc:6a:
f3:5b:70:b9:88:0e:1a:ea:65:ef:46:65:ef:9a:9b:b0:cd:98:
7c:55:f3:f0:01:73:c2:7d:26:41:7f:01:d0:60:53:fd:8a:46:
48:c6:c0:0d:bb:9f:99:e3:fe:c6:a5:70:bd:7c:95:37:09:31:
e6:0f:69:46:23:ad:17:e9:c6:b1:24:e0:43:23:fd:7e:7a:9a:
4c:1a:28:b0:84:80:f0:55:a5:6d:0c:59:6e:57:e8:c7:dc:5d:
b5:98:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:07 2026 by rpki-client