
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
File: 5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft (raw, json)
Hash identifier: AhAtZK5YIwZDq63pUvJe3GgKX1c+28m/uWrhb9MoZ+w=
Subject key identifier: 82:3C:29:CF:52:9F:53:C4:1F:FD:B6:EA:D2:1C:20:8A:D3:39:C1:AC
Authority key identifier: 5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81
Certificate issuer: /CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081
Certificate serial: 09E21BC21A17F280D989A555ED0827AE49068D97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 04:52:41 +0000
Manifest this update: Mon 21 Sep 2026 04:47:41 +0000
Manifest next update: Tue 22 Sep 2026 06:05:41 +0000
Files and hashes: 1: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: 2uGt6NoP0ZyAzJoUujZvq+iw79GkfDtAJpmnwcRnGwY=)
2: 5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl (hash: qO7lYB4f6swGv6XoHHNaEtDcP5QcN44Qtj0HoKdYYbI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl
rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e2:1b:c2:1a:17:f2:80:d9:89:a5:55:ed:08:27:ae:49:06:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081
Validity
Not Before: Sep 21 04:47:41 2026 GMT
Not After : Sep 22 06:05:41 2026 GMT
Subject: CN=823C29CF529F53C41FFDB6EAD21C208AD339C1AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:ef:3e:bd:7b:a9:30:1e:a8:ff:0a:13:04:
5b:0a:a2:d3:da:91:f3:b5:f0:19:31:5e:a1:42:ff:
65:34:88:32:52:40:38:0e:e7:4e:0b:e4:dd:62:33:
c1:41:4c:fe:2a:58:da:1c:17:85:c5:c7:01:c3:41:
8d:4b:94:20:df:66:f5:00:df:39:c5:e3:1f:dc:ea:
45:a2:16:51:95:e1:f8:be:bf:42:9b:be:7a:d0:0a:
8c:64:1a:a0:98:e6:66:f3:7a:f2:e0:68:ce:24:02:
89:45:ab:18:0f:1c:f2:76:04:e5:34:e9:db:3b:63:
5b:cb:a1:dc:cd:79:9c:08:be:9b:46:e1:18:64:2f:
e6:66:76:52:ef:c4:b6:9d:e6:a7:68:34:09:a7:b5:
35:9d:6d:7c:8a:45:80:a9:e2:6f:21:e6:cb:98:d6:
41:70:fa:7e:d4:83:bc:b0:64:79:af:3a:79:93:44:
b3:79:ca:ee:bc:0c:76:68:7b:70:54:d6:fd:06:b9:
1c:3f:90:00:56:56:8d:d4:a4:21:9f:a2:55:ba:03:
a8:05:88:28:f5:f5:e8:fe:e2:c5:14:16:d8:f6:dc:
6e:0b:68:32:a2:13:0a:e8:86:17:0a:ba:4f:40:72:
71:f5:5f:b1:81:a6:14:e9:39:0f:40:b4:03:75:9a:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:29:CF:52:9F:53:C4:1F:FD:B6:EA:D2:1C:20:8A:D3:39:C1:AC
X509v3 Authority Key Identifier:
keyid:5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:68:89:7b:da:6e:35:75:e8:46:50:5f:51:2a:d6:2a:4c:bc:
30:50:ca:76:66:e5:88:00:db:6f:b0:72:5b:70:2f:30:3b:ef:
53:1b:15:86:59:c3:5b:cb:11:33:34:e0:75:5c:7c:a3:1c:23:
9d:49:91:31:8b:2f:be:fc:bb:81:e7:a6:72:cb:3e:69:b6:ac:
9e:5d:b0:c2:72:a0:bc:9f:55:0e:79:43:7b:aa:b3:3f:89:61:
51:e0:24:ca:56:62:1e:9b:24:5e:c0:b0:b8:0b:5c:e1:e6:fd:
54:f5:06:15:a9:58:08:76:e6:31:7e:12:79:83:51:19:4d:21:
e5:f9:ea:c1:29:56:40:72:c4:e2:5d:20:9f:66:58:dd:83:2e:
02:cc:36:77:65:0b:c5:70:a9:06:31:06:30:a8:4c:98:24:a9:
59:32:ff:a7:64:de:ad:50:46:05:c5:e7:5c:82:3a:a1:90:9f:
80:e6:34:f1:b3:13:49:1e:60:c0:49:2c:fe:ef:97:d1:b6:76:
67:53:b2:c6:81:9a:6d:83:c4:39:9e:7a:68:0e:bc:dc:9c:89:
42:2b:75:4c:03:52:f5:af:cb:b1:97:fb:45:54:a3:09:83:32:
57:93:88:ac:b8:e8:b6:1f:9e:e0:9a:b2:49:9c:49:e3:49:3b:
08:91:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:36:13 2026 by rpki-client