
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft
File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json)
Hash identifier: w+J+73RrholDw/9CE1guGTA6kYGkOic+BivT9l4J6ng=
Subject key identifier: AA:86:4C:8F:43:F0:13:7A:67:C0:9F:34:65:E8:EB:7C:A9:39:CC:86
Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04
Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204
Certificate serial: 7630C6FAD92670D56C35ADDAA18C32BDA1BDB7AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 01:26:04 +0000
Manifest this update: Sat 13 Jun 2026 01:21:04 +0000
Manifest next update: Sun 14 Jun 2026 03:29:04 +0000
Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=)
2: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: PTnWyQkA4oY7OkiQQDJkIDDu4T+6x5Sre3GOmYV2xoM=)
3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl
rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:30:c6:fa:d9:26:70:d5:6c:35:ad:da:a1:8c:32:bd:a1:bd:b7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204
Validity
Not Before: Jun 13 01:21:04 2026 GMT
Not After : Jun 14 03:29:04 2026 GMT
Subject: CN=AA864C8F43F0137A67C09F3465E8EB7CA939CC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:c3:7a:3e:d2:70:89:f4:a6:ca:91:1c:e9:
9b:e7:31:b6:8f:5d:e6:98:95:c7:1c:8e:55:08:99:
a9:f0:aa:40:4a:77:3d:03:c6:b8:c4:34:07:cd:75:
e5:0f:ba:b0:4b:ae:ee:85:c2:62:e3:e6:fd:5b:ba:
aa:d0:d4:2a:d6:26:ce:8a:83:29:90:0f:4a:58:b3:
22:7d:f3:e1:7e:64:11:b9:cf:8f:ad:0e:0e:1e:72:
cc:af:2a:9e:e2:ff:88:a8:fe:87:91:f1:42:f1:5a:
ce:eb:f3:3b:cd:34:71:c2:62:25:ce:99:fc:9c:f2:
68:33:e5:0f:1f:6c:ce:5b:b9:6b:fb:20:29:fa:5d:
05:86:28:72:1d:f9:98:d4:8f:df:5d:96:72:a9:70:
b1:40:f2:5d:9f:11:a4:f4:ce:ed:73:bb:fb:69:2b:
50:38:6a:e9:5b:de:fb:6d:e6:fd:b2:ee:fe:c3:bd:
33:4d:33:4c:50:c2:cc:8f:97:c6:fa:5f:d6:ea:f7:
cc:ab:b7:a9:c6:ab:9b:5e:1f:d5:7a:cd:70:14:5f:
af:2b:f0:38:23:2e:de:ee:a4:9f:5b:cf:af:48:15:
11:d7:60:e6:60:de:a2:1a:13:54:ea:63:2e:1a:87:
ce:22:6b:bb:ed:86:e2:f4:0a:ec:76:88:5e:93:6d:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:4C:8F:43:F0:13:7A:67:C0:9F:34:65:E8:EB:7C:A9:39:CC:86
X509v3 Authority Key Identifier:
keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:57:0e:97:c8:5e:39:3a:52:e2:05:0d:ce:88:72:f9:cd:
94:e0:dd:15:8e:78:7c:7d:0c:9e:88:df:41:a6:9b:0e:90:92:
ac:60:95:a9:82:a3:f9:48:d1:4c:e2:ea:f1:7f:2a:23:aa:99:
6d:0a:7a:fa:c3:85:56:85:95:f9:f9:9b:f4:b4:37:b8:a7:09:
7a:a5:6b:ad:26:a6:3c:e8:32:09:06:9e:d3:93:0d:5e:3b:dc:
e2:e8:c7:72:67:78:f5:22:c8:53:44:b1:07:d7:9a:2c:86:1b:
4c:07:57:7a:a4:e6:b0:2e:5a:2c:6a:98:5b:78:4b:d1:f5:f5:
6a:66:7c:38:b5:c5:01:16:60:99:79:fc:22:10:92:37:82:cd:
4b:5c:50:79:d5:01:95:17:56:68:83:15:dd:d2:2e:6f:58:e9:
7a:ca:7a:4e:04:f8:b6:08:f0:bf:1d:46:33:39:95:8c:c6:b7:
b2:b8:9c:5c:b1:d7:d9:79:46:1e:67:79:47:37:fc:a7:ce:e4:
a5:46:c7:91:f3:19:ff:bc:ca:70:b9:e1:e9:4e:95:c9:73:a5:
9a:75:41:f4:f4:f4:03:ec:8e:d5:0f:6d:f3:08:bc:8f:a1:85:
cd:9c:fd:45:68:98:6a:d2:25:f9:a3:28:df:8a:73:ab:92:32:
b6:ab:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:15 2026 by rpki-client