
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json)
Hash identifier: zaBqmC9obf83V3OXjuZQEOF5/a0KXF+f3PxDUf/rR+Q=
Subject key identifier: B9:4C:C5:94:38:86:1F:23:B3:64:C5:15:9D:DE:9D:ED:66:C2:91:8F
Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Certificate serial: 694A7D224296ABA60BFBC000C390DCB640CACB08
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 01:21:46 +0000
Manifest this update: Sat 26 Sep 2026 01:16:46 +0000
Manifest next update: Sun 27 Sep 2026 03:02:46 +0000
Files and hashes: 1: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=)
2: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=)
3: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=)
4: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=)
5: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: 0/lS+tob9W4XjWpj/Hi+7y3ef47mZ0liZq8S7KrMkzo=)
6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=)
7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4a:7d:22:42:96:ab:a6:0b:fb:c0:00:c3:90:dc:b6:40:ca:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Validity
Not Before: Sep 26 01:16:46 2026 GMT
Not After : Sep 27 03:02:46 2026 GMT
Subject: CN=B94CC59438861F23B364C5159DDE9DED66C2918F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:f6:61:e9:7e:06:ac:54:f7:89:03:eb:3b:
52:a7:e4:a5:37:6d:fe:a9:9a:2a:56:68:20:73:b6:
c0:9d:97:dc:97:c7:d1:1c:96:57:6d:fa:9d:80:39:
a3:73:5c:2c:e6:c8:ff:6e:5d:3e:21:67:2c:82:f2:
40:03:2a:d6:0f:da:95:0f:f4:b8:36:4b:de:32:80:
ac:ca:4c:47:2f:83:4a:f1:d1:1b:d4:f9:7f:cd:d9:
eb:ca:cf:45:66:b8:46:07:bf:a6:72:93:53:d4:23:
ca:f2:2e:37:b7:d0:f4:10:6f:76:90:e5:f7:83:3a:
c3:72:4e:71:fd:23:41:4b:db:22:6f:68:1e:2d:51:
41:ce:c4:11:80:90:ee:d8:52:83:ba:67:06:4f:9c:
48:c9:cb:93:fe:f2:8d:22:2a:b7:2e:cf:a2:72:b3:
3b:29:b8:9c:95:a2:e2:c7:f0:02:1d:bd:05:0c:47:
8d:d4:37:fe:18:33:6b:cf:1b:b2:d5:79:6c:ac:82:
ce:f4:71:ae:d1:78:54:da:4d:27:33:d0:0c:93:a7:
07:f3:0c:b9:10:9f:c1:04:0e:e3:31:32:c3:4e:35:
ff:01:3c:51:83:ca:ae:08:8d:cc:ab:96:21:81:97:
dc:8f:8e:60:2e:c3:6b:ca:13:0c:59:b0:90:0c:c3:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4C:C5:94:38:86:1F:23:B3:64:C5:15:9D:DE:9D:ED:66:C2:91:8F
X509v3 Authority Key Identifier:
keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e2:70:8c:c7:9c:c0:1a:59:64:66:61:8f:d7:01:91:c4:c4:
a8:5e:3d:da:59:5b:e1:c9:55:61:7d:cd:66:59:ed:a8:c9:c3:
ff:d1:fa:bc:4f:2e:7f:ae:73:d7:f2:4b:37:b0:83:b5:52:df:
71:6a:e4:30:db:5a:1e:56:20:72:b6:65:4e:d3:ec:21:2d:ce:
80:10:16:f6:0b:ca:73:65:79:15:5f:75:ed:85:59:9b:80:6e:
35:a6:93:a8:87:64:a7:9a:5f:ef:eb:6b:af:9c:12:de:f9:c7:
95:0a:bb:d3:7f:37:27:87:80:18:7f:ce:0f:b4:99:ae:4d:89:
1c:96:bf:f1:87:f9:3b:c8:c6:7d:2d:15:9e:41:95:cb:aa:2b:
28:cb:d5:e5:38:d3:27:97:14:49:32:16:f8:dc:68:2d:fd:06:
41:56:18:b2:4e:bb:dd:6b:24:65:68:99:55:e0:58:80:61:7b:
76:27:66:8d:99:c9:73:02:1f:9e:36:2d:51:2b:ce:83:eb:52:
73:db:d1:ab:67:b0:eb:07:75:51:92:21:34:0c:d6:5a:01:87:
33:72:2e:72:89:8d:27:c2:13:33:d6:38:3e:a6:28:6c:05:3a:
97:ab:77:95:cf:e3:16:b2:ea:7d:db:e8:32:97:83:e8:66:84:
2f:c1:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:57:30 2026 by rpki-client