
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json)
Hash identifier: uPMeuyt3cM6zUgFWb6QEkigR34EkPww4c1o/68KqEkw=
Subject key identifier: FF:11:B7:F2:28:E6:A0:F4:43:74:B5:64:89:75:7F:BD:1A:32:28:02
Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Certificate serial: 49078BE322CA7E86B149D355245B238ED079197A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:33:24 +0000
Manifest this update: Sat 13 Jun 2026 03:28:24 +0000
Manifest next update: Sun 14 Jun 2026 03:49:24 +0000
Files and hashes: 1: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: bFPoQL0PUzFOnZ523nAPS+ZR8GaOdtuoHKXXiS09kyE=)
2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 03:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:07:8b:e3:22:ca:7e:86:b1:49:d3:55:24:5b:23:8e:d0:79:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Validity
Not Before: Jun 13 03:28:24 2026 GMT
Not After : Jun 14 03:49:24 2026 GMT
Subject: CN=FF11B7F228E6A0F44374B56489757FBD1A322802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:71:2c:02:c2:f1:0c:13:e7:24:47:4c:68:
8e:7b:66:86:9f:68:ed:3e:c1:f4:0c:c1:ca:7b:b1:
61:93:36:75:a9:b4:c1:b6:40:b7:30:0b:5b:7b:a5:
8e:c8:89:e5:32:81:06:92:38:ca:d3:31:9a:f7:c1:
ab:25:cc:60:88:1d:76:49:2a:34:da:f8:d8:eb:71:
0f:2c:1b:24:9a:21:8b:7a:ec:4e:0d:50:ff:bf:ba:
0f:e2:87:ec:e3:e6:20:cc:aa:38:04:0f:24:78:80:
b0:b0:04:52:95:ba:6c:9b:3c:65:b1:a1:57:c6:ad:
5a:32:55:ec:47:f1:1b:3f:95:d0:17:77:b1:9f:8a:
35:2a:6a:54:09:b6:cd:78:a3:74:43:d3:8b:b2:26:
1f:aa:7c:e5:f7:5d:92:53:b0:78:e1:34:1a:1c:5c:
2d:06:d4:0d:3d:02:50:39:e6:86:7e:cd:54:f4:97:
b6:e1:0c:10:c2:5e:61:fa:4a:f6:78:1d:05:cc:b5:
81:d2:e9:b0:15:15:c3:92:7e:80:b1:5e:1d:03:a9:
13:de:7a:3d:62:cb:e3:66:d4:f9:84:f9:ea:e4:6b:
05:fc:09:a3:d6:2d:42:e3:b4:b0:f3:ee:c9:6f:72:
cc:8a:78:8b:09:77:5d:8f:d6:c1:5b:8b:c2:46:50:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:B7:F2:28:E6:A0:F4:43:74:B5:64:89:75:7F:BD:1A:32:28:02
X509v3 Authority Key Identifier:
keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:72:bd:ed:61:a7:2b:2d:ba:7e:b1:cd:c7:be:09:e1:61:11:
84:36:01:e1:e1:21:9b:37:bc:58:11:c3:f7:eb:1b:7f:8f:bc:
79:04:81:df:19:19:3e:a9:0a:1e:6d:01:1a:e2:72:85:bb:75:
d3:36:62:87:93:b5:a9:4c:16:8a:83:b8:dc:3e:95:b8:f8:76:
12:68:56:cf:a0:0d:24:fe:73:1d:fa:d4:a8:79:0c:06:a7:d4:
f1:c7:ae:2f:18:94:af:e6:62:81:f9:bc:ff:c8:6a:35:d4:96:
22:d1:53:97:c3:01:2c:68:b1:a5:0b:ac:92:80:52:af:2a:cc:
dc:58:9c:42:2c:fa:dd:b4:fc:64:1e:a9:a5:d4:45:25:22:70:
09:f3:b4:ea:f7:02:8d:8a:c0:ac:61:83:6c:c1:4f:a5:ac:60:
1b:08:82:ab:59:60:f3:41:c6:1f:a9:88:b0:7b:1c:1e:30:96:
72:11:9e:8d:50:4f:f5:db:3b:43:e3:26:62:b5:c2:f0:52:89:
0c:e5:54:3e:28:c4:bc:73:ae:54:b8:5e:30:23:6b:c1:6e:d2:
8d:a9:09:7e:e1:30:72:61:21:3b:b0:94:2b:24:04:49:20:db:
4f:24:b2:3f:7f:be:d6:53:92:98:b2:fb:43:99:ce:52:d9:56:
94:ba:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:44 2026 by rpki-client