
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json)
Hash identifier: TxU8jDmmCzQebTi7ptcr0XFWnAA9lrGS6GFmtBMCNgM=
Subject key identifier: 57:0A:9C:0B:7A:E5:50:71:B4:1B:24:AD:A0:AE:67:33:E4:03:F7:E4
Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Certificate serial: 4FF1577A59EDDEFCC30D659F75AEAEAFDD6A112F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 23:10:23 +0000
Manifest this update: Tue 28 Jul 2026 23:05:23 +0000
Manifest next update: Thu 30 Jul 2026 00:43:23 +0000
Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=)
2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: EbpGnSmYm6MKqvHfpBwWQvbAN5c2qkaKka0E1GdsGDI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f1:57:7a:59:ed:de:fc:c3:0d:65:9f:75:ae:ae:af:dd:6a:11:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Validity
Not Before: Jul 28 23:05:23 2026 GMT
Not After : Jul 30 00:43:23 2026 GMT
Subject: CN=570A9C0B7AE55071B41B24ADA0AE6733E403F7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:30:03:bf:bb:5d:99:e4:bb:1e:be:c6:d5:
8b:46:2e:d6:19:3e:ab:c9:2e:b6:fb:10:9f:5c:9c:
35:b2:72:ed:fd:f4:6e:2e:f7:b4:94:01:6f:01:89:
13:82:74:27:8b:fe:33:a1:14:00:68:71:cd:27:9d:
57:84:e3:63:f5:39:dc:a6:a8:dc:70:a2:fc:28:d5:
40:07:64:74:f0:9f:76:8b:8b:fa:7a:59:70:6d:76:
29:55:3d:4a:65:df:e5:6d:4c:1c:8c:aa:df:37:78:
05:f1:a1:4f:f6:31:69:55:7b:c5:62:6f:09:cf:58:
06:8a:d8:f2:f5:ce:04:0f:05:d1:58:8e:32:6f:9a:
b3:ef:15:9c:1c:67:20:cf:2d:0b:e6:1d:14:5a:a1:
9b:eb:bc:52:02:e8:f3:d1:40:5c:aa:b2:7a:a9:6a:
2b:62:0a:ac:03:30:c4:f3:4c:87:a3:02:1b:fe:ca:
0f:9c:f0:64:37:e4:3c:80:dc:05:a9:d5:3d:2d:20:
b3:a9:79:87:a3:ed:f3:88:37:e6:7b:db:3d:19:15:
35:27:1c:00:35:46:01:cf:f4:3f:93:12:0e:25:76:
1d:e6:5c:fb:87:64:a9:5f:fb:3f:49:5c:33:43:29:
f7:9e:dc:ec:25:51:2d:76:9d:b8:be:48:e7:93:5d:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:9C:0B:7A:E5:50:71:B4:1B:24:AD:A0:AE:67:33:E4:03:F7:E4
X509v3 Authority Key Identifier:
keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:03:67:56:3e:d7:27:c7:84:ef:fa:54:5b:2e:49:65:5c:
6d:08:48:82:f6:38:cb:34:60:1a:e5:61:0c:f5:83:47:19:2b:
a6:7d:2a:ec:33:52:7c:2a:64:1c:cc:6a:cc:cd:74:fe:bd:ad:
00:b8:be:f8:e9:a1:a4:c1:92:39:80:6e:bb:6a:df:3d:01:90:
1c:14:a2:a8:ef:10:ee:a5:8b:5d:e7:c9:23:f7:f5:5f:23:b0:
9f:a1:c7:13:9c:f6:6e:4f:c1:06:b1:f2:a2:3e:19:6e:7a:a6:
d5:9b:be:7a:89:89:ab:50:8d:9b:83:d6:f8:ab:f9:ec:ce:e6:
5e:a6:f7:1a:eb:88:81:cb:66:cd:ea:3c:bf:ea:14:a8:54:7d:
df:d9:14:de:32:0d:bc:6c:22:3d:5f:ce:39:c7:1c:26:ed:c4:
b3:b6:98:ed:4f:60:2d:f9:2f:d2:7d:58:ca:66:95:6f:ff:e0:
d1:40:ff:6f:a5:0d:6d:6d:4a:95:1f:10:d9:f9:46:50:fe:9c:
67:50:7f:07:7d:03:04:82:43:62:bb:e6:24:b4:71:16:b7:a1:
42:87:68:b7:42:20:1f:ab:9c:5a:4b:1a:de:d6:26:92:f5:72:
f6:cd:62:35:c3:1c:35:3f:96:af:6a:2f:cc:88:a2:af:c0:cf:
4a:71:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:29 2026 by rpki-client