
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
File: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft (raw, json)
Hash identifier: f+KsO1IB1PKrbPvjQ+TTLR461MLBYlQOD7nfNgX//5k=
Subject key identifier: 4A:26:AD:5E:AF:B2:A7:F1:34:E2:28:FE:BE:07:AF:4A:26:07:4D:EA
Authority key identifier: 5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
Certificate issuer: /CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Certificate serial: 789BF08D1815909046146C8BE1B57F5E4272AAB1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
Manifest number: BF
Signing time: Sun 20 Sep 2026 21:43:52 +0000
Manifest this update: Sun 20 Sep 2026 21:38:52 +0000
Manifest next update: Tue 22 Sep 2026 01:26:52 +0000
Files and hashes: 1: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: 7Q8defqC6lAAWUb6PKdQi9tsdNCBLmxvHmRQL+VpZWA=)
2: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: t4Yhuqrb+KDLn24Gd9AYMz3qrfeMoa8b1zhrF5DjmB4=)
3: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl (hash: K5InVISnl37gZts7Do8F3f73R2Jxh5+uaDpgQX2Grqg=)
4: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: aimG/5iSSxrYFvvsJNL1+RlZjQ7m0YXtfPl/xnj5GxE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 01:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9b:f0:8d:18:15:90:90:46:14:6c:8b:e1:b5:7f:5e:42:72:aa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Validity
Not Before: Sep 20 21:38:52 2026 GMT
Not After : Sep 22 01:26:52 2026 GMT
Subject: CN=4A26AD5EAFB2A7F134E228FEBE07AF4A26074DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9d:f3:05:e8:fd:53:de:91:cb:2c:82:39:07:
00:92:e0:bf:fc:6c:b0:1a:c7:73:18:56:1a:1d:6f:
4c:31:2b:3e:03:50:91:7b:93:0f:60:c3:3e:fa:c8:
c1:0f:fb:38:2c:58:9d:9e:ca:22:bf:ac:67:5f:f5:
8d:36:12:c5:07:9b:d6:ab:f6:3e:52:42:ad:33:dc:
54:a4:0a:3e:26:be:67:3b:19:f1:9c:da:a9:bc:89:
fe:a7:6d:06:86:98:70:77:47:c3:b7:85:16:c3:9f:
4c:1c:fc:c3:f3:66:05:32:6e:f6:54:b4:04:a5:16:
ca:7e:e8:36:c6:4f:48:c3:d5:be:ea:95:9a:bb:4c:
f6:b4:48:16:07:eb:85:02:bc:a7:15:66:3e:73:6b:
94:26:76:e7:0c:af:f8:9d:b1:2a:fa:93:23:7f:e8:
bd:a3:07:a5:ed:1e:44:64:24:78:32:34:0e:75:ee:
cb:41:08:6c:b3:a7:de:33:21:5f:36:02:d2:0f:3a:
57:63:a7:a6:de:dd:1a:00:99:ec:f5:e6:80:dd:79:
b7:22:b7:d4:48:ef:4c:49:94:16:76:d8:96:d8:f3:
b5:f3:12:67:5b:9d:44:a0:c4:1d:b8:48:45:20:94:
06:1f:5a:27:3d:58:19:7b:77:dd:e4:8f:a0:b8:8d:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:AD:5E:AF:B2:A7:F1:34:E2:28:FE:BE:07:AF:4A:26:07:4D:EA
X509v3 Authority Key Identifier:
keyid:5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:d6:49:9b:04:26:63:b0:b1:4c:14:d6:0a:07:b5:6c:57:
b5:b9:49:93:5f:08:f6:fc:72:be:2f:7a:44:a4:9f:f2:60:f7:
6b:b5:52:6d:3b:e8:e9:dd:6f:bf:de:59:f5:3c:5d:ab:8e:2a:
c3:08:4b:60:eb:52:80:a0:8f:34:ed:6c:3f:ce:33:67:26:e1:
2f:36:23:49:40:43:ff:03:c6:51:b3:6f:ea:b4:0a:42:d9:c8:
cb:fd:de:9b:c3:fc:31:d3:fb:95:c6:af:99:4b:03:5a:71:3e:
5c:0c:98:57:22:52:71:e3:ac:62:7b:cd:6e:97:7b:86:9b:99:
4f:58:81:ef:2c:8d:05:de:75:af:5f:fb:29:58:f2:11:57:b2:
03:d3:47:97:e1:09:fa:bf:04:ba:38:cd:7e:e5:95:5d:56:22:
25:a5:ba:6b:56:f0:0b:cf:81:a4:49:b4:6e:58:23:6a:27:94:
da:64:26:5d:8d:30:16:cd:2f:c8:9e:74:ae:7e:d2:f3:d2:f8:
de:fe:a6:57:03:9e:af:1d:d3:24:97:fd:7e:0f:7f:c6:eb:be:
a9:e9:2f:dc:78:e0:79:a4:af:6a:e9:19:61:ff:59:9b:3a:0a:
04:19:e4:f4:50:cc:eb:7b:6c:4f:3a:68:05:ae:df:69:78:2a:
60:e6:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:06:43 2026 by rpki-client