
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft
File: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft (raw, json)
Hash identifier: wCeTdbqgzYcccYzH9lhrt9fnd4usKgh/IZlbB1oqUB0=
Subject key identifier: 77:D7:D0:22:E8:C0:82:4B:46:D3:7D:99:4F:C3:E5:1E:F9:BA:91:DF
Authority key identifier: 5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72
Certificate issuer: /CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572
Certificate serial: 14C85D92550E783A99B4FE5BA671C372111E5675
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:27:18 +0000
Manifest this update: Thu 23 Jul 2026 22:22:18 +0000
Manifest next update: Sat 25 Jul 2026 01:49:18 +0000
Files and hashes: 1: 5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl (hash: Qlv902CzApEnRMWdVnSUo/ZWaSXqUEv+QeY9oR+9naY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl
rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c8:5d:92:55:0e:78:3a:99:b4:fe:5b:a6:71:c3:72:11:1e:56:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E3128902FCA3BCE9C9FEBFB264D550AD6230572
Validity
Not Before: Jul 23 22:22:18 2026 GMT
Not After : Jul 25 01:49:18 2026 GMT
Subject: CN=77D7D022E8C0824B46D37D994FC3E51EF9BA91DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:f6:8c:8e:2e:b3:af:4b:96:fa:c1:d6:ee:
d9:25:c4:67:3d:9b:d6:17:db:c7:82:5b:a7:53:31:
1d:e6:bb:12:86:d7:43:6d:c9:44:ca:dc:cd:5e:2c:
74:c5:ab:b8:15:63:75:7c:2d:41:c9:b3:07:8a:f0:
fe:65:f9:6b:2f:a6:7f:b3:6f:a4:36:24:1f:ba:e2:
6f:b9:0a:00:c3:ae:fb:7a:ef:81:79:70:ce:4b:ee:
87:ee:a2:dc:5c:e1:7c:b5:01:fc:6a:16:76:a8:cd:
e4:fa:1a:0f:46:08:59:52:42:98:1d:8b:c3:da:bf:
dd:08:eb:89:d5:62:59:90:a3:a7:2d:d8:c6:f2:7b:
58:55:3b:bb:e7:eb:fd:f5:f9:e3:de:a7:53:f4:3c:
28:7f:fd:57:d3:ec:3d:cc:48:4d:02:5a:e7:17:46:
a8:06:a8:79:5a:22:7b:21:bf:e5:ee:c9:79:f3:94:
d7:de:d9:aa:34:7b:bd:d8:33:9e:e0:7c:83:b6:67:
8c:52:d3:59:d2:32:33:07:79:73:f6:7c:07:5c:5f:
35:ab:70:c2:45:64:c9:e5:c3:38:df:36:7c:99:e6:
11:a2:40:21:19:0b:e9:29:b7:ce:89:61:50:5a:2e:
0d:c9:c0:ba:1a:4e:fe:7c:51:12:a9:ec:bf:a6:e1:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:D0:22:E8:C0:82:4B:46:D3:7D:99:4F:C3:E5:1E:F9:BA:91:DF
X509v3 Authority Key Identifier:
keyid:5E:31:28:90:2F:CA:3B:CE:9C:9F:EB:FB:26:4D:55:0A:D6:23:05:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/5E3128902FCA3BCE9C9FEBFB264D550AD6230572.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:22:71:ab:a0:ef:c2:12:43:65:20:19:ac:72:e0:95:92:47:
cd:ae:ea:5a:47:f5:16:2b:42:52:a5:21:e5:7f:8a:93:8b:9e:
a2:dc:4d:96:f6:e4:f8:d2:77:be:bf:aa:ad:9a:d3:8c:d2:80:
bd:57:2d:f8:98:81:66:63:57:4a:8f:67:c2:de:a8:8d:80:e2:
85:51:c7:99:74:c8:f4:0b:36:a6:cf:a8:02:05:66:20:73:61:
b0:1d:4f:3d:37:08:63:40:31:2b:d2:0e:38:f7:bb:0e:8a:4c:
3c:f6:63:22:39:de:5e:9f:7f:a2:0c:59:21:e4:e4:4b:55:85:
82:84:c1:3d:e6:ea:92:a6:4e:6b:4f:40:11:9d:c0:15:68:e3:
4f:e3:b2:03:77:15:d7:7a:f7:e1:87:11:f6:54:0d:91:88:a8:
ff:ce:af:07:88:30:35:93:17:2a:e6:ba:95:ee:d1:80:8a:f6:
cc:9e:da:cd:a7:da:a1:b0:f4:36:fb:69:06:75:0f:be:06:b1:
85:80:d5:4f:61:f1:cf:c9:a0:5d:11:69:cf:f3:f5:1b:a9:fb:
5e:0b:94:79:0e:64:e8:34:2a:05:d0:70:f6:e3:e7:21:49:21:
4e:ae:ab:15:3b:c4:9c:7d:df:87:ae:99:16:e1:99:67:fd:34:
2c:0f:7c:2f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFMhdklUOeDqZtP5bpnHDchEeVnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFE
NjIzMDU3MjAeFw0yNjA3MjMyMjIyMThaFw0yNjA3MjUwMTQ5MThaMDMxMTAvBgNV
BAMTKDc3RDdEMDIyRThDMDgyNEI0NkQzN0Q5OTRGQzNFNTFFRjlCQTkxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv/aMji6zr0uW+sHW7tklxGc9
m9YX28eCW6dTMR3muxKG10NtyUTK3M1eLHTFq7gVY3V8LUHJsweK8P5l+Wsvpn+z
b6Q2JB+64m+5CgDDrvt674F5cM5L7ofuotxc4Xy1AfxqFnaozeT6Gg9GCFlSQpgd
i8Pav90I64nVYlmQo6ct2Mbye1hVO7vn6/31+ePep1P0PCh//VfT7D3MSE0CWucX
RqgGqHlaInshv+XuyXnzlNfe2ao0e73YM57gfIO2Z4xS01nSMjMHeXP2fAdcXzWr
cMJFZMnlwzjfNnyZ5hGiQCEZC+kpt86JYVBaLg3JwLoaTv58URKp7L+m4SGXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd9fQIujAgktG032ZT8PlHvm6kd8wHwYDVR0j
BBgwFoAUXjEokC/KO86cn+v7Jk1VCtYjBXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGZiNWZmMzctMzk0YS00ZWJhLWE0NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAy
RkNBM0JDRTlDOUZFQkZCMjY0RDU1MEFENjIzMDU3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RTMxMjg5MDJGQ0EzQkNFOUM5RkVCRkIyNjRENTUwQUQ2MjMw
NTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0
NzAtMTBhZjM3Y2Y3NWRjLzAvNUUzMTI4OTAyRkNBM0JDRTlDOUZFQkZCMjY0RDU1
MEFENjIzMDU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAcicaug78ISQ2UgGaxy4JWSR82u6lpH9RYr
QlKlIeV/ipOLnqLcTZb25PjSd76/qq2a04zSgL1XLfiYgWZjV0qPZ8LeqI2A4oVR
x5l0yPQLNqbPqAIFZiBzYbAdTz03CGNAMSvSDjj3uw6KTDz2YyI53l6ff6IMWSHk
5EtVhYKEwT3m6pKmTmtPQBGdwBVo40/jsgN3Fdd69+GHEfZUDZGIqP/OrweIMDWT
FyrmupXu0YCK9sye2s2n2qGw9Db7aQZ1D74GsYWA1U9h8c/JoF0Rac/z9Rup+14L
lHkOZOg0KgXQcPbj5yFJIU6uqxU7xJx934eumRbhmWf9NCwPfC8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:15 2026 by rpki-client