
$ rpki-client -vvf rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
File: 5EC020FF41231134DE16F43F92714D434626A05B.mft (raw, json)
Hash identifier: zWmpaCV7sB78W6FLurTkvSuGr792TMqjK2HdOaDXpXo=
Subject key identifier: 44:B0:17:FD:4B:41:87:74:6E:F3:92:D1:BB:44:2E:E1:26:3B:3C:1E
Authority key identifier: 5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B
Certificate issuer: /CN=5EC020FF41231134DE16F43F92714D434626A05B
Certificate serial: 30072F1F5F1DEF57E6A3BE9A3D153E6085874A83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:11:57 +0000
Manifest this update: Tue 12 May 2026 17:06:57 +0000
Manifest next update: Wed 13 May 2026 17:39:57 +0000
Files and hashes: 1: 5EC020FF41231134DE16F43F92714D434626A05B.crl (hash: tK2yQFVXIWSmpeTO/Uou4h890t6mVfuCxhXmigZfeKU=)
2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: 7EVkvK54oj3Ks8SpMiOp0AT2jMsnJWuUCj85YBui5p0=)
3: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: mxf66wCv3huHr7+y00gKhj0SFSiQHrPhglnN0dDJ4UY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl
rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:07:2f:1f:5f:1d:ef:57:e6:a3:be:9a:3d:15:3e:60:85:87:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EC020FF41231134DE16F43F92714D434626A05B
Validity
Not Before: May 12 17:06:57 2026 GMT
Not After : May 13 17:39:57 2026 GMT
Subject: CN=44B017FD4B4187746EF392D1BB442EE1263B3C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:8b:93:d0:c8:eb:8e:3a:62:f9:32:33:1f:
08:70:8b:e7:e0:c6:4a:15:c2:9a:72:3e:71:02:79:
0b:a5:d7:cf:54:3a:bd:81:65:af:a7:25:82:54:64:
db:48:43:d2:6f:1c:12:85:f9:fc:28:03:4e:5f:cc:
61:4b:04:7d:4d:05:e2:c9:8e:c5:bf:58:19:bc:8c:
e6:99:d9:4a:ad:cf:9e:aa:ce:4c:61:d0:1c:e8:42:
1d:38:40:85:63:92:71:e9:47:13:63:bd:ac:4f:bb:
8e:84:8c:73:f4:3c:40:28:45:bd:45:bc:92:19:45:
c6:b0:cd:3a:cf:68:98:f8:aa:5c:dd:3e:13:f7:5f:
67:f4:27:fd:d0:19:04:53:93:12:5a:49:e5:1a:1c:
dd:79:92:5c:88:26:6a:f2:ed:99:e2:62:a1:b8:68:
a1:af:79:28:33:7a:cc:66:98:23:5a:b5:78:eb:36:
07:a6:6e:a6:45:f0:bc:1f:74:42:83:a7:f1:ed:0d:
77:94:c1:1c:1e:8d:3b:37:a5:8b:a5:f2:e5:a5:c7:
44:63:1e:06:94:94:81:4d:b6:25:87:3c:bf:8d:b0:
3d:1d:9f:78:a7:60:be:a2:5f:d5:67:88:46:01:d9:
f4:d6:b8:57:59:93:6d:2f:d0:ec:c6:c2:7d:06:ec:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:17:FD:4B:41:87:74:6E:F3:92:D1:BB:44:2E:E1:26:3B:3C:1E
X509v3 Authority Key Identifier:
keyid:5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:82:7c:cb:07:41:07:c4:19:a2:f1:7d:3c:dd:74:75:92:e7:
18:a3:e9:24:71:97:c9:9b:ec:1d:6f:17:bb:c9:6d:79:0f:8b:
a7:13:69:0e:8b:9e:53:00:02:ec:d8:ba:78:2d:3f:83:27:3c:
9a:87:d7:fe:a2:b5:31:31:b6:48:b7:37:39:76:9e:ba:de:3f:
52:0a:4c:c6:b3:90:f1:aa:4f:0f:91:cf:fd:6d:69:06:a4:88:
22:33:3a:ca:df:15:65:e3:15:44:ce:24:fc:4e:1d:63:d9:89:
de:2f:54:db:fe:72:7e:ec:84:e7:c6:73:b5:e1:82:2e:5d:85:
69:08:72:78:54:c1:86:90:ea:83:13:d4:b2:d1:4b:41:7f:42:
14:0d:6a:19:19:c7:c6:1a:05:6b:58:9d:3d:97:83:cd:90:27:
db:66:2a:ee:cf:1a:12:18:81:53:4d:c2:12:47:20:9f:8d:96:
23:e8:65:a9:17:c9:5b:80:5c:87:f5:95:a0:12:02:a0:e5:73:
88:1a:40:91:10:11:cd:31:98:66:df:a9:4c:4d:c2:7f:d4:92:
f5:68:57:5e:55:5f:f3:11:bd:69:19:94:8f:d1:f7:54:d5:51:
c4:2e:f3:64:5a:87:22:8e:82:ac:a4:fa:55:99:2f:e0:8b:2d:
32:94:fe:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMAcvH18d71fmo76aPRU+YIWHSoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVDMDIwRkY0MTIzMTEzNERFMTZGNDNGOTI3MTRENDM0
NjI2QTA1QjAeFw0yNjA1MTIxNzA2NTdaFw0yNjA1MTMxNzM5NTdaMDMxMTAvBgNV
BAMTKDQ0QjAxN0ZENEI0MTg3NzQ2RUYzOTJEMUJCNDQyRUUxMjYzQjNDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52ouT0Mjrjjpi+TIzHwhwi+fg
xkoVwppyPnECeQul189UOr2BZa+nJYJUZNtIQ9JvHBKF+fwoA05fzGFLBH1NBeLJ
jsW/WBm8jOaZ2Uqtz56qzkxh0BzoQh04QIVjknHpRxNjvaxPu46EjHP0PEAoRb1F
vJIZRcawzTrPaJj4qlzdPhP3X2f0J/3QGQRTkxJaSeUaHN15klyIJmry7ZniYqG4
aKGveSgzesxmmCNatXjrNgembqZF8LwfdEKDp/HtDXeUwRwejTs3pYul8uWlx0Rj
HgaUlIFNtiWHPL+NsD0dn3inYL6iX9VniEYB2fTWuFdZk20v0OzGwn0G7EZ9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURLAX/UtBh3Ru85LRu0Qu4SY7PB4wHwYDVR0j
BBgwFoAUXsAg/0EjETTeFvQ/knFNQ0YmoFswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mjg3ZjhmODItMzdiYi00OTgzLTkzY2EtNWUwNjcwYWIwMmUzLzAvNUVDMDIwRkY0
MTIzMTEzNERFMTZGNDNGOTI3MTRENDM0NjI2QTA1Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RUMwMjBGRjQxMjMxMTM0REUxNkY0M0Y5MjcxNEQ0MzQ2MjZB
MDVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz
Y2EtNWUwNjcwYWIwMmUzLzAvNUVDMDIwRkY0MTIzMTEzNERFMTZGNDNGOTI3MTRE
NDM0NjI2QTA1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADmCfMsHQQfEGaLxfTzddHWS5xij6SRxl8mb
7B1vF7vJbXkPi6cTaQ6LnlMAAuzYungtP4MnPJqH1/6itTExtki3Nzl2nrreP1IK
TMazkPGqTw+Rz/1taQakiCIzOsrfFWXjFUTOJPxOHWPZid4vVNv+cn7shOfGc7Xh
gi5dhWkIcnhUwYaQ6oMT1LLRS0F/QhQNahkZx8YaBWtYnT2Xg82QJ9tmKu7PGhIY
gVNNwhJHIJ+NliPoZakXyVuAXIf1laASAqDlc4gaQJEQEc0xmGbfqUxNwn/UkvVo
V15VX/MRvWkZlI/R91TVUcQu82RahyKOgqyk+lWZL+CLLTKU/kQ=
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:12 2026 by rpki-client