
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json)
Hash identifier: rF+NI1LJ4ahmCbAMndSKfl/i7V/9epibrsnChJpJkvg=
Subject key identifier: BB:6D:C0:2E:A2:AF:79:BC:1E:04:85:A5:AD:93:24:31:34:74:9E:9B
Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED
Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED
Certificate serial: 476BEC6E7DB7552831F19B0031D30AF07592BF84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 00:29:45 +0000
Manifest this update: Fri 24 Jul 2026 00:24:45 +0000
Manifest next update: Sat 25 Jul 2026 01:29:45 +0000
Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=)
2: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: eapsZGWMjUwxtAtc9QCV64fglNsn0zRxJbC2nRGgai8=)
3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl
rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6b:ec:6e:7d:b7:55:28:31:f1:9b:00:31:d3:0a:f0:75:92:bf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED
Validity
Not Before: Jul 24 00:24:45 2026 GMT
Not After : Jul 25 01:29:45 2026 GMT
Subject: CN=BB6DC02EA2AF79BC1E0485A5AD93243134749E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:35:4d:32:c2:98:95:77:11:08:36:a6:90:
07:ea:78:2a:b6:72:e8:0b:42:fe:90:72:2b:d4:8b:
61:79:91:d9:e7:d0:fa:22:f0:a9:f1:51:df:2c:90:
62:56:95:df:61:43:62:b4:4d:f3:d7:d4:2d:c4:80:
4b:9e:60:9d:c5:95:57:81:8d:c2:64:c8:be:17:8b:
43:d0:2b:2a:e4:b0:8d:81:16:76:74:a6:6a:a5:8e:
73:7a:84:55:81:b9:37:dc:3a:cf:cf:50:ec:a7:1b:
6f:c8:1e:ed:2b:42:5b:87:6c:47:5e:e4:9d:a6:f1:
c0:26:fd:ee:03:98:63:bb:e2:ac:f1:00:36:04:cb:
61:d5:05:56:5e:85:2f:62:c4:9b:e4:40:55:c7:df:
6e:e6:1d:46:75:fa:9f:13:6c:68:ab:97:5e:93:1e:
8a:30:d1:da:b5:ea:a4:ab:df:a4:93:c9:e2:11:9f:
45:0c:74:e5:01:e9:01:bb:56:6f:74:10:81:02:9a:
02:25:f1:a8:a0:bf:fa:17:69:9e:f4:51:9f:0d:42:
98:6f:23:d4:d3:d5:bb:6d:25:ba:23:63:a2:66:81:
45:8c:4c:89:35:1e:54:36:b9:92:26:9b:94:6c:05:
9b:40:00:ad:4d:1a:cf:97:30:1a:de:43:88:40:a6:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6D:C0:2E:A2:AF:79:BC:1E:04:85:A5:AD:93:24:31:34:74:9E:9B
X509v3 Authority Key Identifier:
keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:f1:95:87:19:ae:1a:c7:ad:b0:77:13:75:b4:1a:fb:8d:
06:cb:7d:58:b5:6c:26:2a:1e:f6:fe:ea:8a:f9:18:42:e0:e7:
f4:c5:68:b6:83:cb:11:2b:4b:43:4b:32:25:50:87:da:eb:83:
61:13:b9:6d:2e:eb:69:8e:f5:36:50:55:8f:f2:95:6d:8a:5c:
2c:6d:c2:d8:6b:38:19:20:71:46:ca:f3:2e:0d:4b:e5:72:4a:
64:49:55:a5:d5:77:0c:44:60:ac:10:a4:46:87:63:33:45:f7:
b6:29:60:d6:1a:4b:a6:29:ee:4e:66:e1:04:98:b8:3b:e0:06:
bd:56:64:0b:39:e7:96:eb:a3:a0:c2:75:a8:f0:b7:dd:4c:46:
02:84:13:51:5a:a8:0d:ab:16:b0:a0:10:87:cc:0e:db:24:c6:
c7:fe:c6:bb:7f:22:40:ec:54:1c:b7:b2:f6:a4:51:9f:61:a6:
50:69:04:0a:52:f3:60:6f:d3:96:cb:0e:09:e7:0a:74:a8:a8:
48:27:21:d7:02:04:6e:64:21:ef:1d:92:70:b8:cc:37:ec:90:
ea:29:b5:65:67:a2:9e:0b:83:3d:4f:d6:b0:ca:64:68:b0:33:
7a:9f:a5:b9:a5:73:b4:32:d9:3b:9d:ae:c1:ac:5d:97:a8:de:
7c:b8:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:28 2026 by rpki-client