
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json)
Hash identifier: MFubIUfxPTykWiYmT3qdi0Rr6ACx2kQp9AmS3XeHq/4=
Subject key identifier: 1E:A3:BC:D7:E2:53:60:CB:E9:58:25:27:AE:70:6E:EF:14:7A:7D:5D
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial: 31295D3BA05D779B2860113B4EF938533A9A0243
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:34:23 +0000
Manifest this update: Tue 12 May 2026 04:29:23 +0000
Manifest next update: Wed 13 May 2026 07:46:23 +0000
Files and hashes: 1: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=)
2: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: Tz0gSC7rWoqyYB62oMi81MDkbCmAys4DC/O7V7pUF+U=)
3: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=)
4: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=)
5: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=)
6: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=)
7: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=)
8: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=)
9: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:29:5d:3b:a0:5d:77:9b:28:60:11:3b:4e:f9:38:53:3a:9a:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Validity
Not Before: May 12 04:29:23 2026 GMT
Not After : May 13 07:46:23 2026 GMT
Subject: CN=1EA3BCD7E25360CBE9582527AE706EEF147A7D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:db:18:da:9e:20:7f:14:c5:0e:fa:86:60:
ec:0c:ea:db:ee:ba:fd:fe:9b:9a:f2:7a:80:37:97:
45:d0:69:cc:0e:6a:64:2f:1c:6f:42:d2:fe:8a:c1:
6d:13:17:bc:cf:19:8c:68:a9:a8:cf:59:0e:b1:2a:
2e:64:de:20:3c:57:ef:3f:45:1f:d7:59:af:08:9d:
7f:5e:c7:5a:9f:6a:08:e7:e8:12:75:2e:df:23:01:
6c:3b:8c:d5:8e:c4:73:9e:51:6b:20:79:04:e9:2c:
f1:47:81:b4:b8:a3:8a:39:b2:42:5f:0c:c4:8b:e9:
1b:69:33:75:43:87:86:e4:2b:e2:84:3c:cc:5e:92:
d0:62:6a:69:54:a2:61:09:d9:f0:a2:4a:47:bd:1b:
91:14:0f:f3:4d:7e:5e:1c:5a:3a:e9:31:52:7d:a1:
c8:21:7e:9a:45:94:19:e4:8d:81:04:d6:44:84:cb:
58:39:d3:58:62:43:50:56:55:77:e6:d4:1e:c5:8e:
e6:68:c3:cb:46:02:25:b3:38:30:85:ad:5f:6e:87:
04:61:93:8f:02:48:77:35:a0:bd:f7:31:cf:6d:5e:
8c:92:d1:ec:71:13:6c:0a:34:8e:88:01:5c:f2:50:
0f:13:ed:67:74:af:f7:f3:9b:04:ad:f0:49:00:ad:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A3:BC:D7:E2:53:60:CB:E9:58:25:27:AE:70:6E:EF:14:7A:7D:5D
X509v3 Authority Key Identifier:
keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:a7:93:b8:5c:23:1e:0c:fb:b1:3a:85:b6:18:e3:0b:4e:
72:73:77:0a:c8:72:60:73:5f:97:e5:5c:51:e9:53:98:1d:08:
52:2e:ca:fc:64:5a:74:1d:dc:76:2c:09:d0:1c:b7:9c:3c:61:
6f:a1:cc:a9:fb:d3:94:3f:e2:6d:1c:f2:57:e5:dd:ac:61:76:
70:bb:eb:c9:ab:a0:db:71:a2:a5:9e:40:5c:ed:87:e0:2c:68:
25:52:ae:7a:9b:59:97:b9:ef:dc:c5:7b:ff:aa:03:63:50:0b:
87:b5:3e:11:50:99:9e:62:56:5e:5d:bd:e5:4f:88:fe:35:cd:
ca:76:93:24:a3:9d:48:d3:26:ad:f6:9d:c7:32:7b:d4:b3:be:
e6:97:f5:e1:1e:cd:60:5e:cf:3d:97:5e:30:db:2c:8e:58:5b:
48:19:30:3c:1b:de:a6:ac:b0:cf:26:1d:9d:6e:f0:da:ba:b0:
4f:02:e1:62:41:47:70:e0:4c:1f:7d:a6:8f:39:ef:6a:92:22:
3e:e8:ed:f0:33:ff:41:37:88:fe:62:d8:d2:bf:9b:79:c2:83:
b5:2d:3a:49:d9:f3:af:f1:ad:cd:0c:6c:7c:c5:a6:fb:5e:a9:
8c:bc:68:6f:56:d2:49:4c:06:4a:fe:cc:ee:ea:0c:37:44:1f:
98:ef:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:48 2026 by rpki-client