
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
File: 566E09CA4830024428EFAB32BD4C5C0588342F87.mft (raw, json)
Hash identifier: 8KjCw8/uNS6HdiOQJJX8m97xLCLnKZn/lGqry7b1wuA=
Subject key identifier: 56:27:74:A3:C0:9F:68:18:64:0B:56:B3:68:06:0B:ED:9F:24:2B:C6
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Certificate issuer: /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial: 164155F52D3945A8FB373E7F775FABFABB08FADC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
Manifest number: E5
Signing time: Tue 13 Oct 2026 13:27:43 +0000
Manifest this update: Tue 13 Oct 2026 13:22:43 +0000
Manifest next update: Wed 14 Oct 2026 16:53:43 +0000
Files and hashes: 1: 3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa (hash: kjns1P/9YtFZsQtwjo+slrRL21VSAsBZN0FYYz0ZfBc=)
2: 3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa (hash: SaD8e6GIVRQQpU4CT4qZc563tb2DJTmlzJS/OsFb3w8=)
3: 566E09CA4830024428EFAB32BD4C5C0588342F87.crl (hash: gBzZXCorRnTRNJuvotjxjp8a7WtlLlzL5sgQMWr/C1k=)
4: 3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa (hash: /1rF0PKS/fc9zIsV+HmvJCLuPMTuSv+M8S12SwS/eEY=)
5: 3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa (hash: p/qfzxOQMmbYGhqYZQGSuk/datM54DD5JFlhBHKoqoQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 16:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:41:55:f5:2d:39:45:a8:fb:37:3e:7f:77:5f:ab:fa:bb:08:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Validity
Not Before: Oct 13 13:22:43 2026 GMT
Not After : Oct 14 16:53:43 2026 GMT
Subject: CN=562774A3C09F6818640B56B368060BED9F242BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:0d:12:06:83:3f:61:9a:23:88:d2:dd:4d:
f8:c7:bd:a3:6d:4b:f4:93:2c:28:2a:05:69:67:e5:
7c:e5:4e:59:ae:a7:20:b4:58:d9:85:bb:52:53:6c:
9d:38:0f:37:9d:a2:34:24:00:39:81:3c:5b:3f:b4:
3a:63:b2:96:e2:15:b9:bf:4f:e9:81:19:32:a0:1e:
4e:67:53:69:18:a9:65:14:27:d6:79:c1:c7:b2:4a:
82:8d:f9:ef:7f:8d:81:45:65:e8:e7:50:d1:fb:b3:
cb:ea:39:81:27:9c:77:cb:12:e0:98:68:81:23:2c:
d9:0b:57:71:54:4f:c6:55:0f:e6:53:52:1c:a1:f3:
7d:4e:86:0f:57:6b:04:0c:8e:eb:ed:a6:a8:48:9f:
9d:f0:89:49:7b:4d:cb:e1:d7:fe:75:ff:53:a4:b2:
a8:c5:af:15:92:75:59:b0:e2:e9:32:a3:7d:84:cf:
36:15:ab:64:92:6d:8a:51:2c:15:86:78:8a:bf:9b:
ae:59:13:10:d0:14:6a:d3:e4:3b:39:a5:12:21:ff:
85:d7:76:e6:d6:46:7f:52:a2:57:7f:71:b5:a9:56:
92:5f:b6:d8:39:d7:5d:cc:0b:88:43:6c:83:c4:59:
9d:73:19:f9:43:84:e0:0d:9c:c8:4f:6c:d7:56:1f:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:74:A3:C0:9F:68:18:64:0B:56:B3:68:06:0B:ED:9F:24:2B:C6
X509v3 Authority Key Identifier:
keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:66:2e:e2:97:2d:f1:6d:7b:03:c7:8a:34:d3:03:1b:22:
bb:b5:94:51:d5:28:3f:fb:49:81:fe:66:ef:ce:a6:89:e4:02:
64:06:9a:ad:67:49:53:e2:e8:92:b9:9f:ef:ba:05:5c:92:81:
50:eb:e1:70:be:2d:05:0a:5e:d3:5c:de:22:0b:8b:05:6e:92:
42:80:18:7f:fe:05:20:ef:6a:38:13:0a:1b:52:40:9c:6a:f8:
d5:34:3e:43:0c:ab:11:c1:46:0a:f6:48:ec:93:5d:dd:a1:ed:
35:41:db:fe:6d:d1:9d:74:69:69:8b:16:1e:18:3c:02:7c:94:
06:be:e8:12:9e:91:a6:19:4a:33:91:d6:10:3d:9d:59:09:4a:
1f:5a:b8:5c:b3:2a:2a:a0:7b:a9:7a:de:29:d8:0c:84:12:17:
e5:bc:26:8c:44:49:06:2a:c9:b7:82:fc:2c:ac:bd:72:cd:b0:
5e:74:5c:82:8b:5d:16:80:35:8a:ab:46:24:ad:a6:97:58:a0:
b7:a2:0b:fe:e3:21:3a:d4:44:93:b7:db:45:02:a1:cc:15:7e:
4b:b1:23:dc:a2:3a:78:75:50:4e:7a:86:5f:ad:ba:87:df:ea:
9f:7a:60:23:27:2f:0a:d4:90:d3:10:c9:70:ee:d9:50:28:e3:
20:23:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:27:18 2026 by rpki-client