
$ rpki-client -vvf rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
File: 1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft (raw, json)
Hash identifier: EF9E89smS8y1G0CHnGQQ1a57rPcmMHYvsahdnD2X9mg=
Subject key identifier: B5:CD:94:F1:B7:07:5D:E5:60:64:DD:30:A3:71:30:5A:55:B9:F0:1D
Authority key identifier: 17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE
Certificate issuer: /CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
Certificate serial: 3A5ED4040E94590FD3807CEB71BACE96F72B3353
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:22:16 +0000
Manifest this update: Tue 12 May 2026 20:17:16 +0000
Manifest next update: Wed 13 May 2026 22:32:16 +0000
Files and hashes: 1: 1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl (hash: P/m+MgXRiYjmIyXt1VoKfsgnbXHiBEWALVsGuooHPic=)
2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: BF0A/2Eh0yp8cyXoZ2hAxmpLhKE2MIjrP2QeGtvsEus=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl
rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5e:d4:04:0e:94:59:0f:d3:80:7c:eb:71:ba:ce:96:f7:2b:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
Validity
Not Before: May 12 20:17:16 2026 GMT
Not After : May 13 22:32:16 2026 GMT
Subject: CN=B5CD94F1B7075DE56064DD30A371305A55B9F01D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:68:01:8a:86:d1:ff:2a:74:90:16:8a:51:
eb:f2:6c:10:6c:34:9d:c3:af:8f:1e:11:73:d7:2f:
36:de:2d:74:56:be:c6:3c:fb:81:02:6f:52:eb:a9:
2d:dd:23:7d:6c:31:5a:92:e9:fe:95:01:05:6a:09:
38:35:e9:7c:01:7b:d8:d2:6d:b7:d3:f1:21:d0:4a:
f2:41:0e:d4:73:2b:00:1d:ac:40:81:77:11:66:f4:
3e:e3:6c:81:2b:90:31:12:cb:b5:e1:eb:49:af:42:
4b:79:68:23:44:66:1f:71:b2:7b:1b:d7:8e:2f:0e:
f5:91:ce:4a:0e:9f:71:a8:1d:00:92:eb:33:ae:5d:
93:93:9f:42:83:e7:f5:01:7d:88:78:46:12:df:89:
fe:0c:2a:a8:c9:0f:37:82:8c:e3:f3:58:97:e3:e2:
00:be:da:b6:cd:d6:ea:8e:de:aa:71:a4:4a:ba:f3:
1f:43:c7:41:71:d8:ef:d9:6e:ec:26:7e:10:b2:8b:
76:4c:06:3b:d4:49:57:0b:32:e1:8e:76:bb:3c:ac:
74:ac:64:97:ea:75:44:f0:ff:35:ea:e9:42:4f:46:
f6:04:b6:fd:7a:78:e9:d4:b6:fd:4c:fa:33:f4:17:
dc:e8:ba:58:a7:de:f5:45:3b:a4:b4:a8:7a:18:fa:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:94:F1:B7:07:5D:E5:60:64:DD:30:A3:71:30:5A:55:B9:F0:1D
X509v3 Authority Key Identifier:
keyid:17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:01:a3:32:9b:bf:6f:23:39:3a:32:e5:86:d6:a2:62:0e:
d9:df:1b:7d:26:3b:66:2c:bc:28:20:70:07:2f:79:15:00:4b:
c6:cc:72:ee:4b:27:47:f0:69:ec:c0:d8:50:cd:ff:23:28:06:
d4:c5:1e:bd:72:de:49:11:b6:f4:a2:85:bb:7c:98:39:d1:7f:
0b:59:66:6a:50:1f:3e:3f:62:26:8d:fd:c8:4c:2d:11:ea:70:
25:3d:ca:6a:82:52:03:45:8a:07:a0:44:05:f4:3d:de:c1:a9:
03:1d:1c:04:bb:c6:81:d3:dd:c7:1c:df:ca:92:6b:e7:a2:b1:
ee:c9:a4:a0:3f:43:d5:54:9e:b9:48:c6:1b:01:4a:3d:b1:94:
17:23:10:2e:4d:d0:03:27:56:a8:42:84:3a:f0:27:75:43:a6:
1b:73:7a:43:3a:f0:80:cd:d3:8e:b2:56:6b:bc:ad:46:4b:dd:
81:bb:58:a5:20:03:c6:39:5f:68:89:48:56:61:1f:4c:c5:67:
2c:a8:cf:65:53:63:ac:ee:a6:cf:ef:1c:82:f3:a4:f7:9e:54:
e0:32:fe:27:40:d8:01:d2:f8:e9:44:2f:d2:61:9d:f7:fc:a1:
cf:09:bb:dd:37:82:11:aa:67:28:7b:f1:24:75:be:2d:70:e2:
d7:90:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:14:03 2026 by rpki-client