
$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json)
Hash identifier: 8uLR2wC7R8sl41GvlEUUVvsraeadJz9tMiEbOCXF/ZE=
Subject key identifier: DE:DA:06:FC:54:85:50:D9:B6:D6:94:FC:4B:92:4D:4B:B6:48:D7:C1
Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5
Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
Certificate serial: 775312A6326C7AD76C517EC2DE8322C2ADFB4A0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:15:49 +0000
Manifest this update: Tue 12 May 2026 16:10:49 +0000
Manifest next update: Wed 13 May 2026 19:47:49 +0000
Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=)
2: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: DNGFoA3sBYHx/qpm6hIjick91wq/ybSFMcpjkcd7YDc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl
rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:53:12:a6:32:6c:7a:d7:6c:51:7e:c2:de:83:22:c2:ad:fb:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
Validity
Not Before: May 12 16:10:49 2026 GMT
Not After : May 13 19:47:49 2026 GMT
Subject: CN=DEDA06FC548550D9B6D694FC4B924D4BB648D7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:d8:d4:a4:6e:a7:9c:60:de:f2:10:26:7f:
c2:85:ae:a7:7c:c5:71:92:bb:a8:95:5b:17:20:20:
3b:68:37:15:75:40:5f:97:72:8d:5a:a5:5f:a8:8f:
b0:97:38:67:b3:e7:fe:90:68:65:cc:df:e0:7c:97:
06:d0:4d:52:15:f9:cd:c7:eb:78:75:23:f4:09:87:
b2:c4:5d:95:2d:15:2f:f8:b1:06:7a:ba:16:c0:e5:
17:ca:97:62:05:6c:6f:69:a1:97:0c:44:b3:d9:23:
4b:8d:74:2d:11:6e:56:29:91:ee:be:08:67:3e:32:
cf:b3:39:5e:d4:f1:bc:44:d9:cc:24:e1:56:d8:a1:
cc:5d:2c:8d:05:86:3a:08:69:e5:85:90:96:1d:58:
34:8e:71:c4:fe:b7:8b:c0:0f:d1:61:76:d8:b4:98:
ab:52:13:74:22:2c:1c:e0:ce:3a:2c:6e:d6:69:8c:
96:39:4b:7c:44:22:ca:e7:8c:2f:ff:68:8f:5e:c5:
db:43:a9:f9:a2:d0:b7:25:03:5b:c7:55:a6:8e:a0:
0f:ec:d9:15:75:f5:76:4b:29:d7:9b:08:1b:42:c7:
d1:61:c6:83:26:46:3c:38:ec:0a:64:2a:05:ba:43:
76:f4:eb:07:b8:84:d7:41:12:5b:27:17:2f:ee:fc:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:06:FC:54:85:50:D9:B6:D6:94:FC:4B:92:4D:4B:B6:48:D7:C1
X509v3 Authority Key Identifier:
keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:39:5f:11:df:27:b5:96:2a:a9:a9:51:76:74:dd:b2:3c:78:
e2:56:dc:a0:5a:de:31:ed:08:b6:16:c2:21:b5:ee:6a:96:cc:
18:05:d1:12:05:73:cf:63:31:3e:73:91:95:1f:6e:73:63:f6:
5b:6c:eb:e7:48:cb:49:4c:be:d4:49:fb:5d:36:f1:15:57:e4:
f2:39:54:8f:a8:cc:f7:45:3b:ea:ff:35:61:00:73:bc:86:7f:
9f:0a:88:4d:47:3b:46:1c:ea:8d:2d:56:f0:1f:19:06:28:0a:
b2:03:49:d0:4a:26:86:ba:54:dc:7e:b7:ca:8c:c3:ee:5a:e3:
2d:20:e7:53:5c:1f:79:8d:3a:b5:73:80:85:83:4a:f8:14:74:
dd:df:e4:cc:61:a8:82:71:42:00:7e:15:4e:8f:66:8a:41:3a:
0e:b1:d0:9f:27:44:4c:00:ad:0c:1b:16:3b:4e:0a:2c:65:5f:
0c:3c:d2:aa:3f:8e:59:45:cc:5c:95:8e:94:2b:c8:aa:7c:8f:
1d:4d:65:f0:ce:e0:b5:57:c1:7e:6c:14:25:ed:7a:81:df:29:
9c:23:76:a6:6d:29:bd:fc:0f:b4:55:c4:d6:c4:00:c0:4f:44:
43:d8:f8:83:eb:35:7c:45:c9:ee:3a:2c:cf:16:ce:22:75:74:
21:1a:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:01 2026 by rpki-client