
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json)
Hash identifier: WPiWl8jsus/3JO979qN1iwKMsgD9fmIveMofrWrttwA=
Subject key identifier: 20:F1:02:66:50:84:C8:0A:54:48:8D:4C:F9:88:B3:67:2B:D7:79:C3
Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004
Certificate serial: 162552B8A0ED60C0A194FD85D056E2899BA6A9D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:08:11 +0000
Manifest this update: Tue 12 May 2026 18:03:11 +0000
Manifest next update: Wed 13 May 2026 18:55:11 +0000
Files and hashes: 1: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: scgHbKQkplzjbYiZv/5x1RRlBo070w8uQKizoFfVNoE=)
2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:25:52:b8:a0:ed:60:c0:a1:94:fd:85:d0:56:e2:89:9b:a6:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004
Validity
Not Before: May 12 18:03:11 2026 GMT
Not After : May 13 18:55:11 2026 GMT
Subject: CN=20F102665084C80A54488D4CF988B3672BD779C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:d9:c7:cb:a4:fd:79:d6:48:59:b5:44:22:
02:23:bf:de:35:68:78:dc:26:d0:32:23:ad:06:85:
29:25:a1:a1:9a:da:42:e7:10:34:07:96:3d:59:50:
08:52:4a:5c:e5:30:f7:8e:3b:a8:62:df:79:55:c8:
c1:ef:eb:75:d3:d3:ed:54:7d:3e:7c:c9:d6:59:aa:
d0:ae:41:5c:bf:a1:97:ef:00:de:d3:6a:45:42:b1:
8a:3b:0f:c5:30:e0:9b:78:66:5e:5a:dd:7c:b0:04:
52:43:1a:a7:bd:29:06:26:9a:14:f5:18:84:c5:47:
6d:af:33:20:4d:e1:bb:ca:54:95:f2:7c:00:29:c1:
a0:53:23:be:3f:8f:45:90:1c:7f:af:0a:bb:bb:de:
fa:8d:f7:3e:df:1c:ac:e0:d8:1d:ec:27:fc:66:9c:
61:de:9e:1a:a1:54:3e:58:6d:ee:d2:bc:2a:c7:a7:
da:a4:ff:85:95:7b:07:77:61:2f:a5:4c:87:8c:3a:
c4:95:32:d7:9b:d4:5e:f0:29:26:0b:0b:73:ee:dd:
44:7b:48:c8:e2:f5:d1:82:e7:fa:d2:11:84:e0:60:
96:20:3c:d6:4e:66:70:07:f7:5d:10:bd:48:d3:4d:
21:5b:0d:54:17:5e:ee:92:aa:28:3c:fc:af:44:f9:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:02:66:50:84:C8:0A:54:48:8D:4C:F9:88:B3:67:2B:D7:79:C3
X509v3 Authority Key Identifier:
keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d9:5c:39:36:09:59:1e:22:35:fc:42:74:e1:6f:57:b1:56:
72:4c:59:f6:51:3f:78:01:8f:8d:fb:26:e2:d4:1a:40:5e:4c:
1d:3f:2f:9a:69:90:ac:09:4e:fb:08:87:84:a7:c3:e1:c8:91:
60:c7:7e:c3:ca:ec:f4:25:6b:0d:c5:76:37:fa:4b:e9:b1:bc:
be:b8:98:4a:24:2a:51:27:ed:e3:45:f3:60:62:96:43:e7:ae:
d1:05:1e:9a:14:0f:9a:c1:5b:cd:16:95:cc:3f:eb:87:c8:58:
e0:2e:d6:77:68:5e:e6:7b:fd:48:af:10:90:45:f5:eb:de:cb:
27:bd:60:f2:a0:28:22:81:74:3f:24:70:10:67:a9:6b:e1:26:
29:5f:b7:67:89:97:06:cf:3e:ec:65:0e:85:8b:52:d8:62:48:
16:f5:40:22:4a:ad:7e:44:5b:3b:50:1f:bf:38:a5:c5:31:f4:
8a:20:03:00:70:ab:7e:ff:e4:4c:54:e3:45:5a:1e:08:24:f4:
0b:47:ba:11:de:b4:31:c2:a9:62:0f:e4:9b:a4:6a:28:06:d7:
67:f6:7b:1d:a1:75:61:1d:fa:26:56:77:d3:29:e2:f0:ce:a0:
2c:e1:c5:e3:b5:de:de:12:4e:b4:de:f5:04:8b:d6:91:db:67:
8f:43:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:00 2026 by rpki-client