
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json)
Hash identifier: s/OxsXKmTcQxgOvhL/BwcMYq1R4P7j6VlLZUWrKdRIU=
Subject key identifier: 1A:E3:99:BE:F5:56:76:1E:6B:29:98:C4:99:3D:5C:BF:5E:E2:BB:FD
Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004
Certificate serial: 51F4D8BFFC9869B4FA47ACA034737B295F30E544
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 01:47:57 +0000
Manifest this update: Thu 24 Sep 2026 01:42:57 +0000
Manifest next update: Fri 25 Sep 2026 04:00:57 +0000
Files and hashes: 1: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: HiY6bY5LwRiOaKQQwER5QpdS+FecRHqWWFI7Doy/ieA=)
2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f4:d8:bf:fc:98:69:b4:fa:47:ac:a0:34:73:7b:29:5f:30:e5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004
Validity
Not Before: Sep 24 01:42:57 2026 GMT
Not After : Sep 25 04:00:57 2026 GMT
Subject: CN=1AE399BEF556761E6B2998C4993D5CBF5EE2BBFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:03:6c:3b:5b:35:23:38:0e:6c:cb:87:be:
11:fd:c0:c7:d2:f7:3d:40:e7:4d:08:f0:09:e9:61:
42:60:e2:40:58:08:82:6d:6f:e0:e1:1e:33:56:52:
e6:e0:70:3a:52:60:d3:12:2b:84:5c:a1:f8:3d:f7:
89:27:1c:42:68:04:95:6b:92:b2:5d:98:61:91:29:
ec:6a:67:3c:2d:7e:c3:b9:fe:91:d8:e3:fa:a6:25:
5a:74:f2:af:34:e9:23:5b:eb:e8:ab:05:7e:38:ac:
b4:4c:09:40:97:cf:fd:3c:3b:b1:c6:94:3a:50:b9:
e8:0a:39:fe:0c:a1:4d:6d:f5:36:6b:55:c6:c4:5e:
a9:6a:92:ba:96:85:85:ce:f4:1e:15:a3:2a:ec:4f:
c2:cd:2f:7e:0d:93:0f:93:41:96:73:ae:b2:f4:19:
b6:91:66:53:7a:4e:aa:b4:fd:d4:2d:52:04:7e:4c:
51:80:55:de:10:a7:3a:95:bb:d7:39:29:f9:a2:12:
88:73:26:49:81:f6:d7:b4:af:4d:98:e6:5c:13:5e:
5c:d4:e2:da:f1:4d:f4:95:e9:32:ff:53:a4:41:1e:
77:5d:91:ce:0d:1d:13:71:cd:ea:8e:9d:05:19:a8:
19:cf:62:a8:4b:19:d3:6e:27:1e:8b:83:65:c4:fe:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E3:99:BE:F5:56:76:1E:6B:29:98:C4:99:3D:5C:BF:5E:E2:BB:FD
X509v3 Authority Key Identifier:
keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:a2:e5:70:9e:a6:72:af:f0:68:bb:a4:71:83:fe:21:53:
ae:14:2c:62:e0:fc:25:59:8d:b3:68:32:4c:db:4f:61:5d:5a:
fb:dd:f7:4c:56:8e:70:33:2a:c0:4a:23:42:a2:f6:a4:04:16:
02:1c:b2:40:d7:73:be:42:2f:92:db:44:14:a3:aa:06:31:a9:
4b:43:dd:9b:a5:db:df:63:49:4d:b9:e5:c0:8e:4e:3c:7d:fe:
ea:62:27:77:62:b3:87:1f:24:de:09:ed:6a:d9:bb:7b:ee:1e:
ab:75:e4:b3:f1:f8:8a:81:4a:65:6a:75:05:ba:e2:20:74:d1:
7e:6b:0b:99:68:ff:29:eb:e8:41:21:b7:25:2b:57:51:77:9a:
47:a1:d7:38:e1:79:64:b0:57:fa:87:a1:7d:0f:97:d0:34:8f:
e3:03:1a:c9:f0:f9:2f:5f:44:7e:66:9e:c1:93:00:2b:67:11:
eb:2c:f5:13:30:ad:96:f9:f7:9d:84:17:2e:fe:ba:21:48:89:
58:e9:1f:08:7c:a1:1c:da:12:a3:ab:dc:8a:8f:91:7a:56:de:
67:6f:bf:a5:e1:ad:3d:89:b8:11:d9:96:94:fa:da:47:12:66:
e1:34:a2:d8:f1:73:37:8e:63:e9:c3:1b:f7:f9:7f:55:94:ec:
f4:97:ae:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUfTYv/yYabT6R6ygNHN7KV8w5UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4
NTQ2NzAwNDAeFw0yNjA5MjQwMTQyNTdaFw0yNjA5MjUwNDAwNTdaMDMxMTAvBgNV
BAMTKDFBRTM5OUJFRjU1Njc2MUU2QjI5OThDNDk5M0Q1Q0JGNUVFMkJCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3gNsO1s1IzgObMuHvhH9wMfS
9z1A500I8AnpYUJg4kBYCIJtb+DhHjNWUubgcDpSYNMSK4Rcofg994knHEJoBJVr
krJdmGGRKexqZzwtfsO5/pHY4/qmJVp08q806SNb6+irBX44rLRMCUCXz/08O7HG
lDpQuegKOf4MoU1t9TZrVcbEXqlqkrqWhYXO9B4VoyrsT8LNL34Nkw+TQZZzrrL0
GbaRZlN6Tqq0/dQtUgR+TFGAVd4QpzqVu9c5KfmiEohzJkmB9te0r02Y5lwTXlzU
4trxTfSV6TL/U6RBHnddkc4NHRNxzeqOnQUZqBnPYqhLGdNuJx6Lg2XE/pv9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGuOZvvVWdh5rKZjEmT1cv17iu/0wHwYDVR0j
BBgwFoAUXAwBZcIgIza637kkfjjQyYVGcAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2U1MTZlNmUtYzY3OS00ZTUwLWI3YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVD
MjIwMjMzNkJBREZCOTI0N0UzOEQwQzk4NTQ2NzAwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QzBDMDE2NUMyMjAyMzM2QkFERkI5MjQ3RTM4RDBDOTg1NDY3
MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3
YWItMWU0MDY3OTEyNWNkLzAvNUMwQzAxNjVDMjIwMjMzNkJBREZCOTI0N0UzOEQw
Qzk4NTQ2NzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAjIouVwnqZyr/Bou6Rxg/4hU64ULGLg/CVZ
jbNoMkzbT2FdWvvd90xWjnAzKsBKI0Ki9qQEFgIcskDXc75CL5LbRBSjqgYxqUtD
3Zul299jSU255cCOTjx9/upiJ3dis4cfJN4J7WrZu3vuHqt15LPx+IqBSmVqdQW6
4iB00X5rC5lo/ynr6EEhtyUrV1F3mkeh1zjheWSwV/qHoX0Pl9A0j+MDGsnw+S9f
RH5mnsGTACtnEess9RMwrZb5952EFy7+uiFIiVjpHwh8oRzaEqOr3IqPkXpW3mdv
v6XhrT2JuBHZlpT62kcSZuE0otjxczeOY+nDG/f5f1WU7PSXrsk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:36:05 2026 by rpki-client