
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
File: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json)
Hash identifier: mJN+v2EUJySU8SoPwI0LRwxo4PKwEDkwGK2Et4JppAU=
Subject key identifier: E3:4B:5E:63:9A:C1:07:E5:B7:C4:87:A6:43:21:06:CF:73:A1:CC:B6
Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Certificate serial: 311951D5CE82EA0FBD8E680AC85E6A91A0B90D98
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 16:15:03 +0000
Manifest this update: Sat 26 Sep 2026 16:10:03 +0000
Manifest next update: Sun 27 Sep 2026 16:46:03 +0000
Files and hashes: 1: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=)
2: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=)
3: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=)
4: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: A7cr0PTaSnEYJC6wO6nrlRldB/e8qWxXS3vI881Z1nM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:19:51:d5:ce:82:ea:0f:bd:8e:68:0a:c8:5e:6a:91:a0:b9:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Validity
Not Before: Sep 26 16:10:03 2026 GMT
Not After : Sep 27 16:46:03 2026 GMT
Subject: CN=E34B5E639AC107E5B7C487A6432106CF73A1CCB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:dd:74:83:1d:35:6d:8a:f6:d9:5a:a7:29:
05:19:06:1c:c8:e5:ca:e9:7f:be:23:31:69:ee:cd:
b7:e9:de:0c:8e:9b:43:c7:5b:5b:92:9d:18:1d:ae:
e5:d1:b0:44:2c:93:32:eb:66:3f:d8:4b:62:ca:1f:
b9:c0:f3:c2:28:4f:15:23:67:0c:80:22:c6:46:85:
2d:a1:8f:e6:b5:a9:04:ce:84:75:ad:5c:a4:03:34:
16:18:a9:63:1f:8d:59:4e:25:d4:69:3c:42:da:ae:
9e:a0:9d:0c:c5:07:cb:be:7c:71:df:75:5f:8a:c6:
67:2f:0b:ec:6c:ff:cd:37:9e:3f:d7:db:dd:a9:c6:
d4:1b:e4:c0:c4:1c:ae:93:cb:05:d4:96:13:51:47:
8a:6b:29:6f:42:eb:51:4b:9e:35:fc:bc:08:00:57:
08:1b:62:84:10:b6:5e:04:35:64:e7:c6:f1:50:08:
c7:b2:23:bb:a6:e6:8d:61:13:54:86:c8:37:50:a6:
5e:61:6e:2d:2b:95:5f:b9:d2:5e:5b:96:d9:8d:ca:
94:3a:15:c3:5f:0e:37:03:c6:7e:16:d7:2b:8f:b4:
f5:1e:c1:5e:c4:cc:10:6c:ab:de:a0:88:6b:e5:7d:
bc:89:8f:f2:74:3f:c7:06:3d:9f:f5:d5:9c:be:82:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:5E:63:9A:C1:07:E5:B7:C4:87:A6:43:21:06:CF:73:A1:CC:B6
X509v3 Authority Key Identifier:
keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b3:ee:46:f2:06:3d:4f:b9:1e:37:16:73:10:fa:a6:ef:57:
de:ea:13:25:a8:73:61:a8:9a:c4:66:ac:6f:ca:c8:d3:42:ac:
f9:10:64:00:c8:99:69:47:62:ad:1a:c0:2b:fe:f3:e4:79:59:
93:2b:d3:b0:88:4d:90:c2:59:0e:14:f7:7d:dd:54:d8:07:7c:
99:24:9b:17:b6:ba:2b:b9:9d:b8:a5:76:88:1a:b3:fd:4a:30:
3d:bc:c1:b7:3c:93:64:85:46:d5:05:06:e2:d6:6d:ed:00:e7:
4f:3e:0b:91:88:40:1d:40:12:57:17:7e:3b:01:ea:99:34:f5:
aa:14:bb:ea:22:2e:68:a5:ac:8f:09:b2:32:55:ef:4d:ab:bd:
9c:9f:8b:a9:13:82:ce:54:54:71:4b:f0:89:1d:4a:8a:89:bc:
95:9b:11:fb:ee:bd:5c:55:cf:5e:7b:47:29:e5:5d:7b:f2:e6:
a6:e5:e9:30:96:e7:24:0c:ce:e4:51:5f:85:99:49:4c:d1:e7:
3a:72:2a:90:2e:c2:5d:90:f3:d8:88:ee:ce:25:5f:39:d9:bb:
c6:d1:cf:a6:b2:e9:4f:c9:7a:65:cb:32:57:af:37:37:5e:9d:
2e:f3:2b:db:9d:da:d5:eb:95:fe:59:97:ad:6b:70:5b:68:cc:
09:b7:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:59:45 2026 by rpki-client