
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft (raw, json)
Hash identifier: J+LpP/8U1WVknUOYGyofaHDWCQvzQJlw/d952wMn71s=
Subject key identifier: 04:0F:FE:77:60:CD:C5:9B:98:74:20:70:99:C4:F4:31:EA:1A:99:5D
Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5
Certificate issuer: /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
Certificate serial: 5B6871A3F8BE56977492C9EEB634D5EC550633A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:46:00 +0000
Manifest this update: Tue 12 May 2026 19:41:00 +0000
Manifest next update: Wed 13 May 2026 22:26:00 +0000
Files and hashes: 1: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=)
2: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl (hash: TBpEYan0bUEuHZveCdrCExGlwtZsK4NULPPRXlz9xPA=)
3: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: 1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=)
4: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 0QGECZtZ4NpVwUmkTwNZiQAD/nvM6N9DYMd+ulfiukw=)
5: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl
rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:68:71:a3:f8:be:56:97:74:92:c9:ee:b6:34:d5:ec:55:06:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
Validity
Not Before: May 12 19:41:00 2026 GMT
Not After : May 13 22:26:00 2026 GMT
Subject: CN=040FFE7760CDC59B9874207099C4F431EA1A995D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:55:d3:90:70:86:a0:f5:39:e5:8a:1b:8e:
39:6f:76:3b:7f:85:be:64:7c:7d:5e:64:82:2c:aa:
52:b4:28:d5:0e:83:9b:18:a6:d9:07:60:25:10:40:
25:08:d0:6c:53:12:c9:1a:ca:8b:0a:dd:76:c8:f3:
90:db:68:4d:12:cb:6e:1f:37:30:33:a0:32:ef:6d:
a2:4d:0c:1e:3f:19:9f:96:26:9b:49:a6:75:9a:6d:
fd:f7:b9:63:f6:7e:fb:b0:f6:62:c0:03:62:be:8a:
ff:85:16:9e:bb:6c:44:b0:3e:85:ef:cc:cd:78:bd:
e1:58:6d:10:93:a9:1f:96:97:50:76:91:04:c9:24:
42:9a:8a:d4:0a:f6:fd:09:ec:39:97:1d:6e:c0:4f:
13:2b:a8:60:36:62:67:33:2a:8d:6b:05:83:1f:3e:
80:eb:80:1d:1a:bb:de:1f:c2:bd:9f:31:eb:65:e8:
a1:41:52:36:bb:d9:5c:f4:2f:b5:d2:a8:1f:0a:dc:
c8:dd:8a:fc:b3:16:11:44:fb:d6:49:c1:00:74:32:
6b:40:08:2d:09:d8:2d:53:9d:49:d0:60:b5:2f:fd:
c2:21:3b:29:bc:92:9e:e9:cc:91:b0:df:9a:38:7a:
6c:e4:5a:08:3c:e5:07:6b:cb:8a:d8:66:5b:f1:c7:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:FE:77:60:CD:C5:9B:98:74:20:70:99:C4:F4:31:EA:1A:99:5D
X509v3 Authority Key Identifier:
keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8a:92:f7:76:4b:c2:d4:87:9e:40:c9:8d:e3:5c:13:bb:6b:
de:94:a5:b6:c7:f1:5a:1d:6e:44:2f:1b:9b:3d:69:ef:85:09:
0a:e9:b2:cf:75:91:3f:d1:c8:29:6b:36:67:69:98:71:94:38:
c2:4c:20:35:26:4d:1e:39:a5:8c:40:c0:20:c1:46:42:13:11:
74:69:3f:54:a5:b6:50:b3:89:40:93:4f:ab:b1:66:63:f9:b2:
07:78:c1:1a:6d:7b:5d:85:ad:c3:be:29:ce:c0:f5:d3:6a:49:
ab:f4:90:b8:86:da:46:c8:4f:26:53:20:f2:b9:bf:a3:7e:08:
22:28:89:cb:9b:de:bd:6d:89:53:c2:17:08:c3:94:d3:83:ce:
47:ec:c4:de:63:b9:4e:dc:bf:c5:d2:8d:75:b9:20:d5:82:cb:
af:8a:d9:34:d1:73:b2:68:5a:6f:9d:d2:e8:b6:1a:37:bc:bd:
d2:76:65:c3:20:38:bb:b3:17:a3:73:d7:f2:79:2e:83:e7:e8:
e0:2c:10:d9:cf:f7:35:3e:74:f9:df:1f:94:ff:c7:9a:bc:a0:
1f:07:30:4f:cc:7c:88:ac:5e:67:83:54:ff:3a:6c:d3:18:f4:
c5:f5:81:19:60:02:0a:0f:cb:27:17:60:e8:dd:bb:85:c4:46:
7b:bc:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:48 2026 by rpki-client