
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft
File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json)
Hash identifier: iXxpuzgZxforohMcLJtRJQ2PRN10TdMxbzSGF0rrH50=
Subject key identifier: 73:B3:05:2A:86:CC:9D:46:7B:E2:92:CF:D2:99:7F:9D:7D:EF:EB:1A
Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A
Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A
Certificate serial: 5C25F080500FCA3D639AE3B484484A5E8C1D6843
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:47:43 +0000
Manifest this update: Thu 23 Jul 2026 22:42:43 +0000
Manifest next update: Sat 25 Jul 2026 01:36:43 +0000
Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=)
2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=)
3: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: OuiuRRjCV+4bfOuu+f+SLKoJi5Ngy7kn59oGuXwZVoE=)
4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl
rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:25:f0:80:50:0f:ca:3d:63:9a:e3:b4:84:48:4a:5e:8c:1d:68:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A
Validity
Not Before: Jul 23 22:42:43 2026 GMT
Not After : Jul 25 01:36:43 2026 GMT
Subject: CN=73B3052A86CC9D467BE292CFD2997F9D7DEFEB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:25:6c:af:e4:e7:c2:e1:49:cf:79:2a:35:
b1:bf:ca:37:22:97:86:e6:c4:54:b4:3c:7b:d1:82:
0f:ab:ce:8c:29:34:3f:c5:bd:4d:2a:16:41:52:74:
bb:f6:60:7f:38:1a:56:5a:2c:1a:83:7b:c6:55:6a:
7d:d8:65:8b:ea:8b:e3:47:b0:35:26:3d:3e:b3:ed:
1f:99:57:e2:9a:5a:2a:f0:f8:66:fc:01:c8:26:43:
f7:33:1c:c3:e5:af:96:2b:52:5d:5c:b6:23:f8:07:
ce:d7:c9:29:b9:32:f0:65:86:f6:7e:92:5a:23:ad:
2a:63:3a:63:52:3a:37:3c:41:e7:55:29:a4:2d:13:
d1:e8:78:5b:10:ea:d7:31:07:d9:8f:98:66:1a:16:
d4:67:26:9f:17:70:ae:30:47:8e:9f:51:b1:03:30:
c3:c6:0e:0a:3b:cb:85:07:ca:81:ca:44:4c:e3:55:
c1:58:3f:4d:a6:5d:fc:92:4d:e2:a2:90:80:f7:eb:
df:d0:d7:c2:b0:bc:a5:bd:78:53:4a:36:24:99:a3:
4a:25:91:58:51:18:40:15:c8:38:47:db:95:93:21:
e9:fd:9c:3c:c5:c4:c3:37:b0:b8:8a:81:9e:2b:1e:
a0:5b:e2:f8:69:df:ad:0a:87:b8:27:9b:38:98:3f:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:05:2A:86:CC:9D:46:7B:E2:92:CF:D2:99:7F:9D:7D:EF:EB:1A
X509v3 Authority Key Identifier:
keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:a6:87:ed:06:29:77:d2:07:f7:0f:ca:67:25:03:d9:0c:
ed:78:05:a8:83:c3:b8:68:fd:20:2a:ad:37:9e:2c:f2:8e:1c:
be:60:24:13:ed:c7:a4:35:c8:e3:9a:a5:57:21:10:2f:66:4b:
14:72:39:08:db:fe:bf:08:5d:7a:d5:11:6a:07:67:a5:d2:41:
d6:50:e1:83:ac:4b:36:9d:37:0f:d6:50:63:5b:74:b3:23:0f:
24:78:ed:6c:7b:47:f6:da:d5:52:77:b1:94:3f:74:00:e6:aa:
02:e4:43:9f:ac:4d:8c:1a:3c:c3:80:a3:15:51:05:80:5f:de:
5d:ae:25:68:b2:de:d8:3a:d5:be:5b:36:74:4f:76:6e:08:1b:
04:b4:f3:07:25:33:1d:1b:89:97:06:a3:e5:15:66:fa:7f:94:
dd:31:53:83:13:f0:0c:47:63:4e:62:cb:c6:f0:e7:83:b9:e5:
74:8b:73:fb:d8:e5:f0:93:85:03:e1:32:f7:f3:dc:36:cf:93:
59:02:3b:7f:b3:9c:7d:92:c1:2c:58:1f:ff:66:be:f9:a8:75:
ae:70:6b:d5:15:5f:d4:6f:88:d4:7d:93:e6:35:7a:9b:07:e7:
fa:06:81:85:b5:97:be:68:c5:d0:aa:9a:9c:c9:ff:59:8d:06:
fc:56:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:08 2026 by rpki-client