
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft (raw, json)
Hash identifier: /CB+88kJmaUVvkl1j6TttcMMXWM8rGGrLFtHlhY/j8s=
Subject key identifier: BF:57:2A:4E:7E:DB:22:FC:F7:5F:7C:5C:31:88:C8:EE:FF:30:99:E0
Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
Certificate issuer: /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Certificate serial: 61189A7143B715854DC497043BCA1793D2AE518E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 09:36:10 +0000
Manifest this update: Fri 24 Jul 2026 09:31:10 +0000
Manifest next update: Sat 25 Jul 2026 12:56:10 +0000
Files and hashes: 1: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 03GjbFQLnGl1ayimN4oj+A3/RatUprwYfoHZREcuOgQ=)
2: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=)
3: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=)
4: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl (hash: SDCLwY64m3aPhEkDJCmYgbmDAqnfcl+O4/VAfSg8zjI=)
5: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=)
6: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:18:9a:71:43:b7:15:85:4d:c4:97:04:3b:ca:17:93:d2:ae:51:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Validity
Not Before: Jul 24 09:31:10 2026 GMT
Not After : Jul 25 12:56:10 2026 GMT
Subject: CN=BF572A4E7EDB22FCF75F7C5C3188C8EEFF3099E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:38:ba:ee:db:24:5f:bb:3c:45:97:a9:81:
89:db:9b:8e:04:f1:8c:b9:8d:5f:8b:ef:a4:30:8c:
18:d6:12:34:fd:1f:ed:57:f1:db:1b:7f:10:85:e6:
f1:0c:65:ec:f4:34:de:22:10:34:69:0e:d0:74:7e:
c4:65:3a:e3:59:16:7d:f3:93:13:5f:72:1a:1b:c4:
f4:c0:3a:f3:65:b1:a9:a6:7c:49:8e:67:9a:76:ef:
e6:7c:bc:bd:37:50:32:09:63:22:07:9b:ae:4b:9e:
ed:6b:64:de:2e:90:71:ab:43:bc:47:ba:4b:c7:59:
b8:ed:0f:ae:98:7d:34:72:25:4c:71:60:0e:57:28:
51:e9:80:3a:32:07:79:17:1a:0c:38:54:fb:74:55:
cf:4f:48:5b:b1:e6:3c:49:10:69:fa:22:21:60:10:
b1:ad:bf:79:4a:59:c7:72:bc:61:9c:82:be:8d:fd:
e5:39:83:d3:8a:aa:72:c4:f2:cb:4c:88:42:7d:a8:
6a:fd:ed:bb:31:a0:03:93:99:9d:0a:4b:27:a9:7b:
e1:06:75:f0:72:0b:bf:aa:e7:5f:fd:93:ee:ea:4e:
b8:36:a4:3d:2c:ee:b6:ab:85:2e:da:4d:26:ef:7a:
d2:9c:6c:70:54:9b:8e:6d:fb:37:17:d2:02:92:de:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:2A:4E:7E:DB:22:FC:F7:5F:7C:5C:31:88:C8:EE:FF:30:99:E0
X509v3 Authority Key Identifier:
keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:26:d1:97:95:77:b0:3a:ce:b1:ef:48:d1:5a:8c:8b:de:e2:
b7:a1:31:f8:e7:81:c7:67:c6:01:05:ee:a1:d6:ce:19:59:e2:
e7:5e:ea:2d:37:9f:c9:87:f4:46:d9:5a:4f:ab:79:f1:cb:a7:
5e:db:1f:7d:08:7b:4b:73:d2:f7:56:42:16:ba:96:a1:ed:f1:
5b:5b:5b:c7:4b:b5:4d:76:bc:23:4e:9a:5b:07:20:f1:14:ed:
48:ec:db:1b:60:d2:7b:08:fd:d7:48:79:b0:8c:cc:d5:14:ab:
24:f1:ae:5c:6e:ca:de:de:1c:8f:d5:e0:a8:0b:2e:ab:28:7b:
8b:7d:e0:b5:8a:2c:79:cb:ab:d7:7a:78:dc:5a:37:e7:cd:87:
20:66:79:21:65:62:80:1a:f9:17:db:f4:f8:6c:9e:9f:4c:a6:
6d:51:b8:81:0e:b4:af:87:e5:c2:0b:b5:f4:39:62:cc:f5:e0:
c4:5c:d0:2f:4a:5d:a9:f9:05:c3:b6:40:22:cc:fb:27:8e:50:
11:25:84:32:74:f3:49:6c:37:21:77:5c:72:22:7a:55:4b:1f:
88:34:ca:d3:1c:73:1c:ef:26:a0:9a:8d:53:71:5c:0e:ea:7d:
ad:ac:16:93:94:28:c4:6f:d4:55:1f:19:cc:75:37:e4:a0:14:
60:d1:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:12 2026 by rpki-client