
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
File: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft (raw, json)
Hash identifier: fGzrbFNAOEyTNwAa9zbU7nNEuNIkdq2CIxay/aBIam4=
Subject key identifier: 71:10:FD:D4:94:E8:C2:4D:46:36:16:B3:D8:4C:2C:7B:D6:85:73:85
Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
Certificate issuer: /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Certificate serial: 0E400775E1E58FDFE77B1BDE3920707122910D8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:00:10 +0000
Manifest this update: Tue 12 May 2026 21:55:10 +0000
Manifest next update: Thu 14 May 2026 01:48:10 +0000
Files and hashes: 1: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=)
2: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: qU+T/ppZu7pLksCA/CM9lZkM5mfpYBVP5R9hFRPxoSA=)
3: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=)
4: 5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl (hash: DZ0ll+ru8DIm5NbcOE5tgnjMyUwAGuqJQFZguxb0FLU=)
5: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=)
6: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 03GjbFQLnGl1ayimN4oj+A3/RatUprwYfoHZREcuOgQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:40:07:75:e1:e5:8f:df:e7:7b:1b:de:39:20:70:71:22:91:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Validity
Not Before: May 12 21:55:10 2026 GMT
Not After : May 14 01:48:10 2026 GMT
Subject: CN=7110FDD494E8C24D463616B3D84C2C7BD6857385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:44:30:d2:0a:b6:6b:d0:4d:73:82:70:11:
54:3e:bb:77:3c:fe:02:05:eb:e4:ad:da:ce:f3:c4:
d0:ee:91:35:ab:a9:b5:a7:99:9b:dc:58:82:df:99:
8c:67:50:cc:7e:d1:2f:cb:42:a8:9d:b5:ea:33:46:
ec:8e:26:8f:46:a1:ac:48:37:87:07:5f:1a:a8:cf:
6f:a2:82:bc:f2:14:3b:ce:1c:61:2e:42:91:0b:de:
ee:2d:f7:b2:07:66:4e:b2:eb:8c:09:38:8b:20:15:
28:0e:73:73:fa:ff:4d:9a:7a:dd:54:c5:09:6e:9b:
6c:70:a8:a2:94:d5:05:5d:6c:e6:94:36:15:e4:d8:
ff:37:af:bf:fa:78:e4:95:f8:07:e2:50:a3:be:12:
b6:64:e6:a0:ce:65:a3:4d:68:13:74:07:48:46:c4:
98:f4:2f:c3:24:79:d1:d2:0e:14:bd:20:b0:56:73:
f5:39:f8:c2:de:f6:9b:cd:34:dc:7d:8d:7b:25:1b:
79:8e:c5:e5:b8:7e:3f:85:d9:b5:da:35:55:7b:9e:
0a:c9:c0:bf:3c:4d:86:3c:23:e9:43:77:c4:96:bc:
05:e3:db:a8:98:b1:f0:88:2e:9f:a4:8f:89:5a:cf:
63:14:3a:59:17:45:ed:de:cb:35:f6:af:cb:6b:02:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:10:FD:D4:94:E8:C2:4D:46:36:16:B3:D8:4C:2C:7B:D6:85:73:85
X509v3 Authority Key Identifier:
keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:40:38:a6:ac:9c:4a:be:00:16:32:7e:79:ab:d9:ba:e2:2c:
22:4e:91:97:9f:e0:b8:11:34:2e:55:22:51:55:d5:2c:8f:ea:
bd:68:5c:1e:e2:d0:bf:91:cd:15:24:6f:f7:8e:65:7d:9e:87:
41:9f:d8:76:0b:18:b1:cf:6e:f1:58:7e:8f:4f:82:49:b0:f1:
4d:db:43:25:3e:b3:23:92:7c:6f:34:79:35:71:ce:1c:b6:2c:
e8:45:38:9e:5f:ad:b2:87:25:54:81:81:87:14:0f:e5:e0:7b:
47:dd:a8:f7:02:1a:94:a8:43:3b:48:ad:db:1c:be:93:48:2c:
0f:39:05:70:40:f3:6f:bc:37:a1:77:9d:dc:db:8f:50:15:3a:
df:eb:ce:d4:c6:47:cb:cf:31:d7:46:67:4b:8c:54:34:d6:75:
97:4f:e2:b7:71:3d:3c:5a:14:81:be:db:45:d8:ae:86:6f:26:
86:4b:4b:b5:a1:c8:39:a6:dd:93:10:c1:f1:06:33:81:e3:aa:
da:ef:53:bf:6f:b9:7f:6a:06:34:bb:ab:3b:a5:44:e5:0f:d2:
5f:8b:94:d3:ab:e5:30:6d:f5:88:9e:42:1b:a4:bb:cd:24:cc:
4b:e0:8e:e5:e6:00:14:7b:e2:e5:e6:45:dd:67:9c:d2:26:a3:
5a:3b:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:47 2026 by rpki-client