
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json)
Hash identifier: t/iCN7a0U+a+irsoyI0aQ7CbY6I8gA/BzE8FKd0TlSg=
Subject key identifier: 10:2E:16:FC:16:93:F4:87:B8:BF:C9:2E:31:AE:5D:20:7C:9F:89:D9
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial: 08E2AA402FE96DF8F5D03FF1E9E75BFD090E18DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:35:42 +0000
Manifest this update: Tue 12 May 2026 19:30:42 +0000
Manifest next update: Wed 13 May 2026 22:06:42 +0000
Files and hashes: 1: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: EgBPtt/efDYU5GKYte73q95MH1gv1Oe8ICVhlXa+Vu8=)
2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e2:aa:40:2f:e9:6d:f8:f5:d0:3f:f1:e9:e7:5b:fd:09:0e:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
Validity
Not Before: May 12 19:30:42 2026 GMT
Not After : May 13 22:06:42 2026 GMT
Subject: CN=102E16FC1693F487B8BFC92E31AE5D207C9F89D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:53:cb:35:be:43:5e:30:d5:ec:e1:bd:f0:
fb:15:e2:9d:3d:91:11:4a:ba:e2:f7:89:a3:9a:ae:
f8:1a:4f:bf:14:7a:1f:7d:23:62:88:b1:b8:80:8a:
48:ab:ad:e7:1e:d5:71:27:f5:cc:75:e4:71:28:5a:
7d:62:84:54:4d:4f:08:f2:28:b3:fa:77:79:d9:cd:
66:11:67:e5:1e:ef:93:58:a5:7d:65:f7:6b:af:fd:
14:c3:ac:b5:33:76:ba:0d:3f:df:0c:79:f4:2d:6d:
6e:78:02:6f:ea:f0:3e:80:d9:1e:3c:aa:c2:28:5a:
94:54:63:d6:f7:90:18:d3:f2:98:a6:7b:98:e6:cd:
b9:8c:9b:05:e6:69:bd:1e:bd:f6:9c:84:fe:05:9a:
5d:ed:31:78:b9:bc:e3:6a:dc:8d:53:81:64:1b:81:
50:61:5d:ca:7c:7e:97:72:71:b0:f2:2d:9f:8f:5d:
cb:a7:8e:0b:48:04:e2:83:ce:47:48:83:dd:46:ce:
b8:67:eb:51:b0:67:70:1e:3d:a2:71:86:dd:36:b1:
15:5e:ab:5b:e9:65:ab:3d:57:5d:e0:ab:0a:62:c4:
b4:8c:33:55:43:29:61:e3:d3:a7:fe:4a:17:99:d8:
be:27:06:0e:eb:5a:a6:2a:e5:15:9e:b6:91:4a:d0:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:16:FC:16:93:F4:87:B8:BF:C9:2E:31:AE:5D:20:7C:9F:89:D9
X509v3 Authority Key Identifier:
keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2c:a1:d1:86:07:66:aa:da:1c:3a:72:6c:3d:f0:86:1b:e9:
83:2d:cb:b2:6a:57:7c:04:c3:cb:82:19:b8:73:fd:2e:cd:ea:
e1:73:74:eb:02:6c:ae:a0:22:bf:33:84:a2:03:a3:c2:21:5d:
c3:a3:a1:db:8e:c8:06:6e:3c:3a:78:89:68:17:7e:00:f7:a9:
81:93:e2:44:bb:4b:ab:92:f4:30:5e:2d:f2:cf:a2:90:69:41:
4d:0a:2f:c8:7c:e6:73:28:d9:7f:3c:3b:58:46:40:73:e7:a2:
92:96:b5:d5:35:fe:f5:08:d1:a7:32:cf:ec:1c:43:af:ae:4d:
05:6b:4e:dd:d2:db:19:8b:23:5a:e9:b1:73:e2:1d:a0:ca:db:
6e:f7:9c:e4:d6:08:81:1a:6e:f7:d3:f1:04:f2:5e:f3:5a:85:
ce:91:cb:f0:87:37:05:33:e5:cf:26:46:9c:a4:18:95:e9:87:
a5:ba:8c:08:19:a6:eb:63:a8:21:58:a5:4b:ad:63:dd:d7:d5:
4a:e8:e7:0c:df:8c:aa:dd:20:80:a6:3f:1e:19:33:4b:04:d9:
92:8c:00:cf:68:c0:82:24:0e:64:69:52:5a:d7:47:98:ae:53:
00:0a:82:f2:10:82:78:8f:20:95:07:04:de:b4:12:0b:9e:e4:
11:cc:8b:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCOKqQC/pbfj10D/x6edb/QkOGNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQzQzMy
NDkzMUQwNTAeFw0yNjA1MTIxOTMwNDJaFw0yNjA1MTMyMjA2NDJaMDMxMTAvBgNV
BAMTKDEwMkUxNkZDMTY5M0Y0ODdCOEJGQzkyRTMxQUU1RDIwN0M5Rjg5RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLAlPLNb5DXjDV7OG98PsV4p09
kRFKuuL3iaOarvgaT78Ueh99I2KIsbiAikirrece1XEn9cx15HEoWn1ihFRNTwjy
KLP6d3nZzWYRZ+Ue75NYpX1l92uv/RTDrLUzdroNP98MefQtbW54Am/q8D6A2R48
qsIoWpRUY9b3kBjT8pime5jmzbmMmwXmab0evfachP4Fml3tMXi5vONq3I1TgWQb
gVBhXcp8fpdycbDyLZ+PXcunjgtIBOKDzkdIg91Gzrhn61GwZ3AePaJxht02sRVe
q1vpZas9V13gqwpixLSMM1VDKWHj06f+SheZ2L4nBg7rWqYq5RWetpFK0FRNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEC4W/BaT9Ie4v8kuMa5dIHyfidkwHwYDVR0j
BBgwFoAU/15ZvURa5zHljtRxhIBDwySTHQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzc3MGZlZWItMmNhYS00NzZhLWFiNDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0
NDVBRTczMUU1OEVENDcxODQ4MDQzQzMyNDkzMUQwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRjVFNTlCRDQ0NUFFNzMxRTU4RUQ0NzE4NDgwNDNDMzI0OTMx
RDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi
NDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQz
QzMyNDkzMUQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEIsodGGB2aq2hw6cmw98IYb6YMty7JqV3wE
w8uCGbhz/S7N6uFzdOsCbK6gIr8zhKIDo8IhXcOjoduOyAZuPDp4iWgXfgD3qYGT
4kS7S6uS9DBeLfLPopBpQU0KL8h85nMo2X88O1hGQHPnopKWtdU1/vUI0acyz+wc
Q6+uTQVrTt3S2xmLI1rpsXPiHaDK2273nOTWCIEabvfT8QTyXvNahc6Ry/CHNwUz
5c8mRpykGJXph6W6jAgZputjqCFYpUutY93X1Uro5wzfjKrdIICmPx4ZM0sE2ZKM
AM9owIIkDmRpUlrXR5iuUwAKgvIQgniPIJUHBN60Egue5BHMi5g=
-----END CERTIFICATE-----
Generated at Wed May 13 10:39:50 2026 by rpki-client