
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json)
Hash identifier: t/lc7b5pz8MioVDQs/lDigAhr4C9K01yAiOabyjA6ao=
Subject key identifier: AC:16:26:29:F9:43:CD:3F:49:C5:AD:2A:5B:3F:B9:03:88:C7:10:D7
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial: 2288CC84049FF086FC523A79B088DED353B4E90F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 09:00:26 +0000
Manifest this update: Fri 24 Jul 2026 08:55:26 +0000
Manifest next update: Sat 25 Jul 2026 09:01:26 +0000
Files and hashes: 1: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: DRAJ8TYrGNyGcZrHSO+9CCG0qjv5CGV0SP5N1k7ypOg=)
2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:88:cc:84:04:9f:f0:86:fc:52:3a:79:b0:88:de:d3:53:b4:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
Validity
Not Before: Jul 24 08:55:26 2026 GMT
Not After : Jul 25 09:01:26 2026 GMT
Subject: CN=AC162629F943CD3F49C5AD2A5B3FB90388C710D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:77:10:01:f5:44:35:0e:09:12:70:05:ae:
6d:77:72:79:92:f5:8d:9a:bd:4e:12:e9:c4:26:d0:
8e:eb:74:ed:c9:47:ed:a8:be:5c:4a:41:e0:1b:93:
16:ad:85:75:4e:2d:42:21:db:b5:60:93:88:f1:09:
22:14:a4:74:7f:bd:ff:44:bc:5c:b2:28:99:c2:fd:
5f:65:00:05:38:8c:dc:a8:e1:06:8e:23:33:31:0f:
f5:42:72:68:5a:90:83:ed:15:31:b0:6a:df:bc:d4:
b8:8c:87:20:19:02:46:43:1b:8e:49:b8:7f:71:72:
9b:64:19:ad:2e:d2:80:7f:cc:9f:af:4d:38:a0:8b:
8d:e7:81:59:75:f1:52:d1:b8:66:0c:71:fb:21:55:
3b:0f:b9:25:0a:d3:c3:89:65:98:c6:4c:c5:5d:89:
4d:f8:85:0b:a9:65:84:f2:1f:30:6d:b9:3e:9d:d2:
26:31:be:da:b1:18:2d:a4:11:9c:ab:30:44:80:8b:
c6:55:10:c1:48:12:cf:36:25:2c:12:bb:80:f9:0b:
6d:bb:54:4b:0e:58:d1:85:ef:41:a9:2e:d6:52:62:
7f:3a:23:18:61:f3:ea:0d:24:3f:12:5c:b1:ce:e6:
80:ca:35:e0:ae:f7:43:db:8c:fe:01:f5:b9:d1:0e:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:26:29:F9:43:CD:3F:49:C5:AD:2A:5B:3F:B9:03:88:C7:10:D7
X509v3 Authority Key Identifier:
keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a7:0e:93:90:18:c6:e9:58:d4:8c:ef:d1:03:a2:33:8b:1b:
72:17:d9:dd:25:34:26:79:62:19:80:17:a8:a9:6e:b1:0c:89:
ff:0d:69:8e:07:9e:0c:15:cc:3a:27:70:c2:33:2f:91:5c:1d:
01:7c:65:dd:75:46:aa:d8:d6:b2:38:6f:ce:cc:89:19:e2:03:
12:1a:15:e7:f7:cf:2c:9a:41:a6:63:f0:ef:0f:b2:42:38:5e:
83:49:79:be:6a:7b:f2:52:b6:79:e9:4d:ca:81:ba:b7:f8:be:
7b:8b:c2:ff:ed:0a:c7:85:5a:ce:dd:96:ef:d1:8d:73:d0:70:
cc:e7:36:6d:41:e7:c7:42:fb:bc:e1:8f:da:9b:c7:c4:e8:65:
d6:9d:dc:4f:cf:66:1f:23:ed:a5:1e:7d:01:a2:47:e0:34:d9:
1f:99:d1:22:c8:4d:a3:60:79:27:c4:3b:da:95:07:b8:31:3e:
2e:63:cb:7c:5e:6b:dc:be:22:d6:25:a5:20:7a:95:a9:c9:dd:
13:d4:84:31:fe:87:01:c8:69:3a:1e:eb:f7:94:3f:f1:39:4b:
de:15:6e:4f:31:e4:58:31:ae:5f:5b:87:8e:13:8f:a2:05:6b:
f8:22:0e:76:1d:ae:d0:be:5c:0f:33:1e:99:45:ce:00:f2:17:
71:82:f5:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIojMhASf8Ib8Ujp5sIje01O06Q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQzQzMy
NDkzMUQwNTAeFw0yNjA3MjQwODU1MjZaFw0yNjA3MjUwOTAxMjZaMDMxMTAvBgNV
BAMTKEFDMTYyNjI5Rjk0M0NEM0Y0OUM1QUQyQTVCM0ZCOTAzODhDNzEwRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSRncQAfVENQ4JEnAFrm13cnmS
9Y2avU4S6cQm0I7rdO3JR+2ovlxKQeAbkxathXVOLUIh27Vgk4jxCSIUpHR/vf9E
vFyyKJnC/V9lAAU4jNyo4QaOIzMxD/VCcmhakIPtFTGwat+81LiMhyAZAkZDG45J
uH9xcptkGa0u0oB/zJ+vTTigi43ngVl18VLRuGYMcfshVTsPuSUK08OJZZjGTMVd
iU34hQupZYTyHzBtuT6d0iYxvtqxGC2kEZyrMESAi8ZVEMFIEs82JSwSu4D5C227
VEsOWNGF70GpLtZSYn86Ixhh8+oNJD8SXLHO5oDKNeCu90PbjP4B9bnRDj2dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrBYmKflDzT9Jxa0qWz+5A4jHENcwHwYDVR0j
BBgwFoAU/15ZvURa5zHljtRxhIBDwySTHQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzc3MGZlZWItMmNhYS00NzZhLWFiNDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0
NDVBRTczMUU1OEVENDcxODQ4MDQzQzMyNDkzMUQwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRjVFNTlCRDQ0NUFFNzMxRTU4RUQ0NzE4NDgwNDNDMzI0OTMx
RDA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi
NDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQz
QzMyNDkzMUQwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACenDpOQGMbpWNSM79EDojOLG3IX2d0lNCZ5
YhmAF6ipbrEMif8NaY4HngwVzDoncMIzL5FcHQF8Zd11RqrY1rI4b87MiRniAxIa
Fef3zyyaQaZj8O8PskI4XoNJeb5qe/JStnnpTcqBurf4vnuLwv/tCseFWs7dlu/R
jXPQcMznNm1B58dC+7zhj9qbx8ToZdad3E/PZh8j7aUefQGiR+A02R+Z0SLITaNg
eSfEO9qVB7gxPi5jy3xea9y+ItYlpSB6lanJ3RPUhDH+hwHIaToe6/eUP/E5S94V
bk8x5Fgxrl9bh44Tj6IFa/giDnYdrtC+XA8zHplFzgDyF3GC9S0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:10 2026 by rpki-client