
$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft
File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json)
Hash identifier: s3McImRPBE3vgZXQ2Z92gaKxe5OLJ0rW6uENBDjJtR8=
Subject key identifier: 7E:6B:11:F9:0B:C6:31:CB:8D:73:01:87:F9:84:5D:0D:E4:BA:F4:74
Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF
Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF
Certificate serial: 55B4A9F63A9D7E4AE0E326DF6017321138DFB6EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 23:59:02 +0000
Manifest this update: Thu 23 Jul 2026 23:54:02 +0000
Manifest next update: Sat 25 Jul 2026 01:25:02 +0000
Files and hashes: 1: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: SOKqkXQOg53/mz7Lpem20BnNsDiJCIWe8A5KZJlJS5g=)
2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl
rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b4:a9:f6:3a:9d:7e:4a:e0:e3:26:df:60:17:32:11:38:df:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF
Validity
Not Before: Jul 23 23:54:02 2026 GMT
Not After : Jul 25 01:25:02 2026 GMT
Subject: CN=7E6B11F90BC631CB8D730187F9845D0DE4BAF474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:ed:12:50:0b:fc:18:dc:bb:e3:b3:6d:ee:
bc:ae:0e:47:2b:91:ea:3f:9a:96:4c:7f:92:c6:a4:
1f:95:35:f3:b5:19:b7:3f:be:16:1b:e2:1d:60:74:
65:10:29:9d:78:46:66:10:97:99:4c:2b:87:f1:67:
3b:c8:5b:f7:a9:04:6b:ac:f5:66:07:18:2d:de:57:
84:53:32:b7:4a:3b:11:ac:d6:ac:5c:16:b6:1e:c6:
bb:d4:4d:da:ae:61:42:d8:14:39:08:33:57:ec:8a:
7c:2c:f1:07:26:61:59:08:f2:32:2f:1f:85:81:11:
63:14:a8:de:5e:00:43:ac:64:5a:62:35:33:94:ec:
e9:b2:bf:12:25:c6:a8:dc:8c:3e:77:dc:fd:68:68:
70:22:76:4d:f0:44:87:24:29:71:11:25:45:0e:04:
f1:6d:cc:b4:fd:66:ec:37:cc:f4:e5:d3:bd:3a:5e:
ae:68:a3:bc:53:73:0b:a7:3c:a8:5c:6d:bc:e9:22:
05:d3:1c:23:c6:e3:f6:8e:44:9d:f4:17:25:bf:bb:
aa:29:21:b3:aa:87:d9:d8:1f:a5:8a:73:6a:8a:3d:
1d:7b:fa:0d:4f:c2:e7:45:20:2c:68:25:19:5f:6f:
ad:93:28:9b:d1:85:51:a2:b6:a9:e1:16:38:6a:ed:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:11:F9:0B:C6:31:CB:8D:73:01:87:F9:84:5D:0D:E4:BA:F4:74
X509v3 Authority Key Identifier:
keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e9:5a:bd:30:84:17:30:4f:d1:fb:7f:f8:6f:19:59:73:3d:
a7:36:6d:b0:87:9e:dd:24:a0:c8:f8:8f:5a:34:23:8a:38:d9:
d6:25:6c:9b:49:49:d0:33:77:d6:74:22:9c:03:2e:67:d0:37:
c4:0a:c5:44:5f:d5:35:89:14:e3:3b:10:ac:bc:92:7f:7f:2f:
dd:19:45:9f:ee:0b:52:21:00:fd:c5:18:b5:7e:bc:64:ae:17:
8b:3a:47:64:96:eb:44:19:79:32:14:cf:08:cb:f9:88:10:75:
87:15:46:20:8c:80:af:b5:8a:af:d1:ec:c5:2b:a0:76:7d:6e:
8f:39:09:6e:ed:95:ac:a1:13:b2:33:6b:3d:e2:75:72:5e:77:
d4:ba:31:2d:ec:5c:3b:c0:c8:e5:93:00:41:18:f3:83:81:1e:
49:80:dc:f1:dd:ee:39:43:36:d8:83:6f:5e:c8:cd:3b:41:f8:
b7:6a:de:c0:52:37:df:df:77:86:4a:1c:51:74:3e:9d:7d:28:
61:9c:e4:bc:c1:de:cb:67:68:42:f9:67:02:5f:64:a9:15:d6:
61:7d:94:a0:a9:e2:5d:84:b7:fe:f5:7d:07:d6:b4:b5:c4:be:
4e:fb:6e:7d:99:f7:78:f1:77:3b:85:8a:93:70:34:76:9d:11:
6a:7d:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:15 2026 by rpki-client