
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
File: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json)
Hash identifier: PFojVxg8LjXcVvVcUTIWxbUJT4IqszhtFR3PF48ROKA=
Subject key identifier: 34:99:88:88:00:93:66:42:A7:66:2D:E4:2A:2A:69:75:FF:42:CD:8E
Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
Certificate issuer: /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Certificate serial: 014FF7EFBE7D9DA46C457C53C6E0F131138C996A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:31:09 +0000
Manifest this update: Tue 12 May 2026 16:26:09 +0000
Manifest next update: Wed 13 May 2026 20:05:09 +0000
Files and hashes: 1: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=)
2: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=)
3: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: 0BT1D/IfzSjbcbv8k+DffmRg92BNHEAUEPCOi7zFSRU=)
4: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4f:f7:ef:be:7d:9d:a4:6c:45:7c:53:c6:e0:f1:31:13:8c:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Validity
Not Before: May 12 16:26:09 2026 GMT
Not After : May 13 20:05:09 2026 GMT
Subject: CN=3499888800936642A7662DE42A2A6975FF42CD8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:98:9e:e6:b7:69:e5:a7:73:23:00:f4:cc:
83:13:69:ad:61:3b:57:34:51:eb:f1:28:cb:43:12:
b1:1f:d5:36:a1:59:48:2d:d0:47:f0:3b:f2:54:9f:
71:fd:a7:90:6d:f9:ce:05:8e:3e:26:f9:2c:3e:bc:
c3:75:b0:ee:4f:47:06:be:93:7e:c5:03:44:96:de:
67:5c:ca:2b:4b:7e:aa:79:3b:e8:f4:fe:66:c6:fb:
a7:47:92:e9:b9:ec:31:32:52:4e:52:35:1b:f0:f3:
08:7b:6d:a1:8d:44:34:2f:c7:ac:d2:9e:47:f6:d8:
50:21:0a:a5:74:40:54:78:43:3a:1b:af:5e:8d:a5:
04:5e:ba:c0:0c:bd:f5:2c:86:07:4e:55:3e:be:89:
59:4b:05:b1:5c:3a:22:df:45:07:40:1a:f3:5c:04:
9a:13:01:2c:af:b1:8e:55:e1:ce:35:20:87:79:06:
86:0d:50:c9:be:e1:4d:3a:e4:59:55:ac:6c:0a:6a:
a5:b3:30:6f:15:66:5a:8c:d5:a3:09:f9:a0:94:58:
2b:34:dc:58:d2:d8:d6:86:d4:36:b5:33:58:f5:9b:
09:56:29:cf:85:f2:2e:8d:53:2d:f5:96:6e:b5:85:
e2:31:45:4f:79:47:1b:b4:38:f2:a2:22:dc:01:81:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:88:88:00:93:66:42:A7:66:2D:E4:2A:2A:69:75:FF:42:CD:8E
X509v3 Authority Key Identifier:
keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:94:c5:ab:9c:ef:4a:04:bb:70:3f:5b:c3:bd:7c:96:a0:
06:82:80:89:3e:23:13:31:b6:c5:0b:8a:95:06:0d:86:9b:6e:
c7:84:41:21:57:f9:e2:d2:fd:8e:91:dc:ff:b3:d9:21:b3:0e:
60:03:65:7d:bc:67:8f:0b:38:3a:1a:22:7b:3b:67:f3:40:08:
4b:1e:1c:90:83:65:47:ca:70:37:8a:32:cc:a5:40:fa:19:39:
89:2a:d9:12:83:b8:e2:ef:79:62:b7:60:ad:23:d5:d3:30:fa:
6f:bc:ab:2b:7e:fe:55:e7:e5:ae:99:7b:4f:7b:35:38:e4:df:
65:d4:e7:4c:a5:c4:4f:86:a5:b0:ea:c9:e4:b2:2c:46:5b:bb:
b1:bd:5f:a4:9c:3a:38:dd:12:3e:3b:4b:e7:8a:ab:87:d1:97:
53:cd:c6:d9:75:11:4b:48:af:85:55:5c:0b:30:96:23:78:da:
58:22:4c:95:f0:49:ac:cc:b2:41:17:39:2e:04:c0:8f:7f:cf:
00:65:dd:44:2a:6c:d1:60:3e:68:94:7b:ee:6f:af:59:ca:2c:
2c:a4:97:64:78:37:31:ae:ba:75:82:9d:8f:1b:bf:d5:5d:68:
2a:61:3f:57:57:ff:9d:c2:1e:85:cf:a7:ec:79:08:de:82:42:
40:61:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:13 2026 by rpki-client