
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
File: 5935015AB8D2AA07565ACB7B918A50D49090AA26.mft (raw, json)
Hash identifier: KW+BDVz6xKcD88KTNqI3NLvy38mikX8UNqJ6cNh1mnY=
Subject key identifier: 18:50:4D:B8:97:7F:A2:A6:90:DF:9A:DC:97:86:A5:9C:B4:91:EC:C5
Authority key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26
Certificate issuer: /CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
Certificate serial: 3FCB081AF540146CBA95F62B51E35F25B243295A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 06:49:14 +0000
Manifest this update: Thu 24 Sep 2026 06:44:14 +0000
Manifest next update: Fri 25 Sep 2026 09:30:14 +0000
Files and hashes: 1: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: YukTsqh5CPIPhkM3TqJo0K1IkyqlUpFEdp2Xtp+n8JI=)
2: 5935015AB8D2AA07565ACB7B918A50D49090AA26.crl (hash: LJTu+8ml6u9msJy+sFDCaF1pq6fY+9EAwibsHQ2YxXs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl
rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 09:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cb:08:1a:f5:40:14:6c:ba:95:f6:2b:51:e3:5f:25:b2:43:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
Validity
Not Before: Sep 24 06:44:14 2026 GMT
Not After : Sep 25 09:30:14 2026 GMT
Subject: CN=18504DB8977FA2A690DF9ADC9786A59CB491ECC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:f0:93:f7:67:6a:99:ff:22:ba:89:8b:6a:
f4:e6:e0:95:4b:15:9f:21:bb:86:85:e2:28:5d:97:
fc:bd:5c:c5:c5:03:87:8d:06:4a:02:63:31:fe:fb:
33:d1:5d:a6:13:58:ab:37:f6:b4:b4:67:3a:62:b4:
a9:7b:14:81:4b:e6:d2:ac:9e:95:e4:8b:99:8f:92:
0e:34:c2:d6:62:92:1e:06:62:0a:7e:5a:1b:c4:f6:
37:94:e0:5c:3d:12:69:f4:2a:31:7e:f5:26:c4:b0:
e7:36:03:0e:b6:c3:9d:b6:c9:a1:76:a0:18:11:09:
45:f0:3a:f7:d3:36:63:b6:a3:c2:bd:bd:ea:c3:b2:
7a:a8:4c:ed:44:fa:c4:7c:00:ce:88:15:39:8d:d4:
6e:01:af:05:a1:8e:62:da:f7:27:16:46:0a:bb:05:
c2:d8:6e:8a:59:83:3e:a0:de:a9:33:fd:c2:40:1f:
ed:89:b7:f2:78:45:1b:53:24:a3:e1:37:9e:12:dd:
b2:31:cb:7e:40:06:d1:1e:59:0e:de:7f:71:38:27:
16:81:0c:78:87:4e:73:ac:bd:0e:8a:16:7f:a0:45:
c5:c7:2e:92:ae:0d:ff:ab:26:33:a1:3c:08:2a:d9:
70:79:d1:e2:ad:21:27:2f:a9:7a:1b:38:d2:2b:ad:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:50:4D:B8:97:7F:A2:A6:90:DF:9A:DC:97:86:A5:9C:B4:91:EC:C5
X509v3 Authority Key Identifier:
keyid:59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:67:66:71:0b:60:aa:b3:f1:42:b2:cd:2a:60:f9:e6:f6:30:
ed:b9:0d:4e:f5:02:7e:a1:6f:3d:0b:84:46:5f:ed:04:75:18:
7a:f2:31:26:e6:b1:b4:77:07:cd:e9:7e:f2:22:41:89:2c:80:
34:99:5e:de:af:e6:14:ea:44:af:1a:91:ea:7e:d8:59:f4:84:
14:1a:11:1c:ff:12:c6:9a:4b:22:6e:79:7c:06:b5:10:49:2e:
41:91:61:3e:2f:40:a3:00:f9:9d:3e:46:10:01:c8:08:bf:20:
67:50:04:dd:dd:b2:72:0b:e1:9e:4a:3f:14:24:59:4d:1e:c0:
9f:0e:7a:7e:9d:2e:18:95:6f:a7:8c:f8:05:7e:33:2b:74:fe:
b0:94:37:8a:71:f8:95:68:df:e8:16:76:68:0b:d7:38:9e:d4:
a2:3f:73:1e:44:00:04:45:20:8c:98:58:77:09:a2:d8:58:88:
db:58:9d:78:b4:0b:f6:8f:5e:0d:ff:d8:38:d9:bd:4e:0e:9c:
b8:6a:3b:6e:b8:5c:68:51:b4:b3:27:7e:b4:59:a7:15:88:27:
bd:84:ef:ad:0c:ad:56:a5:b4:15:ef:7a:82:16:43:e8:2c:df:
c5:9d:10:85:ce:d5:f7:1e:e6:84:9a:e7:f9:df:2d:a5:6c:b7:
72:52:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:27:21 2026 by rpki-client