
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
File: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft (raw, json)
Hash identifier: /GlvVgNPCfhQTXIMJaqyDvzfpQe5KbcQBVkg8cttZn4=
Subject key identifier: CC:E2:5E:65:2F:79:70:C7:BB:25:15:EB:D4:84:51:96:E3:34:AF:2E
Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
Certificate issuer: /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Certificate serial: 51CAAF7405FA58162304BC65577BE7514FC28428
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:11:56 +0000
Manifest this update: Tue 12 May 2026 20:06:56 +0000
Manifest next update: Wed 13 May 2026 22:09:56 +0000
Files and hashes: 1: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl (hash: Sd6Ei5lo+ufDEBjH7z3eS6J6pruSqopYuecVci0+sT4=)
2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ca:af:74:05:fa:58:16:23:04:bc:65:57:7b:e7:51:4f:c2:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Validity
Not Before: May 12 20:06:56 2026 GMT
Not After : May 13 22:09:56 2026 GMT
Subject: CN=CCE25E652F7970C7BB2515EBD4845196E334AF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:72:8f:8f:55:8d:8a:ed:75:34:6a:08:7d:
2b:ec:d8:73:b2:a2:ee:e1:2a:ff:fe:53:79:2b:8c:
a5:70:18:0f:1d:29:74:c9:86:85:65:a0:99:e1:8d:
a1:f8:95:cf:b0:9a:c3:23:d1:94:ff:62:ef:b8:b7:
75:be:28:d0:1d:6d:ee:73:7d:1b:ab:3b:06:ea:98:
3c:68:13:8e:01:6c:e8:ba:f2:59:44:58:90:e3:61:
31:8a:42:5e:57:19:bd:01:a0:98:d2:f1:07:c3:24:
8c:e9:19:71:5b:ed:1e:8b:c1:ae:6c:4d:3f:ed:20:
24:99:fb:2f:d7:1c:a0:c3:88:f7:09:78:88:f0:2d:
df:9a:c7:62:bc:f4:44:6e:3a:60:bb:50:5d:f0:c9:
5c:ca:e4:b8:5b:f6:02:8a:cf:15:89:d5:64:52:5f:
ec:41:12:ad:49:29:a1:a0:5f:7c:26:bc:98:96:e2:
76:1c:3c:f6:8a:45:38:b3:06:bc:a1:6c:53:b2:cf:
9c:e0:e2:d6:74:e7:c8:a5:0a:d4:b6:94:da:a5:62:
93:d4:68:d1:66:c3:e8:ac:46:2f:c4:8a:17:57:52:
c6:0b:58:51:81:5b:6b:32:45:c0:f2:1d:ec:11:0f:
a0:30:75:d1:aa:4c:0f:44:03:dd:0d:44:c2:bf:db:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:5E:65:2F:79:70:C7:BB:25:15:EB:D4:84:51:96:E3:34:AF:2E
X509v3 Authority Key Identifier:
keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:67:2a:ae:9f:2e:14:e1:9a:3d:05:d3:46:d4:f3:dc:1e:7a:
ae:9f:b7:19:f2:a0:32:7d:49:89:be:3d:b0:eb:53:99:65:18:
75:69:c7:6a:85:6c:a8:a3:ed:c8:62:ad:4a:3b:15:ba:1e:96:
07:f3:b4:a4:52:bf:a9:4a:d1:d1:c1:7a:34:a5:93:b7:10:40:
7d:f0:d6:cf:81:76:80:92:eb:e1:84:7e:2f:18:71:37:3b:2f:
a1:ba:e6:98:a6:f6:0a:06:7f:92:cd:3b:de:f1:68:98:e7:87:
6e:6b:70:0d:bb:1a:49:8a:cf:2f:f4:1c:1e:0e:ce:0e:9b:a2:
0b:5a:fd:dd:68:6f:0f:49:88:73:49:2e:a4:a3:37:6a:f7:ea:
5d:5c:b1:61:8e:16:ba:e6:5e:3a:cf:b9:e2:b8:ca:4e:e0:e2:
36:d7:14:25:33:ee:7e:f9:8f:53:1f:ba:10:9b:d7:d4:9b:c9:
6c:63:72:21:44:6b:14:a9:91:c0:64:0b:2d:ff:01:41:2f:3d:
73:eb:70:cd:56:a0:20:a8:7f:4a:8f:0d:74:4d:82:47:42:e9:
89:bb:fd:0a:d6:09:35:e3:8c:1b:ea:62:6e:45:b5:a2:c1:b1:
11:ce:0e:93:8d:2f:a4:bd:f2:3d:d4:b2:f8:44:4a:cc:47:7a:
70:b4:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:34 2026 by rpki-client