
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
File: 5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft (raw, json)
Hash identifier: 44gVXk28u8gHp2sfU0n1POgrgtj1Bp7bR9kvuRGJWGk=
Subject key identifier: 9D:1C:C3:B6:39:3B:84:82:20:4E:D1:9E:6E:05:42:3B:0A:86:25:82
Authority key identifier: 5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81
Certificate issuer: /CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081
Certificate serial: 57E9E71430B622FCF6B0B209D6EDDE4FE4EF3B53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 14:47:57 +0000
Manifest this update: Sat 14 Nov 2026 14:42:57 +0000
Manifest next update: Sun 15 Nov 2026 17:54:57 +0000
Files and hashes: 1: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: 2uGt6NoP0ZyAzJoUujZvq+iw79GkfDtAJpmnwcRnGwY=)
2: 5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl (hash: MBkVGMMEY1nE31dQo56ZqafIGatOykqztACHp4gIp84=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl
rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 17:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e9:e7:14:30:b6:22:fc:f6:b0:b2:09:d6:ed:de:4f:e4:ef:3b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081
Validity
Not Before: Nov 14 14:42:57 2026 GMT
Not After : Nov 15 17:54:57 2026 GMT
Subject: CN=9D1CC3B6393B8482204ED19E6E05423B0A862582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:59:99:09:21:db:d2:85:bf:24:00:5a:ec:
24:56:2d:cc:d3:07:41:a4:9d:f1:9d:01:4c:e5:2a:
39:2e:fd:d8:e2:e5:87:09:b3:31:5a:d8:fe:35:fb:
2c:4e:44:ba:b3:e9:f7:27:3a:9b:cf:9b:70:e8:40:
6e:07:63:aa:ee:bb:3d:e0:67:9e:15:04:73:12:80:
74:40:a2:ce:2a:6b:56:5f:19:8d:43:39:ab:25:af:
45:29:6d:6a:94:d0:c8:31:e7:ae:40:87:9f:58:ea:
3e:59:72:d0:33:3b:03:87:ae:76:14:e3:c4:a3:01:
4c:37:e4:6c:a4:a8:99:98:55:07:a2:82:b8:a2:bc:
bb:83:05:cd:24:b3:56:1a:06:3c:b5:0f:d3:7c:ed:
28:f6:da:af:d5:83:41:3c:e7:e3:22:33:68:cd:87:
62:57:82:65:ff:e9:d3:a1:0a:89:e7:be:25:01:12:
dd:d8:7b:88:1a:09:73:68:82:37:88:f3:fd:72:3f:
79:6a:76:27:b4:6c:c9:bd:d3:b1:b0:40:73:62:e9:
ca:fc:07:16:8e:6a:20:bd:ec:05:ca:4e:ed:7d:fc:
b2:3f:03:be:a8:9b:e3:87:11:4a:26:a2:d4:59:0c:
62:a5:60:c0:ad:76:68:26:ce:31:05:05:da:fd:46:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:C3:B6:39:3B:84:82:20:4E:D1:9E:6E:05:42:3B:0A:86:25:82
X509v3 Authority Key Identifier:
keyid:5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:38:89:f7:1c:c3:6f:13:96:6d:eb:ae:4e:92:10:5e:d3:
e3:98:27:34:6e:d2:d8:91:3d:bd:18:82:af:26:ec:b0:3a:70:
9e:d5:db:5a:dc:d7:83:e1:f0:d4:ce:0c:73:ec:0f:c7:57:dc:
ad:23:16:b9:b7:18:6d:af:13:dd:79:e0:24:f8:e0:ff:e5:44:
ef:8e:e7:c7:33:98:de:10:aa:72:ba:cc:12:90:a0:c1:a2:ed:
fd:41:02:18:89:bd:09:98:0a:51:2f:56:ef:30:e0:3a:0a:9e:
7a:56:cf:88:1b:06:4d:89:21:25:a1:9c:02:f0:61:9c:b1:1c:
3a:be:5a:3d:92:60:4a:a1:18:2c:70:d2:c2:a4:8f:7a:d5:3f:
1c:b9:11:22:8f:a8:5d:d6:f3:e9:7f:de:ce:16:f8:cb:3f:83:
0c:e2:9a:5a:71:8e:a0:d4:7d:24:62:3e:b1:57:c8:74:8b:72:
c1:aa:89:c7:cd:53:6e:44:64:bf:f0:fc:7e:30:62:15:bd:0b:
e6:8a:e7:c5:f2:82:a3:4a:33:19:47:d8:7a:ba:44:1a:5a:be:
5f:6b:77:bd:46:8d:c7:31:db:b4:46:3e:47:cb:9a:a8:99:a9:
a8:7c:11:6c:f7:c0:24:44:68:bd:d7:ec:c2:9c:00:1f:fc:c9:
55:1a:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:36 2026 by rpki-client