
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
File: 5645F0B82898A2A9A354AB086BC696E81297553D.mft (raw, json)
Hash identifier: F6dM2qj83SnnMJaZwCfvrTW41dZ3SAorrOA5K6+Uil4=
Subject key identifier: 4A:FC:BE:A3:3E:3D:52:A4:0B:23:0C:EE:B8:6D:8B:4A:C7:12:F2:6E
Authority key identifier: 56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D
Certificate issuer: /CN=5645F0B82898A2A9A354AB086BC696E81297553D
Certificate serial: 7AD664C8AD09BDA73D27C449FBFD7B1CFA013394
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:15:31 +0000
Manifest this update: Tue 12 May 2026 05:10:31 +0000
Manifest next update: Wed 13 May 2026 07:03:31 +0000
Files and hashes: 1: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: qeHJ1PkAaAN+foqEt/Aw5gnh3414OQ8lq2kg+Oj23CQ=)
2: 5645F0B82898A2A9A354AB086BC696E81297553D.crl (hash: NVsgm5TjEr1meE5M5hgZUybuzVs2d0hRdhEusG7UmQk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl
rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d6:64:c8:ad:09:bd:a7:3d:27:c4:49:fb:fd:7b:1c:fa:01:33:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5645F0B82898A2A9A354AB086BC696E81297553D
Validity
Not Before: May 12 05:10:31 2026 GMT
Not After : May 13 07:03:31 2026 GMT
Subject: CN=4AFCBEA33E3D52A40B230CEEB86D8B4AC712F26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ca:90:34:9c:28:4d:cc:9f:c5:13:7c:a9:b0:
ed:d5:90:42:75:a4:cb:ff:50:d0:10:c4:ec:74:4c:
4f:16:c4:5f:b3:04:1d:9f:35:3e:cb:a4:55:5c:ab:
8d:31:cf:1d:26:45:eb:f6:4c:65:eb:01:10:43:0f:
7f:45:79:d3:0f:cd:73:0a:23:99:c3:70:0f:53:ee:
dc:d9:ea:3e:58:0e:22:04:3f:60:d9:28:3a:1b:5f:
d0:e6:15:aa:73:13:36:18:8a:7d:55:10:d8:56:fc:
5b:8e:bc:43:e4:c2:73:92:29:39:c7:fe:7b:9a:e6:
46:e9:04:a9:2d:2c:d9:2f:35:31:4f:0e:b2:48:02:
31:9d:0b:d4:a0:92:bc:ab:cb:cf:55:ea:d0:19:16:
82:4a:ff:d9:6f:bf:03:91:d8:47:4a:95:55:b0:f5:
a9:ef:d9:b8:f9:20:69:2c:09:b0:e8:fe:aa:a2:a7:
e3:6c:1b:8e:88:91:2c:1d:2c:c5:85:72:ef:a3:73:
ea:5e:ba:25:1f:af:e1:66:d8:5b:13:0f:50:8c:4e:
14:e2:c1:4b:6c:8a:14:cd:37:a0:7e:b9:cf:17:f9:
eb:92:67:77:dd:da:d8:76:c9:8b:43:7a:e4:08:1f:
68:9f:3b:a9:2a:95:dc:ae:d5:37:d4:fb:02:22:b4:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:BE:A3:3E:3D:52:A4:0B:23:0C:EE:B8:6D:8B:4A:C7:12:F2:6E
X509v3 Authority Key Identifier:
keyid:56:45:F0:B8:28:98:A2:A9:A3:54:AB:08:6B:C6:96:E8:12:97:55:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5645F0B82898A2A9A354AB086BC696E81297553D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/5645F0B82898A2A9A354AB086BC696E81297553D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:54:70:de:4c:f1:08:63:0b:8a:71:66:6c:f3:a9:75:bd:
a0:50:07:2a:d1:63:e1:1a:cf:84:23:ca:97:28:99:13:ad:38:
8c:4a:81:ab:ba:6f:ff:8a:c1:35:74:b4:82:53:33:8e:e7:39:
14:55:c5:39:88:32:76:79:e4:b5:60:ce:c3:23:28:32:58:a6:
73:d9:98:21:09:2b:91:76:2c:b9:b4:3b:d6:3a:2e:2f:cc:61:
92:9f:32:de:1a:0e:fa:af:a8:dd:6c:fa:35:c2:0b:02:4b:6b:
2f:27:da:b7:17:61:d6:d5:ba:fa:ae:b9:74:48:fe:93:ee:72:
5b:0a:6e:b3:55:64:2e:e6:5c:bd:02:b4:5a:c1:11:d0:de:03:
56:90:fc:a6:45:e0:87:e6:f5:05:a5:59:5e:70:cd:7f:be:c3:
d9:31:fd:6c:82:cc:df:04:90:a2:e8:2a:b2:65:88:90:03:92:
d6:60:df:50:95:63:27:6d:a1:3d:71:37:f6:6f:12:ce:89:8c:
78:41:67:3e:84:95:e5:91:bc:46:dc:2a:42:4a:31:e1:ec:aa:
9f:61:e9:6a:db:86:98:15:50:44:99:ff:58:e6:17:7d:43:84:
f0:ac:12:45:92:10:c3:3b:19:88:ec:cc:94:15:ef:cf:9a:e1:
37:12:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:30 2026 by rpki-client