
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json)
Hash identifier: 3WpOliamCWqgetb77OIB5nFY/9odaoX685ZRUW8eKkg=
Subject key identifier: FA:D0:2D:06:BE:97:FB:47:AE:1F:AF:C7:14:B3:A1:9E:C5:78:B0:6B
Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Certificate serial: 6E0C150A08B939A5ED08D871039FD2A99AC0E356
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 16:31:30 +0000
Manifest this update: Wed 23 Sep 2026 16:26:30 +0000
Manifest next update: Thu 24 Sep 2026 20:04:30 +0000
Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=)
2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: 5DYiC+fgxR0+3SDyPDuN9bC2QSrT22lG6gjhOuzjG4A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 20:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0c:15:0a:08:b9:39:a5:ed:08:d8:71:03:9f:d2:a9:9a:c0:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Validity
Not Before: Sep 23 16:26:30 2026 GMT
Not After : Sep 24 20:04:30 2026 GMT
Subject: CN=FAD02D06BE97FB47AE1FAFC714B3A19EC578B06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:e8:2e:10:66:d4:73:55:7e:53:16:fb:bf:
7a:cb:b4:27:67:88:a0:f1:4a:67:d1:40:4f:b7:08:
84:5b:44:ab:51:f0:31:e1:bb:e9:01:fa:78:3c:48:
2a:a1:c8:64:34:5e:c4:5f:a9:a7:69:2f:f1:23:89:
89:09:09:ab:4b:21:a1:37:d9:cf:83:12:92:db:3d:
19:e3:ce:dc:a6:59:25:f8:59:e1:bd:26:4e:d9:6a:
b1:8b:20:b9:29:d8:3c:c1:50:dc:aa:82:d3:02:77:
4b:13:9b:63:80:19:54:95:74:2d:6b:cf:87:08:8e:
0c:66:4f:47:d6:11:4e:29:d5:c2:25:1d:5a:a8:ec:
f7:2e:ec:ec:1b:60:cc:ef:14:f7:cc:eb:5e:37:b1:
7f:ea:ef:72:bc:04:c3:2a:f0:db:c6:cb:7a:84:9c:
d5:fe:8a:bf:ba:ad:8f:cb:1d:e0:2a:f3:af:b3:c5:
58:7c:53:7e:fd:03:d4:f6:07:d8:87:8e:a7:c5:51:
36:64:71:e9:4c:28:58:8f:d8:7a:05:27:fd:7f:97:
45:d0:b0:ef:c1:01:71:5d:9f:54:ae:d8:ee:bf:d1:
f8:38:f1:6b:f7:d4:c0:e8:e2:ad:15:1f:8c:08:28:
3b:44:fd:17:64:98:fa:b2:ab:ee:8b:a6:18:56:e0:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D0:2D:06:BE:97:FB:47:AE:1F:AF:C7:14:B3:A1:9E:C5:78:B0:6B
X509v3 Authority Key Identifier:
keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:6a:24:23:de:de:82:c4:46:a1:de:3e:7f:f9:88:aa:41:
3d:08:ad:24:02:ae:5b:c0:00:63:9c:2d:a0:23:e3:fc:71:3b:
ca:07:e6:05:e6:ed:a5:5d:e3:f3:46:f8:a4:a2:1a:f8:ba:24:
e5:d7:2d:e4:96:85:7c:a9:0b:b9:cd:55:32:bc:f5:54:1b:b3:
8f:a4:e0:fb:63:83:3b:1a:e1:07:28:49:c5:8d:16:4d:37:58:
9b:58:f7:b9:34:62:15:ad:a6:fe:6b:75:4a:ef:b2:d2:bf:79:
94:98:a0:5a:e9:21:c7:1a:91:2e:b9:16:38:9a:e3:89:b7:e2:
f9:48:1e:1a:6f:83:dd:ac:b7:f6:38:28:07:d1:c1:60:3b:ac:
99:6f:9d:85:0d:ed:a0:58:4c:74:60:3f:12:e2:8c:86:54:9f:
bb:03:0d:44:9c:5f:9a:47:54:0a:ad:e1:0c:5b:05:84:38:bf:
89:f0:a6:12:59:67:55:06:4f:b7:8b:5e:74:2a:2b:13:6c:c5:
31:0e:2b:14:45:aa:53:d4:db:fb:a5:5a:0d:10:22:96:3b:c9:
95:9b:2b:46:be:d4:49:08:00:d3:ac:89:bd:b8:d8:83:e9:50:
72:da:53:4f:df:b6:ad:cd:72:53:51:c6:da:f8:ba:7b:68:0d:
bd:60:d2:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbgwVCgi5OaXtCNhxA5/SqZrA41YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4
NTYxMzIxNDAeFw0yNjA5MjMxNjI2MzBaFw0yNjA5MjQyMDA0MzBaMDMxMTAvBgNV
BAMTKEZBRDAyRDA2QkU5N0ZCNDdBRTFGQUZDNzE0QjNBMTlFQzU3OEIwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6+guEGbUc1V+Uxb7v3rLtCdn
iKDxSmfRQE+3CIRbRKtR8DHhu+kB+ng8SCqhyGQ0XsRfqadpL/EjiYkJCatLIaE3
2c+DEpLbPRnjztymWSX4WeG9Jk7ZarGLILkp2DzBUNyqgtMCd0sTm2OAGVSVdC1r
z4cIjgxmT0fWEU4p1cIlHVqo7Pcu7OwbYMzvFPfM6143sX/q73K8BMMq8NvGy3qE
nNX+ir+6rY/LHeAq86+zxVh8U379A9T2B9iHjqfFUTZkcelMKFiP2HoFJ/1/l0XQ
sO/BAXFdn1Su2O6/0fg48Wv31MDo4q0VH4wIKDtE/RdkmPqyq+6LphhW4JvZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+tAtBr6X+0euH6/HFLOhnsV4sGswHwYDVR0j
BBgwFoAUWGPvz4znBhzf8brO6vz9sYVhMhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4
Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4NTYxMzIxNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81ODYzRUZDRjhDRTcwNjFDREZGMUJBQ0VFQUZDRkRCMTg1NjEz
MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz
YzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZE
QjE4NTYxMzIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA7TaiQj3t6CxEah3j5/+YiqQT0IrSQCrlvA
AGOcLaAj4/xxO8oH5gXm7aVd4/NG+KSiGvi6JOXXLeSWhXypC7nNVTK89VQbs4+k
4Ptjgzsa4QcoScWNFk03WJtY97k0YhWtpv5rdUrvstK/eZSYoFrpIccakS65Fjia
44m34vlIHhpvg92st/Y4KAfRwWA7rJlvnYUN7aBYTHRgPxLijIZUn7sDDUScX5pH
VAqt4QxbBYQ4v4nwphJZZ1UGT7eLXnQqKxNsxTEOKxRFqlPU2/ulWg0QIpY7yZWb
K0a+1EkIANOsib242IPpUHLaU0/ftq3NclNRxtr4untoDb1g0gw=
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:48:56 2026 by rpki-client