
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
File: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft (raw, json)
Hash identifier: gVgO2DpRFfTJwOgs3Cajh2GfsTdS2VSut/WhPFETFyE=
Subject key identifier: CE:67:76:38:63:C6:84:AE:4B:C7:6B:B1:BF:12:5A:C2:FC:AE:41:30
Authority key identifier: 5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
Certificate issuer: /CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Certificate serial: 107C296326ADB23DA8BCED1E6BC0240A1B8F4533
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 11:47:22 +0000
Manifest this update: Tue 12 May 2026 11:42:22 +0000
Manifest next update: Wed 13 May 2026 15:14:22 +0000
Files and hashes: 1: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: aimG/5iSSxrYFvvsJNL1+RlZjQ7m0YXtfPl/xnj5GxE=)
2: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl (hash: KJBRop/bTkdDi6L3wSw863mjk5pPEnf5KVBy31Z14tk=)
3: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: t4Yhuqrb+KDLn24Gd9AYMz3qrfeMoa8b1zhrF5DjmB4=)
4: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: 7Q8defqC6lAAWUb6PKdQi9tsdNCBLmxvHmRQL+VpZWA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7c:29:63:26:ad:b2:3d:a8:bc:ed:1e:6b:c0:24:0a:1b:8f:45:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Validity
Not Before: May 12 11:42:22 2026 GMT
Not After : May 13 15:14:22 2026 GMT
Subject: CN=CE67763863C684AE4BC76BB1BF125AC2FCAE4130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:75:4e:03:a3:26:b3:6a:6f:1a:19:78:2d:
07:16:02:44:d4:7f:01:73:25:53:04:0c:26:3f:90:
8e:5e:16:7a:a7:3a:68:83:2a:3c:19:ab:16:9d:b0:
ce:78:7a:ac:3d:2e:06:19:31:c5:8f:b5:15:cf:80:
0c:a5:7f:9b:f9:35:02:f9:c2:a7:27:33:f3:3c:8b:
1c:d9:98:e3:c2:90:eb:43:2d:09:d4:f7:26:5a:3e:
e8:61:0f:ee:97:45:c8:28:69:24:c4:d4:5d:41:61:
3b:26:7e:d8:fe:fe:31:bb:14:cc:d5:88:6b:be:2c:
f4:22:64:e5:5b:18:47:a0:8e:30:ee:79:2e:23:4a:
b0:ca:de:b8:bc:21:8f:1d:cf:50:0e:a9:c5:ec:a6:
56:53:cc:21:db:42:69:ec:be:50:da:72:7f:18:b7:
f6:2c:f4:f5:15:e7:43:77:4d:ba:1d:66:fb:4f:77:
46:84:46:5a:e1:1e:ef:c1:76:7e:94:06:09:08:05:
b0:ed:12:ee:0c:1d:52:67:95:31:89:09:56:d2:7d:
a9:30:a5:ce:ee:30:ca:06:6f:44:ea:11:8d:29:1f:
c9:13:43:96:8f:69:cd:88:99:99:3d:83:41:dd:0c:
1c:97:0c:67:6e:f9:5d:3d:42:bd:9a:79:ff:f8:d3:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:76:38:63:C6:84:AE:4B:C7:6B:B1:BF:12:5A:C2:FC:AE:41:30
X509v3 Authority Key Identifier:
keyid:5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:dc:b8:cd:7c:5f:3c:ba:6b:24:f9:89:98:09:09:3d:58:
fa:9e:2f:7e:63:2c:5f:b1:5a:54:29:4d:57:46:f5:f7:7e:13:
8d:dc:ea:ca:a7:61:c2:ac:ad:3f:4c:f5:96:ab:7b:6b:bd:86:
98:70:72:73:1e:4b:25:00:dc:bb:f9:4a:4e:30:61:2c:84:d9:
81:b3:9f:0b:a1:16:de:db:33:d4:7c:66:d8:a0:b6:ba:09:bf:
47:5b:d3:d3:ef:9d:9d:2b:06:e3:cf:00:46:d6:48:9b:f1:13:
1e:82:be:27:99:6e:0a:e2:fb:de:9c:22:d3:1b:a5:2c:5f:f3:
36:34:db:b3:79:01:f1:a3:70:80:5b:e6:a3:83:85:bc:3b:4a:
87:12:38:bb:35:5e:34:1b:a5:8d:e3:a5:f0:eb:85:0c:80:e3:
6e:25:50:b2:1e:8b:cf:8a:8f:f3:25:34:79:21:f6:c4:b6:a9:
be:04:02:35:c1:4b:3e:41:d0:de:d8:c8:f5:df:68:00:b1:77:
66:63:be:8b:a2:90:6a:26:2d:2d:19:5c:6f:6b:74:69:87:cf:
8f:38:e2:25:1b:79:ad:a7:00:31:d9:1c:e3:11:57:88:c3:3e:
44:5b:43:b2:9b:d4:43:05:7d:6a:fa:29:09:23:bb:57:ff:50:
bb:82:b7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:05 2026 by rpki-client