
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
File: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft (raw, json)
Hash identifier: OaEJ2B+FR4252OBxmHEeqTAJ4HlP4fpKIlnEqeNwN8U=
Subject key identifier: E5:6C:5D:B7:93:2D:4B:34:DE:8F:89:1B:1B:82:66:F8:71:7A:A1:90
Authority key identifier: 5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
Certificate issuer: /CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Certificate serial: 47CC5833E0B6EFFBAA872913EFC7DFA4305D2E69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 16:51:31 +0000
Manifest this update: Thu 24 Sep 2026 16:46:31 +0000
Manifest next update: Fri 25 Sep 2026 20:09:31 +0000
Files and hashes: 1: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: t4Yhuqrb+KDLn24Gd9AYMz3qrfeMoa8b1zhrF5DjmB4=)
2: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl (hash: Na+p4fGjygZpKk0yLRrHsdfJi7bDiDfLf/D7FX8AhFs=)
3: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: aimG/5iSSxrYFvvsJNL1+RlZjQ7m0YXtfPl/xnj5GxE=)
4: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: 7Q8defqC6lAAWUb6PKdQi9tsdNCBLmxvHmRQL+VpZWA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cc:58:33:e0:b6:ef:fb:aa:87:29:13:ef:c7:df:a4:30:5d:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Validity
Not Before: Sep 24 16:46:31 2026 GMT
Not After : Sep 25 20:09:31 2026 GMT
Subject: CN=E56C5DB7932D4B34DE8F891B1B8266F8717AA190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:f3:c7:be:14:8c:62:c4:d2:c4:72:a3:92:
fc:5a:36:2b:7b:f7:90:11:36:8d:ca:fc:e8:21:7c:
f0:c7:06:f9:89:f2:01:0f:00:ff:e5:7b:3e:03:68:
d4:cf:22:52:5c:5f:aa:9f:f5:e1:07:c0:0f:83:ca:
80:48:f5:aa:40:3c:5d:e5:04:50:be:17:be:c2:29:
e7:f8:53:56:c9:9a:ec:b7:10:c4:13:e8:5a:7b:13:
78:6a:27:5a:61:36:dc:c0:7d:68:43:6c:c2:c6:f5:
30:05:af:43:68:43:9b:bd:5c:ed:c6:af:67:d2:cb:
ff:c5:b0:ef:9f:65:aa:50:29:ce:ba:8d:99:17:88:
67:a4:e0:b1:3f:2d:97:ef:38:05:cd:cc:36:34:f7:
6b:8e:3f:c4:f3:e1:14:7b:f9:33:2b:d9:7c:7e:6d:
5d:0d:48:6e:e5:cb:72:00:28:f3:ce:da:c6:52:c4:
c0:19:53:b7:07:d3:a5:8c:31:2c:29:5b:5c:82:5e:
e0:28:2f:79:0b:de:b9:3c:db:01:de:11:9f:76:b4:
31:35:21:7b:98:e8:79:22:90:f6:81:0f:5e:9e:9c:
bd:04:94:20:e6:be:28:0e:0c:23:d4:13:ed:a6:05:
cf:df:01:83:2a:31:dd:67:48:be:df:a1:1a:7d:92:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:5D:B7:93:2D:4B:34:DE:8F:89:1B:1B:82:66:F8:71:7A:A1:90
X509v3 Authority Key Identifier:
keyid:5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:63:0b:7b:21:89:cc:d6:b5:36:8d:df:4b:66:5b:b0:8e:
3c:f4:1f:c9:b4:18:f4:0e:5b:44:73:5a:23:f1:25:73:87:3b:
42:33:fa:33:1b:48:80:0a:5e:dd:63:5f:79:06:28:d2:91:c7:
14:a2:7b:55:30:f7:75:d8:be:17:3a:23:d1:26:1e:50:cf:f0:
d3:25:22:ea:05:32:84:52:7a:d1:ef:b6:2e:23:76:0e:5e:43:
54:29:08:f5:9d:4c:92:9d:e0:a6:a9:4b:09:6a:1b:7b:59:63:
ff:24:1a:2b:52:90:de:88:26:3e:a1:9b:56:6b:2e:e5:a8:91:
2c:ba:b0:3e:00:fc:50:92:74:2b:82:3c:2a:f4:aa:67:e6:47:
62:aa:22:0f:a5:30:32:15:3e:91:83:37:38:1f:a4:99:a8:d0:
9f:a4:16:e9:35:a2:a1:6e:da:a5:f2:22:e5:19:79:ec:9f:6a:
96:22:8d:ab:92:b2:f0:1f:ab:a7:f0:19:9b:79:d4:b5:8d:e6:
70:c4:fb:ab:fa:41:0b:2d:12:79:00:4f:05:44:dc:e0:c2:0c:
64:2f:ee:93:d9:e4:57:20:17:d2:95:b3:9a:53:2f:cb:9c:ee:
5a:96:62:43:a7:47:a4:f9:74:72:87:4f:bf:ed:cb:87:34:58:
92:ec:e0:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUR8xYM+C27/uqhykT78ffpDBdLmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1MTM2NEI1QzVDNUNDQzlCRjAyNDc4MEVEMjMxOEFD
RTQ2OUI3ODAeFw0yNjA5MjQxNjQ2MzFaFw0yNjA5MjUyMDA5MzFaMDMxMTAvBgNV
BAMTKEU1NkM1REI3OTMyRDRCMzRERThGODkxQjFCODI2NkY4NzE3QUExOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7vPHvhSMYsTSxHKjkvxaNit7
95ARNo3K/OghfPDHBvmJ8gEPAP/lez4DaNTPIlJcX6qf9eEHwA+DyoBI9apAPF3l
BFC+F77CKef4U1bJmuy3EMQT6Fp7E3hqJ1phNtzAfWhDbMLG9TAFr0NoQ5u9XO3G
r2fSy//FsO+fZapQKc66jZkXiGek4LE/LZfvOAXNzDY092uOP8Tz4RR7+TMr2Xx+
bV0NSG7ly3IAKPPO2sZSxMAZU7cH06WMMSwpW1yCXuAoL3kL3rk82wHeEZ92tDE1
IXuY6HkikPaBD16enL0ElCDmvigODCPUE+2mBc/fAYMqMd1nSL7foRp9krM1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5Wxdt5MtSzTej4kbG4Jm+HF6oZAwHwYDVR0j
BBgwFoAUXFE2S1xcXMyb8CR4DtIxis5Gm3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjk4ZjE5YzMtZTRlMS00MWExLWFhZjAtZDYxM2FjYTQ5MzBjLzAvNUM1MTM2NEI1
QzVDNUNDQzlCRjAyNDc4MEVEMjMxOEFDRTQ2OUI3OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QzUxMzY0QjVDNUM1Q0NDOUJGMDI0NzgwRUQyMzE4QUNFNDY5
Qjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk4ZjE5YzMtZTRlMS00MWExLWFh
ZjAtZDYxM2FjYTQ5MzBjLzAvNUM1MTM2NEI1QzVDNUNDQzlCRjAyNDc4MEVEMjMx
OEFDRTQ2OUI3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADZpYwt7IYnM1rU2jd9LZluwjjz0H8m0GPQO
W0RzWiPxJXOHO0Iz+jMbSIAKXt1jX3kGKNKRxxSie1Uw93XYvhc6I9EmHlDP8NMl
IuoFMoRSetHvti4jdg5eQ1QpCPWdTJKd4KapSwlqG3tZY/8kGitSkN6IJj6hm1Zr
LuWokSy6sD4A/FCSdCuCPCr0qmfmR2KqIg+lMDIVPpGDNzgfpJmo0J+kFuk1oqFu
2qXyIuUZeeyfapYijauSsvAfq6fwGZt51LWN5nDE+6v6QQstEnkATwVE3ODCDGQv
7pPZ5FcgF9KVs5pTL8uc7lqWYkOnR6T5dHKHT7/ty4c0WJLs4Ic=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:57 2026 by rpki-client