
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json)
Hash identifier: ha+OfaDsWiXovEGGDy38PusZcrW4UhJWrr2Tp6nL464=
Subject key identifier: DB:72:5B:8F:1B:1B:23:A4:6F:A7:BD:6C:9E:42:C6:8C:86:0F:AA:B1
Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Certificate serial: 518707825B05EF3453581571F5C1F757F03793E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 02:51:26 +0000
Manifest this update: Tue 12 May 2026 02:46:26 +0000
Manifest next update: Wed 13 May 2026 04:03:26 +0000
Files and hashes: 1: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: DM53MzVeUxbpJBf+w5FlHLSFezPgr81Qh0Vw7ulsWcg=)
2: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 04:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:87:07:82:5b:05:ef:34:53:58:15:71:f5:c1:f7:57:f0:37:93:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Validity
Not Before: May 12 02:46:26 2026 GMT
Not After : May 13 04:03:26 2026 GMT
Subject: CN=DB725B8F1B1B23A46FA7BD6C9E42C68C860FAAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:36:a4:e7:23:c5:14:5e:47:fb:b2:28:d0:
3b:1d:34:50:4b:12:f3:5d:f2:53:82:94:f7:ba:ee:
7c:68:b0:80:06:79:35:f7:13:8d:32:c6:9e:9c:60:
08:14:5a:32:1d:b4:44:e6:e7:20:c9:f4:1b:e9:23:
b5:e7:ff:d4:6d:e4:e7:58:ff:17:16:34:8b:e3:bb:
ba:b7:bc:80:d0:6a:31:01:b8:21:d5:14:9d:9d:e8:
41:f2:7e:da:7d:30:0f:bf:d6:f8:03:92:2e:d5:82:
f4:7f:ca:07:9f:02:09:40:79:e0:50:96:ed:0c:fb:
e0:b2:c0:c0:31:60:ba:8c:17:c2:02:a9:ec:42:ef:
be:3c:8c:6a:0a:ea:d0:63:0f:c4:a4:82:02:a1:23:
78:d9:04:a6:33:fe:3d:32:65:c7:e9:82:76:4e:c9:
45:3a:97:cc:f3:80:5d:ba:ad:30:25:c2:a1:9f:b9:
e1:bd:76:65:2d:62:a2:8d:cd:78:a1:2a:7f:14:7c:
58:1a:1e:d5:9d:57:22:27:5c:3d:19:3a:e6:09:ab:
13:a4:51:55:9d:ad:d9:7d:86:cd:d8:8f:d7:6b:e6:
7f:ca:11:19:86:6c:21:be:83:15:e8:9f:48:19:11:
5e:51:dc:af:1f:4d:79:23:ca:ae:d0:e7:30:eb:0e:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:5B:8F:1B:1B:23:A4:6F:A7:BD:6C:9E:42:C6:8C:86:0F:AA:B1
X509v3 Authority Key Identifier:
keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:1a:8d:82:45:33:e4:99:ed:dd:e2:fe:0f:64:16:bc:60:
58:50:b1:41:6e:4f:3f:c4:18:16:05:c7:65:13:50:41:f8:36:
54:46:33:8a:20:d8:ac:28:11:c6:5f:b0:ed:97:83:f1:94:d2:
99:fd:89:38:57:a2:72:54:97:5b:2b:fb:60:9a:59:af:e4:d4:
f1:04:bf:69:dd:c4:72:fd:fe:cd:b5:2c:11:86:f7:b8:2c:a3:
76:9d:e8:65:0d:29:99:09:5f:f4:e7:a9:cf:4e:05:7d:f5:0a:
2b:01:18:94:8b:8b:4f:20:d2:ab:8d:44:70:b5:cd:cc:e2:a0:
aa:67:0e:1f:1c:46:d2:84:84:f5:e3:31:df:b4:29:bd:e3:ad:
77:69:5d:7a:1f:8b:ef:56:3f:76:7c:dd:e4:b1:61:16:fc:b2:
51:1f:b1:fa:31:b3:99:6a:02:51:71:df:1e:d6:bc:30:3f:fc:
e1:4a:2c:92:e3:1a:a1:92:08:a8:8c:03:93:2b:4f:8d:1d:94:
e0:1b:8b:db:88:b9:03:d7:bd:63:a7:7a:7b:db:71:52:d3:49:
16:9a:fb:58:be:bc:d6:4a:d0:49:aa:1d:32:cd:27:f2:7b:b1:
11:fb:9f:eb:1f:69:3e:34:e3:6e:20:7e:2b:d6:f3:fa:69:16:
e3:bd:18:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:25 2026 by rpki-client