
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json)
Hash identifier: kJYLK2eHJW5+r6YjFG5kCS6j1qOK20meI2lAq5jaCXQ=
Subject key identifier: B1:31:5D:C2:9D:59:FB:2D:13:10:A5:11:67:1B:C7:3B:0D:90:EE:E1
Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Certificate serial: 773BBC90E406208548B0D1C7E05673FB5465B10E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 02:32:26 +0000
Manifest this update: Fri 24 Jul 2026 02:27:26 +0000
Manifest next update: Sat 25 Jul 2026 04:02:26 +0000
Files and hashes: 1: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=)
2: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: GjE51WqFQyeOdVY/XntmLteNjE4bR53V2yxCZSI7Nb0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3b:bc:90:e4:06:20:85:48:b0:d1:c7:e0:56:73:fb:54:65:b1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Validity
Not Before: Jul 24 02:27:26 2026 GMT
Not After : Jul 25 04:02:26 2026 GMT
Subject: CN=B1315DC29D59FB2D1310A511671BC73B0D90EEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:31:d4:3b:64:58:c7:0d:61:d5:b3:9d:91:
92:3b:95:e1:4e:06:d9:72:99:58:87:c4:e9:30:10:
2b:26:cf:53:5c:bd:a3:e4:46:a0:b1:89:44:2a:e2:
cc:7a:66:16:9d:2d:9f:1c:ea:e1:3b:bc:15:41:0a:
a2:c6:88:50:4d:44:1e:f9:37:38:85:d4:f8:19:c1:
1b:ab:37:29:99:31:89:fb:46:cb:34:3d:67:3b:34:
65:c3:ca:d0:64:a8:2e:c2:ff:b9:61:55:84:e2:d9:
1e:c3:26:53:c8:70:d3:f6:a8:37:b0:9c:33:cc:f6:
e3:ca:66:de:3e:36:1a:5f:ae:80:e5:ad:4f:60:51:
0d:f4:86:ba:b1:85:f5:25:9f:b8:33:f0:2a:c8:21:
85:a2:65:35:8b:d2:f4:9a:fc:3f:b0:dd:f8:f8:4d:
d7:41:fe:ef:71:cb:8b:58:31:f9:25:cb:8c:44:d9:
aa:48:79:9c:52:86:67:35:33:8f:ee:f2:6c:50:91:
25:25:68:ce:e7:11:f2:78:3b:ad:dd:dd:5c:6d:7d:
65:b6:30:14:b9:5f:44:79:f4:61:f2:1a:5e:1f:a3:
c5:c7:14:b1:8c:b1:92:15:11:17:79:09:58:f1:d2:
9a:35:43:ac:ba:eb:26:8f:d6:cf:39:91:f4:6e:54:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:5D:C2:9D:59:FB:2D:13:10:A5:11:67:1B:C7:3B:0D:90:EE:E1
X509v3 Authority Key Identifier:
keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:d3:5f:ab:1d:35:9d:36:da:60:69:87:cf:db:5a:99:b9:
7f:16:63:f8:9c:2d:0c:5d:3a:40:34:9f:15:97:a9:fe:a0:df:
99:f1:21:79:4c:1f:87:cd:0f:99:8b:3a:da:18:99:e9:6c:f0:
de:c0:46:fd:44:25:48:fe:72:a0:d6:28:82:6f:84:99:68:9c:
98:14:a8:b0:10:23:04:4c:eb:1a:53:78:77:92:68:44:45:8d:
d8:81:6c:62:2b:05:6b:44:10:09:72:35:59:19:05:d3:ce:3a:
e4:59:f1:5a:f7:7a:54:79:13:8b:24:a2:41:d7:11:98:ee:d3:
c6:43:25:bb:0d:c7:86:47:4c:be:42:81:b9:a3:29:64:84:4c:
31:c7:34:a4:b7:1b:54:aa:a2:43:4f:e5:bd:91:4a:b0:14:67:
eb:66:20:cd:f0:b3:74:89:63:12:dd:b9:7f:53:51:7e:e6:52:
ee:c1:1d:a1:dc:22:85:9b:41:7b:1b:5d:b5:7f:4c:94:0c:4e:
00:92:fd:40:db:6f:b1:c6:24:bb:ba:b3:f4:ba:b9:cd:ed:dc:
7e:d0:b4:a6:3e:c0:b3:de:40:05:fe:d7:9d:25:16:84:60:d2:
d8:dd:b9:5e:db:74:31:70:8a:19:9c:28:d8:51:d2:6e:b7:3c:
cd:51:00:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdzu8kOQGIIVIsNHH4FZz+1RlsQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE3RDM3NDA5NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0NzND
MUVDNzA5QzAeFw0yNjA3MjQwMjI3MjZaFw0yNjA3MjUwNDAyMjZaMDMxMTAvBgNV
BAMTKEIxMzE1REMyOUQ1OUZCMkQxMzEwQTUxMTY3MUJDNzNCMEQ5MEVFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsazHUO2RYxw1h1bOdkZI7leFO
BtlymViHxOkwECsmz1NcvaPkRqCxiUQq4sx6ZhadLZ8c6uE7vBVBCqLGiFBNRB75
NziF1PgZwRurNymZMYn7Rss0PWc7NGXDytBkqC7C/7lhVYTi2R7DJlPIcNP2qDew
nDPM9uPKZt4+NhpfroDlrU9gUQ30hrqxhfUln7gz8CrIIYWiZTWL0vSa/D+w3fj4
TddB/u9xy4tYMfkly4xE2apIeZxShmc1M4/u8mxQkSUlaM7nEfJ4O63d3VxtfWW2
MBS5X0R59GHyGl4fo8XHFLGMsZIVERd5CVjx0po1Q6y66yaP1s85kfRuVI7RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsTFdwp1Z+y0TEKURZxvHOw2Q7uEwHwYDVR0j
BBgwFoAUWn03QJanPURyrh/+7uJEc8HscJwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmU3Y2M5NzYtNjlmNi00ZGI4LWE3YWItODU2YTJiYjhlYWZlLzAvNUE3RDM3NDA5
NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0NzNDMUVDNzA5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QTdEMzc0MDk2QTczRDQ0NzJBRTFGRkVFRUUyNDQ3M0MxRUM3
MDlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmU3Y2M5NzYtNjlmNi00ZGI4LWE3
YWItODU2YTJiYjhlYWZlLzAvNUE3RDM3NDA5NkE3M0Q0NDcyQUUxRkZFRUVFMjQ0
NzNDMUVDNzA5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACof01+rHTWdNtpgaYfP21qZuX8WY/icLQxd
OkA0nxWXqf6g35nxIXlMH4fND5mLOtoYmels8N7ARv1EJUj+cqDWKIJvhJlonJgU
qLAQIwRM6xpTeHeSaERFjdiBbGIrBWtEEAlyNVkZBdPOOuRZ8Vr3elR5E4skokHX
EZju08ZDJbsNx4ZHTL5CgbmjKWSETDHHNKS3G1SqokNP5b2RSrAUZ+tmIM3ws3SJ
YxLduX9TUX7mUu7BHaHcIoWbQXsbXbV/TJQMTgCS/UDbb7HGJLu6s/S6uc3t3H7Q
tKY+wLPeQAX+150lFoRg0tjduV7bdDFwihmcKNhR0m63PM1RAE4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:47 2026 by rpki-client