
$ rpki-client -vvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft
File: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft (raw, json)
Hash identifier: 7X1odKz3Aw7XPndL8l7jZNe6OYq65b5YUWrLRWxUx5Q=
Subject key identifier: 60:3F:46:29:AA:28:53:43:E3:CC:AD:EF:DA:9E:8F:24:45:DA:D6:F9
Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB
Certificate issuer: /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB
Certificate serial: 0A3D32CEFCD0D558571662ED2CE608DEC9A560CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 23:50:30 +0000
Manifest this update: Mon 20 Jul 2026 23:45:30 +0000
Manifest next update: Wed 22 Jul 2026 01:54:30 +0000
Files and hashes: 1: 5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl (hash: ZFhhImeRFxCaVSEKxWYsFkMJLYaufmIUwUqNeWzx2LA=)
2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl
rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3d:32:ce:fc:d0:d5:58:57:16:62:ed:2c:e6:08:de:c9:a5:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB
Validity
Not Before: Jul 20 23:45:30 2026 GMT
Not After : Jul 22 01:54:30 2026 GMT
Subject: CN=603F4629AA285343E3CCADEFDA9E8F2445DAD6F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:47:11:4b:a4:18:e7:87:85:be:ae:76:f6:
99:b9:95:e5:37:33:e8:13:f9:d2:81:80:e7:ec:f7:
cd:a4:91:d5:be:f4:f1:4a:ea:48:9f:dc:90:73:f6:
89:64:f3:96:6e:19:a4:e1:b8:13:12:1a:7f:fe:92:
43:4c:c0:3a:1e:59:6b:f6:a2:75:d9:d9:f9:cb:75:
7e:a7:b3:44:46:8e:b2:db:55:04:fe:25:ba:d3:32:
3c:4c:2d:2b:21:5f:c2:b3:bd:2f:c1:b4:ae:92:58:
de:1f:db:09:20:78:c7:ad:43:e5:cd:92:b2:be:56:
07:89:a2:cc:e4:ea:f5:f9:96:46:48:34:42:2c:d4:
2b:6b:cb:c9:63:e0:79:fd:f2:2f:5f:6f:81:a4:59:
de:0d:d1:3c:98:13:49:4f:f7:e5:d7:87:32:bb:6e:
74:e9:49:26:2c:c8:87:e6:2b:78:91:24:d3:02:96:
76:1b:34:37:58:ef:81:a5:1c:0b:8b:2a:5d:23:ad:
58:3a:bb:28:c4:14:1a:e9:c3:5f:db:fa:3a:0a:a1:
66:bb:ba:33:70:5a:39:b7:08:c6:07:0f:45:00:d6:
28:fc:55:c9:c7:1f:b0:14:5e:29:f8:84:5a:79:76:
62:f6:68:63:d2:30:da:4d:60:53:07:97:d3:33:a8:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:46:29:AA:28:53:43:E3:CC:AD:EF:DA:9E:8F:24:45:DA:D6:F9
X509v3 Authority Key Identifier:
keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:50:c7:5b:32:3e:7b:b6:16:d4:0a:b8:c8:56:65:bd:da:0d:
ab:f0:3c:b9:1f:c8:da:51:33:7a:3e:a0:cd:d6:83:22:cd:37:
8a:91:80:1f:74:21:e5:69:ab:ae:23:99:0d:9c:9b:4f:4e:8f:
d7:e6:54:cb:73:57:f9:f7:bf:8a:35:58:a9:49:0b:ed:33:ca:
e2:d8:83:3b:9b:d7:81:fd:5e:ee:f4:76:bb:91:74:bb:63:1c:
67:dd:50:46:6e:f4:fd:67:df:7a:08:d8:3b:cc:b2:e6:52:79:
8f:cb:08:81:78:6e:75:de:cf:53:35:dc:fc:21:93:9f:f5:d7:
31:d2:63:22:03:97:f6:d5:69:c2:f4:8a:bb:53:dd:6e:ed:ac:
1b:5e:d7:e6:80:48:2e:4d:b9:4f:88:f6:28:42:cc:77:f7:9f:
6d:52:f6:c7:a1:e8:92:d4:ab:a9:ac:b5:56:2c:2f:1f:e6:fb:
98:fa:4e:4f:f5:57:54:31:35:b3:af:3a:fe:fd:59:9c:e6:66:
db:4c:50:16:7d:29:3c:34:ab:82:86:ab:a5:35:fa:29:54:ec:
c1:26:06:91:a5:08:f2:b1:3d:96:33:a7:5e:8e:f6:d8:b9:9c:
bd:04:e5:fc:23:a2:f5:23:d0:2e:40:24:15:3c:6d:f4:93:9d:
17:3b:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:20:34 2026 by rpki-client