
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
File: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft (raw, json)
Hash identifier: SihmVu2uhmwEcxof16hRvXxld0N/ha1HiSQpkqpFR38=
Subject key identifier: 95:05:44:7E:A5:7D:DD:13:40:10:1B:5F:98:1C:D9:52:26:DE:4B:C8
Authority key identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9
Certificate issuer: /CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
Certificate serial: 47AA661B7DC7B2B76EC0B01321F4F5DDFCBD5F11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 05:55:07 +0000
Manifest this update: Thu 03 Sep 2026 05:50:07 +0000
Manifest next update: Fri 04 Sep 2026 06:07:07 +0000
Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: DSqrZf2t+vOo0dpO9Z2Ts4Q/3PwkQ/7IIkFcOCMaS2c=)
2: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl (hash: VxUW7kK5q0OOwPCJg4MVuZkgnk3bd0lR0vK5fA/GhxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl
rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 06:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:aa:66:1b:7d:c7:b2:b7:6e:c0:b0:13:21:f4:f5:dd:fc:bd:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
Validity
Not Before: Sep 3 05:50:07 2026 GMT
Not After : Sep 4 06:07:07 2026 GMT
Subject: CN=9505447EA57DDD1340101B5F981CD95226DE4BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:a5:58:a4:cf:bc:33:9e:e4:f9:1f:fd:57:
34:7f:93:f7:3f:f1:b6:7e:cd:4f:8b:43:c8:70:46:
19:63:d7:c0:d1:23:2b:a5:60:f6:78:20:35:39:e9:
1f:63:ec:2c:47:c3:01:7d:e4:6a:14:f1:e9:16:c5:
98:84:47:02:f3:ac:94:e2:35:e0:67:4a:90:a8:c3:
1d:80:47:97:f7:51:70:b1:63:5a:84:11:a5:4a:49:
90:3b:cc:aa:c6:9f:03:be:51:df:4f:e7:00:68:0f:
81:91:73:7b:06:41:d5:57:fd:cd:d7:af:86:12:fd:
62:33:6a:db:28:d6:d2:44:f0:f2:65:00:08:08:f0:
aa:f9:99:49:57:05:5a:c0:2e:28:90:2a:60:1c:97:
f9:37:06:15:ff:72:7f:63:0d:66:77:94:df:d5:f9:
ef:53:87:79:1d:3d:2a:0e:ef:6b:cb:96:98:e6:29:
bd:6e:44:9f:34:f0:3c:43:c8:9e:da:43:1b:01:aa:
69:49:6b:81:f6:80:01:43:09:ea:1e:76:17:10:63:
a8:29:4f:ad:4a:c3:bd:46:15:82:cb:40:05:bb:48:
4c:cd:5b:a5:41:f3:b8:a0:1e:3e:de:c3:dc:ba:01:
44:ae:b9:b2:83:74:99:cb:3b:39:1f:85:bf:98:f1:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:44:7E:A5:7D:DD:13:40:10:1B:5F:98:1C:D9:52:26:DE:4B:C8
X509v3 Authority Key Identifier:
keyid:C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:08:84:aa:39:2a:3d:ce:e6:cf:e5:56:7c:4b:bc:b6:72:0d:
a4:36:2e:10:ce:35:c8:b4:d6:98:54:e8:e5:4f:79:36:2f:5a:
24:b1:b2:07:b4:1c:fe:9d:41:64:3e:72:6a:35:5b:84:b3:cd:
bf:e0:ab:35:ab:3e:87:21:52:58:e2:a1:78:b6:ac:5a:85:0c:
bd:c1:98:4a:b8:f3:21:6d:80:39:1f:9c:01:d7:2f:63:87:62:
77:99:e4:5c:9c:e2:6e:27:61:82:cb:d7:6f:fb:37:d4:46:57:
e9:3d:79:e8:9e:6d:65:10:c0:56:83:df:21:69:dd:0a:5b:d4:
54:68:ae:0e:dc:35:b1:9d:6b:2c:15:02:b7:55:5f:36:b5:ad:
bd:84:84:39:16:88:da:6c:97:c9:c1:ed:55:e9:50:32:46:6a:
e1:0d:c2:bb:d0:00:86:5b:80:bf:bf:86:e8:55:d6:29:f7:f0:
b5:8a:71:38:c3:ef:b7:dd:a4:7e:16:fa:d1:14:9b:4a:cd:20:
36:09:c3:91:fd:68:e6:cc:69:fd:b8:92:cb:e0:81:d3:8e:56:
a9:d4:58:3d:b9:3f:48:59:11:23:da:e4:30:2d:90:d2:03:78:
dc:f1:12:70:3d:72:d2:d1:4d:4e:47:7d:08:04:86:f8:8c:d2:
6e:07:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:02:20 2026 by rpki-client