
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.mft (raw, json)
Hash identifier: IegOzQq/hEJkcWEiDTOx38cC+wHnO3nPGld/ePKv+FQ=
Subject key identifier: 40:30:EF:05:BA:B0:14:BB:0D:7A:D6:87:8B:CC:BA:5C:D5:0E:8B:02
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 7523A77A7C212DA5ECC0437EB2A18A24C3CF6515
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 00:28:39 +0000
Manifest this update: Thu 03 Sep 2026 00:23:39 +0000
Manifest next update: Fri 04 Sep 2026 04:20:39 +0000
Files and hashes: 1: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=)
2: 10553E9FBD62D012FC01AA60343F1431B2A6A334.crl (hash: rnK9zf6XjDkOQNDnIuqk3qZKmBBLOEj03nireBmWe3Y=)
3: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=)
4: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 04:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:23:a7:7a:7c:21:2d:a5:ec:c0:43:7e:b2:a1:8a:24:c3:cf:65:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: Sep 3 00:23:39 2026 GMT
Not After : Sep 4 04:20:39 2026 GMT
Subject: CN=4030EF05BAB014BB0D7AD6878BCCBA5CD50E8B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:db:66:39:8d:d7:12:84:bd:06:8f:32:db:
55:ce:dc:0d:99:e3:08:4f:24:a6:69:e5:e0:0b:2a:
2c:50:16:41:2f:31:f3:6c:f3:63:22:2b:f2:bd:8a:
7f:68:80:06:29:d5:b5:c4:e0:9a:c4:05:dd:b7:e0:
84:5d:ab:27:ee:58:b8:0e:c4:d3:2a:48:07:94:b2:
79:88:49:b3:18:84:5c:14:a2:0c:ef:9a:d9:e0:a6:
78:a6:81:cd:ea:43:d4:44:48:38:8f:04:84:bd:23:
ee:6c:95:36:20:f5:89:df:74:4a:39:52:23:3a:ea:
59:7b:9f:fd:54:e1:37:8d:96:58:7e:f3:44:23:3c:
04:e8:73:88:72:3c:cb:62:51:71:1b:ac:70:43:31:
00:93:93:64:65:4d:d8:2b:6a:1b:b8:19:f3:5b:31:
bf:7d:2e:b7:69:1b:28:8d:64:d7:3c:7e:76:a6:bb:
ce:1a:68:62:96:c0:71:20:5f:5f:27:3c:d5:ad:ac:
4e:e6:6a:65:ec:29:e5:af:c6:41:ac:14:3f:ee:47:
95:8c:81:4f:8a:24:da:06:cb:35:f0:a4:7a:ab:4e:
9d:05:e0:74:6d:84:f2:cc:33:69:f6:f5:e6:50:68:
d6:91:da:a4:6c:4d:7c:6e:7d:11:c4:1a:e1:57:06:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:EF:05:BA:B0:14:BB:0D:7A:D6:87:8B:CC:BA:5C:D5:0E:8B:02
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a8:ea:92:87:15:46:ee:4a:33:b0:a3:3b:ec:9b:05:f5:af:
40:66:fb:9f:34:e9:3f:d2:b5:7a:0f:8a:4c:72:31:ce:44:ad:
bc:f1:e6:f0:01:0b:c9:ca:6c:99:95:94:81:6b:d4:95:05:26:
2c:0e:dd:db:4f:a2:9c:94:ba:4a:fe:c1:07:7d:68:52:1b:16:
64:61:9b:93:4b:c8:1e:00:41:4c:66:7a:72:7d:48:7c:f2:37:
06:0d:f7:9a:3b:56:2f:9a:a6:eb:98:aa:0e:5b:06:4e:8a:c1:
a5:d1:7f:49:f1:00:6b:e7:f7:a9:26:d5:f3:6b:76:69:49:c8:
c5:d4:88:c4:41:86:fc:0c:23:82:40:01:b2:4d:e0:a0:b0:e2:
5c:95:84:c6:34:15:57:eb:20:e4:11:10:46:56:ac:a6:54:08:
77:ca:6d:a0:7b:c0:9a:32:8a:74:5f:e0:6a:43:f5:f2:6c:f4:
66:af:50:12:74:f5:05:79:2a:19:b2:cf:79:38:fc:34:95:f3:
1c:a6:76:96:af:6d:54:22:81:04:21:39:8b:59:b8:42:8d:3c:
09:5f:07:da:7e:5b:21:a0:7d:c1:c9:ad:3a:81:f9:2d:ff:9e:
22:7a:8a:f3:7e:f2:8a:14:41:d0:fb:1d:b3:e7:d1:6e:b9:94:
3c:39:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:27:50 2026 by rpki-client