
$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json)
Hash identifier: 7lKW5xSx7Fd+iukrJzIlzM46HtfmowEsNBZnZyhGXpo=
Subject key identifier: BC:73:99:6D:8C:59:6E:67:F1:01:45:E1:77:D2:89:FF:BA:68:34:1D
Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1
Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
Certificate serial: 2D08631E5738260C50C7B316EEE3CFB1784C9C53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 17:33:06 +0000
Manifest this update: Mon 20 Jul 2026 17:28:06 +0000
Manifest next update: Tue 21 Jul 2026 19:25:06 +0000
Files and hashes: 1: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: Mkw6Js1CGoGq/2sg1jBmHOPBrC/TLwsHbYBFvPvpLP8=)
2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl
rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 19:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:08:63:1e:57:38:26:0c:50:c7:b3:16:ee:e3:cf:b1:78:4c:9c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
Validity
Not Before: Jul 20 17:28:06 2026 GMT
Not After : Jul 21 19:25:06 2026 GMT
Subject: CN=BC73996D8C596E67F10145E177D289FFBA68341D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:77:f7:da:3e:f9:1a:ad:c2:67:5e:f4:0d:
77:14:ed:27:cd:3a:37:9d:f5:01:93:b2:74:1f:09:
78:e4:87:69:07:b2:94:a8:5c:ed:d2:df:08:1f:11:
26:e2:53:e7:f0:73:b4:df:4f:a7:48:f5:63:61:a5:
27:09:47:20:3a:95:c4:bb:46:75:c5:47:3a:86:3d:
cd:7d:7b:5d:86:6a:34:93:b4:b4:38:2e:08:7c:d3:
b1:d2:55:48:0b:6f:75:37:d7:68:42:cc:4e:41:e2:
05:70:2a:3e:13:a2:3e:56:73:21:46:4c:64:26:e1:
4d:e0:26:6f:7d:3b:72:be:df:cb:9a:51:39:c3:44:
80:e0:4b:e1:53:ac:d4:1b:68:25:13:b0:89:21:df:
a8:0b:9e:70:23:1d:8a:cb:c9:e5:36:03:5f:6a:16:
20:8a:43:98:63:8e:c8:aa:62:38:c2:70:8c:0e:60:
4c:16:d8:a4:9d:49:85:0b:4e:15:11:59:43:27:86:
7b:8c:fb:e4:b2:2f:45:45:df:31:e5:a3:77:86:9e:
29:d5:1e:ba:b1:94:3e:38:f2:31:eb:05:ef:83:60:
c4:c8:a4:01:83:81:3b:18:f8:02:de:9e:8d:83:3b:
94:9f:85:ac:05:d9:2c:e7:f5:bd:2c:bb:f7:41:1c:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:99:6D:8C:59:6E:67:F1:01:45:E1:77:D2:89:FF:BA:68:34:1D
X509v3 Authority Key Identifier:
keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1a:ef:41:c8:98:c2:88:50:58:e2:bc:5b:01:a9:93:16:c3:
6b:f2:9d:85:16:32:42:a2:5c:b9:bb:d0:eb:60:80:e0:b4:c0:
d6:03:84:8c:34:dd:b0:0e:82:ea:7a:44:05:03:33:ea:df:b8:
48:23:9a:22:be:9c:fe:4e:b2:88:a3:90:3b:1b:6e:2f:ac:90:
83:c0:c5:b0:14:8f:09:1e:c6:88:4f:64:c8:fd:a5:96:b7:f4:
e6:9c:51:a2:0d:61:03:ba:5c:62:96:b1:d3:e4:26:68:87:68:
bf:07:1a:e2:fa:a6:a0:a8:57:f1:ac:78:37:52:ca:50:83:32:
84:9d:bb:d1:77:72:c0:fe:de:01:5d:7e:63:01:f0:ab:dc:51:
98:2e:28:58:49:bf:cf:d4:60:0f:23:8c:f8:10:4e:17:e1:04:
e2:4e:ea:f2:85:f2:9d:08:d2:24:f9:e8:36:55:ab:d3:30:43:
d6:39:ae:52:fd:66:7e:3c:0a:44:d3:4e:86:d1:8d:22:03:73:
54:9e:dc:9c:00:27:92:2a:2b:8a:0f:d9:22:00:a2:14:13:ba:
e3:71:38:d7:e0:0b:72:bb:9c:5c:53:e5:ec:24:8b:61:05:07:
22:60:54:82:5b:41:af:d4:67:c7:68:7f:9a:4e:df:bf:85:5b:
5c:96:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:51:18 2026 by rpki-client