
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
File: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft (raw, json)
Hash identifier: XhboErYe6/xNzrspexSbE1E3VQSAipt1g4EM82hSq4A=
Subject key identifier: FD:B2:9A:97:25:E1:CD:D0:33:BB:BC:5A:3C:E6:E3:70:87:84:95:46
Authority key identifier: 5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED
Certificate issuer: /CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED
Certificate serial: 5CF99F9629F86236663998D2110570F26487C830
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
Manifest number: A7
Signing time: Thu 03 Sep 2026 06:35:47 +0000
Manifest this update: Thu 03 Sep 2026 06:30:47 +0000
Manifest next update: Fri 04 Sep 2026 06:36:47 +0000
Files and hashes: 1: 5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl (hash: iotHByr7Z3QehkPIvCBDo+GLFvnUyPmdzdsrt0V8pHE=)
2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: aOlWVzlvXbOa4KHfHqYRVq472gGuD+dyeTRVu2qUTbc=)
3: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: 7rg8BQPn02cWQCL5uHjDLR1BDjr+8xgU8r0m19XIL1o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl
rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f9:9f:96:29:f8:62:36:66:39:98:d2:11:05:70:f2:64:87:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B7839D3FA2FBC374520656B0EBDB78743B968ED
Validity
Not Before: Sep 3 06:30:47 2026 GMT
Not After : Sep 4 06:36:47 2026 GMT
Subject: CN=FDB29A9725E1CDD033BBBC5A3CE6E37087849546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:22:f3:63:d0:8b:fb:5d:e6:84:0d:49:c3:
5c:11:f1:8d:73:07:98:0d:5e:5d:12:a5:6f:2d:54:
a4:d2:49:2d:e1:84:68:77:cd:12:61:d3:6f:7d:dc:
fc:63:81:69:05:e5:7f:d5:76:10:c5:6c:ad:65:25:
4f:f0:5c:c8:1c:6b:a6:b4:1f:53:02:3f:82:db:e0:
6b:85:fc:47:39:7f:9c:3a:e9:4b:d0:3e:97:d4:f1:
9b:65:02:6a:eb:16:80:64:83:be:85:9f:32:54:0e:
43:c8:c5:fd:10:64:f0:4a:55:24:ac:2c:b0:98:41:
99:9d:88:dd:4a:17:fd:a1:6f:e4:e0:6e:05:1c:5a:
f3:69:45:a9:80:96:93:13:8d:04:bf:02:db:9b:4a:
84:f6:ba:24:e9:25:23:78:cf:6b:79:eb:37:a0:1d:
e0:1d:18:bd:14:08:25:e3:31:2c:19:19:16:15:78:
73:14:1b:6f:c9:8a:36:87:79:74:5b:75:6d:9b:8a:
99:09:c0:ae:c7:b7:b0:10:38:73:91:8d:70:21:f8:
9f:5b:6d:8b:19:ab:e6:c9:bc:2a:c5:48:f3:98:d5:
87:aa:bf:91:56:74:63:25:2f:dc:9e:b0:5e:7f:7e:
84:f5:02:ae:21:c8:6b:31:b8:61:3c:0c:37:2c:1d:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:9A:97:25:E1:CD:D0:33:BB:BC:5A:3C:E6:E3:70:87:84:95:46
X509v3 Authority Key Identifier:
keyid:5B:78:39:D3:FA:2F:BC:37:45:20:65:6B:0E:BD:B7:87:43:B9:68:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B7839D3FA2FBC374520656B0EBDB78743B968ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/5B7839D3FA2FBC374520656B0EBDB78743B968ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:22:13:b6:ed:1b:78:05:58:36:47:35:9d:16:a6:0e:45:bd:
a1:a6:bb:72:a3:4b:67:c3:28:54:92:79:c0:86:94:4e:23:47:
3d:28:7c:76:1f:93:7a:96:a3:19:ea:66:ed:6b:81:50:e7:4d:
33:6a:5e:12:28:84:98:af:dc:40:a7:49:d0:96:fd:7d:a4:ff:
ce:f3:6c:c0:ca:cc:09:df:d2:b7:1d:df:51:e8:fc:ce:19:21:
e5:02:10:7e:7b:5c:cc:0b:8b:9e:82:ec:5c:f9:84:fb:c0:a0:
33:0d:3a:a1:a2:0d:0e:ed:52:eb:cc:c5:1e:6a:32:16:76:50:
9f:fa:85:4d:53:d5:f7:97:5f:ff:1b:6c:60:73:83:4a:7a:53:
89:f0:fe:f3:64:e0:a7:48:e8:e2:35:0e:eb:03:ce:39:69:58:
aa:92:3d:30:bd:46:42:42:bf:17:66:74:04:61:29:38:c4:1c:
f6:28:15:6d:dc:04:bf:ba:93:e2:a1:e6:7e:b5:d9:1a:10:31:
e8:d3:58:da:96:31:2b:ef:28:73:44:e2:1d:9d:63:0b:43:ae:
88:cd:6d:05:43:ad:fe:68:b5:b1:a1:0c:25:b8:3a:14:26:78:
1a:c9:ef:e9:ae:b4:26:29:3f:b5:29:63:3b:28:f6:0c:03:2c:
ab:9e:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:29:45 2026 by rpki-client