
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
File: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft (raw, json)
Hash identifier: FTJCMl4YweC2imVEzIskUl0TnbvWpKxBYl6XHn6ir4M=
Subject key identifier: 8F:29:BA:D0:D9:6E:84:C7:4D:39:9F:D5:EE:62:93:4C:7F:54:B9:51
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial: 7A9CCE8A6211C33F71552AF207A0D56D3468B2B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
Manifest number: 67
Signing time: Fri 17 Jul 2026 05:55:14 +0000
Manifest this update: Fri 17 Jul 2026 05:50:14 +0000
Manifest next update: Sat 18 Jul 2026 08:57:14 +0000
Files and hashes: 1: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 5ip0zyOFzxKc/CLTR+cuhj/u/zV2t14XhZlqC+WxFAQ=)
2: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: 7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=)
3: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=)
4: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: 4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=)
5: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl (hash: Od8i68SqTgH1xwph9UXXhj64bF+2j2zQd0xtHfAPnnE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 04:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9c:ce:8a:62:11:c3:3f:71:55:2a:f2:07:a0:d5:6d:34:68:b2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Validity
Not Before: Jul 17 05:50:14 2026 GMT
Not After : Jul 18 08:57:14 2026 GMT
Subject: CN=8F29BAD0D96E84C74D399FD5EE62934C7F54B951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:86:53:79:25:c3:26:13:b7:fe:c4:e5:f5:
c7:23:e5:b4:3c:e8:9f:c6:2a:b2:eb:bf:ca:64:ef:
0a:1e:fa:80:84:3c:0f:49:de:7f:68:27:cf:86:7d:
c9:73:19:bc:bf:40:95:c8:f1:1e:b3:1b:43:d7:c5:
a8:a2:7d:6a:10:36:ed:9e:0b:c9:f7:aa:33:da:8e:
b0:34:f7:1c:68:0d:00:c5:a2:4d:19:88:17:4f:e4:
e7:1e:45:98:23:9f:71:3f:d8:8a:9a:e9:c8:e8:c5:
26:aa:3c:9b:ea:20:4e:ce:66:eb:95:0d:68:30:06:
b1:6b:3f:9f:8e:c2:6f:4b:0e:84:46:e5:2d:dc:45:
14:02:47:c2:ea:c5:c2:13:51:ae:a3:73:3a:bf:ea:
8f:b1:bb:dc:d0:1f:a4:8b:f2:5f:e1:67:c5:c0:a5:
f8:8d:60:4b:cf:bd:67:fc:40:47:e4:4f:8e:73:ab:
90:a2:d6:67:75:f1:45:da:4a:c2:28:ea:2c:75:f5:
0c:c2:23:90:9f:74:25:7e:98:32:0c:08:c6:70:06:
4b:19:2d:a3:24:c7:12:71:9b:83:da:41:f9:78:fd:
e0:44:c1:24:c5:a5:f8:2d:fd:6f:92:84:32:d4:c1:
63:00:c6:73:c9:29:14:da:e6:da:c9:00:9f:e1:57:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:BA:D0:D9:6E:84:C7:4D:39:9F:D5:EE:62:93:4C:7F:54:B9:51
X509v3 Authority Key Identifier:
keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:43:98:d2:c6:e9:3f:84:87:eb:fa:0a:7f:ae:ab:32:90:e6:
bf:fa:08:5c:d7:11:b1:29:cc:a2:2e:20:38:91:61:89:3d:70:
ff:75:ed:02:3a:f1:a3:8e:02:95:ae:0f:df:49:2d:9b:90:7d:
69:12:bc:d1:8a:a4:5f:8a:7d:44:06:18:70:4d:70:1f:3a:1a:
d4:e0:33:b8:7b:4c:41:46:c6:8d:47:63:dc:c0:0b:90:b0:b8:
01:95:7c:26:d8:13:48:34:3f:8f:3e:e6:08:0c:40:c5:b6:84:
aa:43:0c:07:fb:c4:c2:eb:95:04:65:e1:12:11:1b:44:d1:2e:
a4:ac:21:a1:c8:ea:24:88:31:28:ca:03:80:7d:6a:3f:43:85:
44:17:eb:6d:6e:a5:d0:c7:29:cb:d9:78:3d:66:40:6e:5a:6a:
0e:96:e9:a5:34:49:7e:d3:a8:ec:78:c2:6a:da:76:05:62:f9:
2d:98:7a:c0:35:78:35:d6:be:0f:5b:94:3a:67:0e:2a:31:ca:
f7:eb:13:55:66:ce:d5:23:4d:c5:4d:ca:f1:91:c6:52:85:89:
8d:ae:6c:65:08:58:31:8b:43:88:85:98:c4:f8:99:3c:1a:1c:
91:b9:36:a1:37:d2:a0:10:30:76:39:07:3a:26:42:29:98:50:
c5:ea:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:41:46 2026 by rpki-client