
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
File: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft (raw, json)
Hash identifier: SpoumCB3FT7iNEd35TgEPavJgcdwT7X6F9qeZphQYjA=
Subject key identifier: 02:15:61:FC:50:5F:A0:C1:3E:E8:E4:C3:64:37:D6:AE:FA:BD:FF:77
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial: 1B62110C73B43245EF617BB9F604F2CA6DE023E6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 02:31:09 +0000
Manifest this update: Wed 04 Nov 2026 02:26:09 +0000
Manifest next update: Thu 05 Nov 2026 06:27:09 +0000
Files and hashes: 1: 05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl (hash: uLaPLw6i6jSGh7OBUw8tQvVwSSqbObEFjxLjJtjgtZI=)
2: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=)
3: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: 4wSG33FQW497l9wd4KCTscDggwNpLmu4SJOzxz44RVQ=)
4: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: 5ip0zyOFzxKc/CLTR+cuhj/u/zV2t14XhZlqC+WxFAQ=)
5: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: 7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:62:11:0c:73:b4:32:45:ef:61:7b:b9:f6:04:f2:ca:6d:e0:23:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Validity
Not Before: Nov 4 02:26:09 2026 GMT
Not After : Nov 5 06:27:09 2026 GMT
Subject: CN=021561FC505FA0C13EE8E4C36437D6AEFABDFF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:de:ac:5c:43:96:5e:01:7b:f8:d3:08:59:
1e:5e:99:85:5a:85:c2:f5:d1:39:01:cf:59:4d:77:
bf:d3:f2:bb:e5:25:d8:99:db:79:72:b5:05:40:70:
9f:36:8d:9f:c1:74:b6:89:a4:eb:81:d2:35:d1:b8:
53:8b:fe:3b:a6:e8:5e:71:92:ae:a0:1d:88:99:0e:
b8:be:8e:aa:d9:7c:f2:01:dd:38:98:00:3b:77:7b:
87:5a:9f:4d:81:6c:c4:a8:30:6f:41:b8:ac:5b:9f:
a5:99:66:3f:29:8c:c2:f1:eb:14:06:47:58:5b:2e:
43:f0:33:34:30:91:38:31:cc:bf:a9:51:4f:ff:88:
84:9a:4a:09:2b:97:75:83:1a:36:be:f0:bc:6a:eb:
f0:5d:7e:04:5d:1a:b7:99:89:04:a2:62:ae:d2:fe:
a2:25:bb:84:53:25:55:0f:1c:42:81:a8:ad:41:5c:
5d:f1:99:ad:6f:43:8b:26:8c:90:b6:35:7e:2e:c0:
da:8d:59:30:63:84:ff:52:21:28:91:db:9e:3d:83:
fc:4f:1b:a2:bd:d7:03:33:72:2d:73:11:8d:05:2a:
38:9a:b6:06:09:9f:2b:2f:40:01:a7:35:d3:f9:d6:
17:a4:ab:41:bd:47:a3:47:1e:75:9a:68:98:b7:73:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:15:61:FC:50:5F:A0:C1:3E:E8:E4:C3:64:37:D6:AE:FA:BD:FF:77
X509v3 Authority Key Identifier:
keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f8:f4:07:8d:bf:c3:63:f3:b2:0f:eb:bc:ce:70:18:a7:aa:
ff:c3:03:66:d6:94:39:1f:45:94:08:02:1d:9b:c5:00:8f:05:
db:4d:fa:ba:4c:ca:b5:5a:5b:2a:18:c2:33:98:d3:68:56:f6:
52:3f:0d:85:42:b9:0a:72:ce:0f:07:6f:f7:4a:ae:05:e3:34:
ca:d9:8d:c0:54:ef:05:7e:96:41:32:f9:a8:e8:ec:ae:04:69:
51:12:ad:79:1b:8e:ab:14:dd:66:61:9d:2c:fb:fc:24:47:70:
b7:af:9b:5b:39:af:19:8e:77:d3:de:72:ca:99:5d:ac:a7:00:
50:e6:c8:d1:14:91:31:26:5a:3e:85:e4:a9:72:9d:1d:40:61:
2f:29:93:8d:ef:9f:c2:b1:a7:0e:9c:98:09:84:5e:c0:ec:71:
63:37:fe:70:29:aa:e5:59:36:d4:6d:be:6d:d7:cf:a2:75:ec:
ef:a1:84:64:fe:30:46:c3:7f:3a:ec:be:a5:1f:0c:45:75:f7:
ed:5a:0f:cf:2a:0f:c0:f0:6c:f2:9d:67:f5:74:8f:40:8d:98:
91:1b:b5:42:74:15:6c:24:66:9b:80:8b:0c:2c:ca:d7:f3:86:
c9:52:58:1a:c0:9b:a7:5d:fc:1f:21:70:9b:d6:c4:2e:06:1a:
cc:c0:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:03:45 2026 by rpki-client