
$ rpki-client -vvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
File: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft (raw, json)
Hash identifier: 4vex1vDXE90hkPjOn5S6g9Hyp3togKPqV6jCibZL8KY=
Subject key identifier: 3D:20:03:6A:DF:68:5C:7C:78:25:FC:29:64:DE:5D:9A:29:7A:8A:85
Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
Certificate issuer: /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Certificate serial: 79E2E4FB8AEE3DA44E29629A70E64A1157408157
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 23:30:05 +0000
Manifest this update: Mon 20 Jul 2026 23:25:05 +0000
Manifest next update: Wed 22 Jul 2026 00:16:05 +0000
Files and hashes: 1: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl (hash: m80f+rhaBh250GHdpsq3Xa3wNxmhGkmvnd1GLIOmoxM=)
2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 00:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e2:e4:fb:8a:ee:3d:a4:4e:29:62:9a:70:e6:4a:11:57:40:81:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Validity
Not Before: Jul 20 23:25:05 2026 GMT
Not After : Jul 22 00:16:05 2026 GMT
Subject: CN=3D20036ADF685C7C7825FC2964DE5D9A297A8A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:c4:d1:e4:ff:cf:e0:a3:1a:d6:5b:89:e5:
e8:71:5d:62:40:b3:14:f8:58:db:e4:f7:3a:fd:df:
e8:30:fb:74:fd:32:e5:ee:c1:b0:c6:88:73:83:b9:
a4:f3:78:c8:34:59:a3:5a:91:5a:fb:e0:58:0e:4e:
61:0c:a1:1b:a2:93:c6:ce:b6:57:70:0c:f5:56:95:
33:c0:1c:1f:06:70:3a:c7:ce:92:3b:81:36:8d:36:
7e:fd:2c:f7:7a:fe:2f:9a:11:4d:af:8d:47:42:51:
7b:e2:b7:07:5b:5b:de:aa:70:be:ba:17:d3:6e:cb:
e6:78:67:4a:c9:1d:ca:00:35:75:42:e8:03:be:e7:
12:66:b7:ad:5d:56:49:fb:9a:c3:a9:11:eb:c9:26:
fa:cf:0b:a7:8d:33:10:39:cc:79:04:ee:26:ad:c6:
c5:b2:42:9a:be:0f:99:ee:69:77:fa:75:d5:af:ea:
83:df:16:1a:80:6e:fc:ff:35:8a:8d:57:f9:46:0e:
e2:41:f0:bd:da:24:49:a4:e7:77:f5:d4:0d:5a:cc:
aa:1a:0f:78:93:92:08:e7:6a:e3:48:95:fc:eb:0d:
08:fa:fc:7c:0e:f4:95:b2:0e:76:3c:8c:02:f9:ca:
0f:0b:2c:40:4a:28:8f:65:cf:cd:27:9e:cb:b8:3d:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:03:6A:DF:68:5C:7C:78:25:FC:29:64:DE:5D:9A:29:7A:8A:85
X509v3 Authority Key Identifier:
keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:d8:f8:b6:95:5d:a7:50:4d:76:bd:49:89:e0:a3:ea:08:
7b:9d:c4:bb:41:e7:85:c0:21:09:43:0f:90:7d:4d:23:3f:84:
23:1c:e0:c7:87:65:9c:13:b8:80:53:31:6c:9d:8c:ac:fa:08:
fb:e8:68:e2:03:39:63:0a:15:03:c3:ad:d7:4a:8a:ca:4b:16:
15:38:9e:e5:a0:39:55:a9:f5:0a:9f:9e:bb:c8:70:c2:0f:af:
0c:88:10:3c:a6:45:47:89:43:e8:34:48:14:60:27:a0:c9:36:
9d:5f:eb:7c:33:79:b9:45:5f:84:0f:3b:41:d1:82:e1:93:6a:
9f:89:99:58:a8:d8:c8:a0:53:04:9e:4b:af:96:b5:9d:74:d4:
7a:12:b4:ac:e4:a1:fa:00:57:9b:0e:83:e6:98:10:6e:f7:73:
ae:72:ec:e0:2d:e2:56:da:95:77:07:be:2c:ea:55:8b:12:e6:
53:a4:36:56:25:6c:e6:4e:37:33:12:d1:6e:50:11:4d:d1:03:
42:1a:14:aa:ff:de:8c:3b:62:03:94:ca:76:05:d9:18:6e:c4:
10:3c:46:b5:4b:ee:af:a0:cc:f3:25:b9:df:7e:b5:f5:0c:6b:
9a:5a:6d:97:58:46:2b:12:fe:dd:a6:e6:b1:bb:d3:11:c6:02:
7f:b3:68:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeeLk+4ruPaROKWKacOZKEVdAgVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3
QTNCQjFEODAeFw0yNjA3MjAyMzI1MDVaFw0yNjA3MjIwMDE2MDVaMDMxMTAvBgNV
BAMTKDNEMjAwMzZBREY2ODVDN0M3ODI1RkMyOTY0REU1RDlBMjk3QThBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfsTR5P/P4KMa1luJ5ehxXWJA
sxT4WNvk9zr93+gw+3T9MuXuwbDGiHODuaTzeMg0WaNakVr74FgOTmEMoRuik8bO
tldwDPVWlTPAHB8GcDrHzpI7gTaNNn79LPd6/i+aEU2vjUdCUXvitwdbW96qcL66
F9Nuy+Z4Z0rJHcoANXVC6AO+5xJmt61dVkn7msOpEevJJvrPC6eNMxA5zHkE7iat
xsWyQpq+D5nuaXf6ddWv6oPfFhqAbvz/NYqNV/lGDuJB8L3aJEmk53f11A1azKoa
D3iTkgjnauNIlfzrDQj6/HwO9JWyDnY8jAL5yg8LLEBKKI9lz80nnsu4PY4bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPSADat9oXHx4JfwpZN5dmil6ioUwHwYDVR0j
BBgwFoAUXPB1HQkAiSc1tnz8d/K6wXo7sdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzI0ZGI1NjctMzNhOC00Y2UwLWJjZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQw
OTAwODkyNzM1QjY3Q0ZDNzdGMkJBQzE3QTNCQjFEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81Q0YwNzUxRDA5MDA4OTI3MzVCNjdDRkM3N0YyQkFDMTdBM0JC
MUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj
ZmYtY2IwZjBhODVjMjM5LzAvNUNGMDc1MUQwOTAwODkyNzM1QjY3Q0ZDNzdGMkJB
QzE3QTNCQjFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAICb2Pi2lV2nUE12vUmJ4KPqCHudxLtB54XA
IQlDD5B9TSM/hCMc4MeHZZwTuIBTMWydjKz6CPvoaOIDOWMKFQPDrddKispLFhU4
nuWgOVWp9QqfnrvIcMIPrwyIEDymRUeJQ+g0SBRgJ6DJNp1f63wzeblFX4QPO0HR
guGTap+JmVio2MigUwSeS6+WtZ101HoStKzkofoAV5sOg+aYEG73c65y7OAt4lba
lXcHvizqVYsS5lOkNlYlbOZONzMS0W5QEU3RA0IaFKr/3ow7YgOUynYF2RhuxBA8
RrVL7q+gzPMlud9+tfUMa5pabZdYRisS/t2m5rG70xHGAn+zaJU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 08:24:44 2026 by rpki-client