
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
File: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json)
Hash identifier: tsHPZtpicFZPWB8bBhYGeFM1JvmP8WrhtQis/5xEyp0=
Subject key identifier: 7A:E5:F3:DA:D1:7D:59:9F:77:19:F7:A6:E6:20:3E:2E:29:0E:EB:20
Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
Certificate issuer: /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Certificate serial: 07DECFE512D9E264D422FCA7BDD8166B7E37B84D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:06:51 +0000
Manifest this update: Tue 02 Jun 2026 18:01:51 +0000
Manifest next update: Wed 03 Jun 2026 18:09:51 +0000
Files and hashes: 1: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=)
2: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=)
3: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: ue7sPnG868Ih4fg12lFYdhHlmD1D8Po1CuO9ZaWgywQ=)
4: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:de:cf:e5:12:d9:e2:64:d4:22:fc:a7:bd:d8:16:6b:7e:37:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Validity
Not Before: Jun 2 18:01:51 2026 GMT
Not After : Jun 3 18:09:51 2026 GMT
Subject: CN=7AE5F3DAD17D599F7719F7A6E6203E2E290EEB20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:8c:07:d4:24:03:9e:98:7d:5d:18:41:cd:
00:35:fd:24:d7:14:a6:ad:ee:31:2c:fd:1f:19:3a:
4d:15:43:38:21:d9:d8:a1:92:71:79:ed:e2:e6:a2:
6a:1b:38:b4:bb:68:e0:be:9d:f7:d9:b0:8f:5b:e3:
45:2c:92:eb:62:1e:7f:b5:6c:ed:99:27:c9:70:a0:
00:8e:6e:f4:2e:ad:8b:c6:1c:fd:cd:02:4d:3d:b3:
ed:68:1c:5e:7c:8f:75:81:b5:9c:b7:59:c6:8b:e1:
fb:37:62:14:e1:7d:66:18:99:75:82:7b:6c:36:1c:
ac:79:69:16:8c:dc:f1:82:45:e4:fd:4c:8a:9d:20:
9f:19:a8:3a:6e:50:bb:31:79:5a:79:34:6c:0e:92:
c7:10:1a:6b:3b:ac:64:03:0c:fa:8c:37:c0:6a:2d:
10:38:98:8f:89:5e:98:92:b2:5d:af:8a:1e:40:50:
a8:e3:5b:c8:be:37:fd:f7:94:a3:29:79:5d:f8:0e:
97:02:c9:a7:30:56:a4:c9:86:12:f5:68:42:3a:3e:
64:84:a4:4d:6a:b3:93:29:b9:b7:22:07:8d:f3:98:
67:69:c2:94:65:30:eb:03:45:b0:9b:dd:12:d0:b5:
35:94:6b:83:39:2f:46:20:ba:00:e4:99:c2:c9:1f:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:F3:DA:D1:7D:59:9F:77:19:F7:A6:E6:20:3E:2E:29:0E:EB:20
X509v3 Authority Key Identifier:
keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d2:f0:7d:d7:a9:9c:49:9c:60:ec:f0:cb:b1:a9:cc:91:99:
dc:1c:0f:0a:44:62:c4:fd:3e:53:cd:f9:ca:8a:a6:35:3c:52:
b9:e5:e8:23:c1:b4:2d:de:b2:5b:f4:ed:97:df:86:2b:79:df:
81:e0:d4:4a:ef:46:fc:f9:fe:3f:67:2c:0c:1b:6a:21:b6:72:
db:02:c0:27:b4:8e:6d:66:e5:c0:c2:7c:a3:f7:71:43:e5:22:
14:b5:08:af:0c:bd:42:8e:4a:f9:29:e0:f8:ec:ae:2a:78:7e:
4f:77:4f:1e:8b:77:22:57:77:11:18:e9:ce:38:72:b4:5f:f5:
51:b2:02:c6:f1:10:ca:56:4c:64:16:33:20:e4:b2:86:0e:6d:
34:99:91:9c:82:58:85:da:38:56:30:25:73:b0:46:b7:c9:cf:
da:b7:f5:d5:6b:78:8f:29:11:73:e4:26:8c:2b:96:1c:87:b1:
cc:70:cb:b2:16:06:44:dd:34:27:71:ca:f9:ed:70:39:c7:55:
a1:e2:4a:cc:22:a4:84:57:12:ff:26:ae:51:9d:3d:ef:0c:cc:
17:d3:92:cf:f5:05:38:ee:13:23:6d:4e:d8:ba:8e:87:df:11:
14:eb:33:3d:d4:61:0c:5b:a7:cb:6a:f5:c4:a8:43:4b:41:fb:
24:5f:6c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:57:43 2026 by rpki-client