
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
File: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft (raw, json)
Hash identifier: WpOjKkCKoMZ1u3z/od8J22QfGoYoTTs3Vxu9EORQDMQ=
Subject key identifier: 01:A8:65:24:03:29:76:7D:DB:3F:CC:76:EB:70:DA:2E:2F:75:71:51
Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
Certificate issuer: /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Certificate serial: 05F0C9797AC5A7AD5C60EBA26402576CAD87FCAE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 22:33:59 +0000
Manifest this update: Mon 20 Jul 2026 22:28:59 +0000
Manifest next update: Tue 21 Jul 2026 23:08:59 +0000
Files and hashes: 1: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl (hash: 4MdG/qFVwWDjX2od8YxpGvEJZiuqgH7UcGJkhazKrfk=)
2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f0:c9:79:7a:c5:a7:ad:5c:60:eb:a2:64:02:57:6c:ad:87:fc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Validity
Not Before: Jul 20 22:28:59 2026 GMT
Not After : Jul 21 23:08:59 2026 GMT
Subject: CN=01A865240329767DDB3FCC76EB70DA2E2F757151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:10:c2:86:43:45:f1:34:06:a6:b3:39:68:
eb:b3:8a:c5:c9:2f:e4:eb:14:51:79:91:f6:c9:08:
e8:71:e1:43:2f:fe:3b:b5:8d:0c:37:88:49:3d:31:
d4:be:7f:ef:d8:39:b2:48:a4:a0:56:bd:48:50:47:
a2:e4:4e:5e:fe:06:57:11:8f:38:2a:8b:df:53:1d:
d0:21:cd:d5:71:4c:6f:64:10:8a:fe:8e:45:e4:a5:
d1:39:f7:07:51:75:87:6e:fe:83:f0:21:9c:e7:08:
7c:89:2c:71:9c:8c:6a:dd:ac:fa:97:ce:d9:d5:aa:
69:91:af:74:f5:f0:4b:82:5b:34:ec:64:e3:46:1b:
f9:dd:7e:2d:58:2b:e6:0d:8c:29:b9:82:f7:3a:d9:
da:84:79:71:88:9d:98:4d:9a:0b:ce:9d:3b:47:aa:
6b:ed:75:2f:73:0f:50:e3:c6:79:5e:0d:65:4f:fe:
33:c0:3c:db:8f:00:c0:a7:a9:36:e5:64:77:76:35:
e6:e2:63:a8:02:e1:62:9d:66:11:7a:c7:d5:23:6d:
43:7e:97:5e:91:18:14:09:80:ac:46:4e:d0:3e:1b:
cb:34:f4:9f:63:8a:69:9d:39:a7:e5:81:63:b9:4f:
ad:59:36:34:d6:d6:4b:7f:ac:cb:31:ff:c1:52:ae:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:65:24:03:29:76:7D:DB:3F:CC:76:EB:70:DA:2E:2F:75:71:51
X509v3 Authority Key Identifier:
keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0a:db:02:b4:98:4d:07:31:04:c4:99:63:11:c8:a8:3f:3b:
ce:af:e9:35:a5:e3:10:c9:22:89:15:c0:f0:c8:ad:b8:70:c7:
47:7b:5c:b9:86:57:6d:ec:b4:67:13:77:d9:37:db:79:55:62:
18:af:ee:6f:53:04:3a:c0:35:73:02:c6:f5:9f:e7:79:c1:cb:
46:e1:a6:57:98:44:dd:31:d2:92:42:e6:0d:96:13:33:1c:ea:
a7:61:e9:ac:6c:54:23:7e:b2:05:49:ed:e8:a2:a2:09:ba:1a:
9d:53:f9:6f:72:4a:43:d8:01:d1:f0:d7:eb:9e:c6:1b:5c:3d:
b7:7b:66:de:73:4b:cf:cb:76:08:0d:8c:60:ac:82:38:06:4e:
ed:f1:0c:e4:64:64:e2:ca:05:bc:32:6e:e3:fb:89:64:f6:79:
ba:b0:7b:7d:1d:30:a9:b1:4f:28:50:c9:03:43:0e:6e:35:6e:
e3:df:28:28:39:57:ac:bb:aa:03:df:84:cb:cd:d1:b5:72:98:
47:41:98:5f:b7:d4:1d:d9:5f:6e:4f:d4:12:18:55:62:3d:fa:
41:63:9d:38:0e:92:3d:99:3b:d9:91:bc:c1:63:95:5d:fc:5c:
9f:ae:a0:06:31:42:6f:96:fc:b7:11:61:4e:0b:70:dc:89:56:
2c:53:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:22:37 2026 by rpki-client