
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json)
Hash identifier: 7zTS0421Lk4TtkVuf2wdTx/vKORIIY/X9uvRXNt3DXI=
Subject key identifier: 03:B9:6F:2D:B7:24:8A:7A:77:8E:D4:21:23:37:A7:55:FE:C8:56:57
Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B
Certificate serial: 554783BE510E745A2F458CF0CEA0DB4D0804E261
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
Manifest number: 4C
Signing time: Sat 27 Jun 2026 21:17:13 +0000
Manifest this update: Sat 27 Jun 2026 21:12:13 +0000
Manifest next update: Mon 29 Jun 2026 00:54:13 +0000
Files and hashes: 1: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: D6tZxuDs06qW1hdZnOznLWSdeMWkcGh5G2R8T0O9RbI=)
2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=)
3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 10:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:47:83:be:51:0e:74:5a:2f:45:8c:f0:ce:a0:db:4d:08:04:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B
Validity
Not Before: Jun 27 21:12:13 2026 GMT
Not After : Jun 29 00:54:13 2026 GMT
Subject: CN=03B96F2DB7248A7A778ED4212337A755FEC85657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:1e:f3:50:58:d0:2a:25:b6:47:31:a7:9f:
6d:03:2f:f6:0f:4f:75:ef:e6:f9:83:98:27:9e:4a:
84:00:cb:76:bd:9f:62:45:d1:18:24:9a:d9:bc:95:
63:1c:77:f0:1e:b2:96:e2:20:a4:2e:e8:0e:68:0f:
cf:a7:fc:32:83:9a:1c:32:96:af:cf:1e:0e:05:c3:
fb:85:31:5c:ed:cd:ba:1b:37:3f:7d:14:49:02:2a:
96:43:37:a4:34:4d:7f:6d:06:8f:b9:82:f5:e9:eb:
ef:1d:5e:5f:33:cf:3a:bf:43:60:8a:c2:33:72:83:
8a:2d:0d:e1:5a:7d:c7:d5:06:0d:3b:92:33:9c:0b:
23:a1:bc:f8:33:45:e9:d2:2b:d9:44:88:37:9d:fa:
ec:64:7a:73:25:88:aa:5b:d2:b3:73:52:84:44:89:
66:c3:cc:1f:07:90:e9:29:04:ea:e7:f9:4b:4a:91:
84:f0:91:b9:13:8d:3c:14:b5:21:74:fe:5f:ed:d1:
c5:ff:30:92:13:db:c0:62:8b:b7:96:76:a7:a3:62:
dd:aa:06:6d:28:62:36:92:0c:39:01:81:84:16:f9:
72:ad:0b:a0:eb:20:a8:12:e4:c3:eb:81:ec:fc:6f:
2f:9a:f3:97:fa:52:31:3b:0b:cc:cd:b6:10:4e:2d:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:6F:2D:B7:24:8A:7A:77:8E:D4:21:23:37:A7:55:FE:C8:56:57
X509v3 Authority Key Identifier:
keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d4:12:47:8a:b4:99:66:eb:eb:f8:1e:0f:17:14:39:7a:4d:
88:df:cb:c7:2d:96:10:9d:8f:c0:c0:56:ef:74:c7:43:4d:f5:
9e:fb:05:97:2b:eb:e3:da:d1:42:ad:3a:06:4b:03:4d:1f:d3:
6d:ae:d7:e5:ec:4e:4d:07:c8:a9:a0:ae:f3:57:ad:3a:08:21:
44:a7:2b:f8:ac:03:cd:99:4d:18:70:b8:87:d0:2d:23:9d:90:
e7:52:5f:6a:13:f7:b9:49:67:91:b7:5d:ce:b4:d9:f5:36:b9:
33:a9:68:5d:b4:84:3d:6b:6d:70:67:ab:73:08:b9:3d:fa:d1:
d4:f1:e5:08:f0:80:4d:dc:f0:79:86:f0:b4:a2:d6:c3:a5:04:
e8:75:cb:e0:17:da:a0:cf:bc:a0:8b:e3:74:01:07:62:8a:77:
65:2b:84:a0:79:c7:24:d4:7b:1f:f4:a6:d0:e5:4e:3a:7e:52:
e4:cb:24:d6:5d:0f:af:2a:c9:f6:cc:24:e1:c6:43:81:6e:56:
d1:32:34:5e:bd:61:78:50:ba:ec:77:95:21:d7:48:14:0a:6c:
24:2b:d8:5a:a3:f9:cb:1d:9f:fc:3f:1a:74:79:e9:d4:36:14:
b0:68:10:92:32:de:b4:fd:a9:b7:59:51:33:26:dd:27:51:f1:
80:8b:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:16:01 2026 by rpki-client