
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
File: 5A5DD73D891416196AA5239D921D189D149B622B.mft (raw, json)
Hash identifier: NV5JAW4eAHIEVo2Bf+TmMGRriW1Kvvyie7YbDOo2WkA=
Subject key identifier: 64:DB:AD:E4:EB:C4:90:E1:5D:E7:57:04:F5:AD:0D:AF:A2:86:07:D4
Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
Certificate issuer: /CN=5A5DD73D891416196AA5239D921D189D149B622B
Certificate serial: 64BAD09DFE487938B81621AEAB69A5F47C4019FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
Manifest number: 8B
Signing time: Fri 14 Aug 2026 13:52:19 +0000
Manifest this update: Fri 14 Aug 2026 13:47:19 +0000
Manifest next update: Sat 15 Aug 2026 15:08:19 +0000
Files and hashes: 1: 5A5DD73D891416196AA5239D921D189D149B622B.crl (hash: fs1ZuMU7qEJiJFZH/lxeXnCd2drtBe5t5sSnACjNpbU=)
2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=)
3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: LUrz0HzKQn3BDSTwVj0zPYkXFEJEXJ4mzlthepJ39U0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 15:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ba:d0:9d:fe:48:79:38:b8:16:21:ae:ab:69:a5:f4:7c:40:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B
Validity
Not Before: Aug 14 13:47:19 2026 GMT
Not After : Aug 15 15:08:19 2026 GMT
Subject: CN=64DBADE4EBC490E15DE75704F5AD0DAFA28607D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:a5:e3:86:12:52:a2:4b:b2:c7:be:f5:30:
ac:e8:4b:a2:d9:93:57:6e:78:e2:94:b0:59:6c:73:
1b:f5:65:cf:11:0b:93:bb:ef:46:c7:a9:90:09:1e:
51:50:b1:ea:96:47:14:1c:5f:63:30:ef:29:9d:b8:
b0:00:13:19:a9:cc:68:91:dc:70:1f:0d:75:eb:c8:
23:e3:5f:cb:95:ba:ae:ce:ab:08:02:74:8a:54:6b:
1e:f7:c5:78:5d:06:3c:de:43:3a:0b:d0:5d:da:ee:
c4:29:6e:17:d2:98:4a:38:b3:cf:61:58:b9:3b:67:
f3:1d:a0:0b:7c:40:98:ce:01:7f:f5:af:05:19:ad:
b9:7d:6a:d8:e5:05:b4:b3:c1:0f:5a:a8:3b:3a:a4:
de:a7:ec:e2:bb:1f:40:77:53:77:76:fb:4e:d6:ec:
bb:42:ea:f6:1d:70:25:5f:db:5c:bd:52:38:76:c8:
5f:ab:bf:94:29:3d:b8:ff:f0:3c:d1:35:54:99:4b:
8d:81:33:63:2d:1b:c3:6f:75:48:e9:38:fc:7c:2d:
82:ab:b0:8a:4f:bc:af:3f:a2:f0:8d:aa:04:08:7c:
08:ac:af:d7:fb:97:1e:a6:2f:53:44:9b:b8:51:f1:
3a:5e:8f:62:38:63:94:ed:b6:30:2e:f1:4e:c5:fd:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:AD:E4:EB:C4:90:E1:5D:E7:57:04:F5:AD:0D:AF:A2:86:07:D4
X509v3 Authority Key Identifier:
keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:53:ae:83:2f:c0:c2:5c:56:51:b4:00:1a:33:5d:9a:b7:
4b:15:95:3a:09:a2:7e:f5:2a:c6:75:3a:1e:a0:65:bf:29:f7:
79:1e:fa:b2:b8:99:e8:97:12:2a:c4:72:50:ac:88:ca:16:c5:
1b:cf:72:30:11:f9:80:45:9d:16:28:37:ec:61:91:3a:56:ad:
ac:89:3b:b3:71:87:1c:6d:dd:81:9e:55:a1:7c:79:e5:f5:df:
ab:f8:5d:4f:fa:bb:a3:1f:87:ae:09:9f:8f:07:9a:cd:03:3a:
55:cb:91:ad:c4:d3:7a:a6:07:11:6a:a7:cd:40:7f:6e:04:52:
21:1c:9f:db:7f:f9:0d:6a:81:a8:9e:ac:c1:e8:d8:69:2b:52:
22:11:1f:d8:db:c2:66:b5:36:dc:67:8c:53:4c:cc:21:87:f1:
f3:05:92:ec:6e:12:2d:d9:c0:ac:98:4e:d5:f5:f1:a1:e3:3a:
97:74:b8:d0:fb:65:2f:29:3d:7a:a1:de:e4:88:2a:f4:17:5e:
04:b0:23:ed:8c:1e:24:db:9b:0d:3f:0d:09:a8:d4:8e:30:01:
53:fb:b8:e6:12:0b:cd:c2:7f:ba:d3:68:0b:f2:05:39:0b:e5:
d5:0e:ca:e1:ea:8e:a4:b6:6f:a6:09:bf:ef:53:46:f3:6b:e3:
a5:04:30:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZLrQnf5IeTi4FiGuq2ml9HxAGfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQx
NDlCNjIyQjAeFw0yNjA4MTQxMzQ3MTlaFw0yNjA4MTUxNTA4MTlaMDMxMTAvBgNV
BAMTKDY0REJBREU0RUJDNDkwRTE1REU3NTcwNEY1QUQwREFGQTI4NjA3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXqXjhhJSokuyx771MKzoS6LZ
k1dueOKUsFlscxv1Zc8RC5O770bHqZAJHlFQseqWRxQcX2Mw7ymduLAAExmpzGiR
3HAfDXXryCPjX8uVuq7OqwgCdIpUax73xXhdBjzeQzoL0F3a7sQpbhfSmEo4s89h
WLk7Z/MdoAt8QJjOAX/1rwUZrbl9atjlBbSzwQ9aqDs6pN6n7OK7H0B3U3d2+07W
7LtC6vYdcCVf21y9Ujh2yF+rv5QpPbj/8DzRNVSZS42BM2MtG8NvdUjpOPx8LYKr
sIpPvK8/ovCNqgQIfAisr9f7lx6mL1NEm7hR8Tpej2I4Y5TttjAu8U7F/SVPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZNut5OvEkOFd51cE9a0Nr6KGB9QwHwYDVR0j
BBgwFoAUWl3XPYkUFhlqpSOdkh0YnRSbYiswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE2M2I3ZDctZWE4My00YmU5LWIyZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4
OTE0MTYxOTZBQTUyMzlEOTIxRDE4OUQxNDlCNjIyQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QTVERDczRDg5MTQxNjE5NkFBNTIzOUQ5MjFEMTg5RDE0OUI2
MjJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy
ZmMtYjMwZWIwYjQ0ZDBhLzAvNUE1REQ3M0Q4OTE0MTYxOTZBQTUyMzlEOTIxRDE4
OUQxNDlCNjIyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF0lU66DL8DCXFZRtAAaM12at0sVlToJon71
KsZ1Oh6gZb8p93ke+rK4meiXEirEclCsiMoWxRvPcjAR+YBFnRYoN+xhkTpWrayJ
O7Nxhxxt3YGeVaF8eeX136v4XU/6u6Mfh64Jn48Hms0DOlXLka3E03qmBxFqp81A
f24EUiEcn9t/+Q1qgaierMHo2GkrUiIRH9jbwma1NtxnjFNMzCGH8fMFkuxuEi3Z
wKyYTtX18aHjOpd0uND7ZS8pPXqh3uSIKvQXXgSwI+2MHiTbmw0/DQmo1I4wAVP7
uOYSC83Cf7rTaAvyBTkL5dUOyuHqjqS2b6YJv+9TRvNr46UEMCo=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:38:02 2026 by rpki-client