
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.mft
File: F5B80CDE21C19D1110E1718B273B65D38874444D.mft (raw, json)
Hash identifier: 2q0piAah+8P4fTu+TD4wRhYmBHftyVO6qyb+W2uUjlM=
Subject key identifier: 36:EE:52:EB:C9:95:31:D7:71:7B:1E:B1:07:9D:8A:8B:E7:85:4D:AF
Authority key identifier: F5:B8:0C:DE:21:C1:9D:11:10:E1:71:8B:27:3B:65:D3:88:74:44:4D
Certificate issuer: /CN=F5B80CDE21C19D1110E1718B273B65D38874444D
Certificate serial: 7A970E7357889F843F1566979CD354599525A129
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 10:35:29 +0000
Manifest this update: Sun 02 Aug 2026 10:30:29 +0000
Manifest next update: Mon 03 Aug 2026 11:14:29 +0000
Files and hashes: 1: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: +b6OR1m5Wrbi8EyIb9DIDN7c0v3tceP0g7OoQbnx1jM=)
2: F5B80CDE21C19D1110E1718B273B65D38874444D.crl (hash: yDSvWSpBw8PFEKAiBgJT5VMjvDPmzLhleXkvpPjdE5U=)
3: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: lH+nzpIH7qgPs23GtnInagGD3Vn9prF5U113/245LQE=)
4: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: +ImmpioC9EbyLsM6+LKZGvZ/AcEvhcH94lrDFwtcIds=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.crl
rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:97:0e:73:57:88:9f:84:3f:15:66:97:9c:d3:54:59:95:25:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5B80CDE21C19D1110E1718B273B65D38874444D
Validity
Not Before: Aug 2 10:30:29 2026 GMT
Not After : Aug 3 11:14:29 2026 GMT
Subject: CN=36EE52EBC99531D7717B1EB1079D8A8BE7854DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:60:fc:10:ac:dd:17:6b:af:28:a1:79:c3:
9c:d9:ea:54:5f:56:3f:60:2d:b2:99:44:09:32:ba:
34:97:19:f1:49:19:45:d7:67:1d:2a:49:7c:ca:34:
a3:fb:14:0b:5d:0d:92:09:9e:81:33:a0:4b:51:c1:
d6:44:92:e6:39:c2:c3:08:70:e6:19:de:b5:93:72:
42:4f:a8:ad:95:da:d7:96:3a:d3:87:23:e0:15:44:
f5:7f:89:53:4c:89:b1:bd:7e:64:7f:cd:17:83:d6:
58:fe:49:a7:84:77:c9:0a:4e:7d:d0:ee:3a:17:81:
36:93:7b:76:cb:98:b3:a5:cf:9b:2c:af:de:f1:6b:
4a:fb:92:5e:63:64:e0:c3:19:66:08:b4:6b:17:22:
02:cb:a8:47:a8:23:dd:c8:15:36:0f:73:e6:6b:16:
67:d2:92:f0:e2:d5:1e:d2:81:22:13:f6:54:fa:70:
a8:f5:16:e7:07:b2:0a:77:28:ad:96:7a:cc:05:79:
3a:1f:5e:3c:1f:4e:90:44:44:b2:8d:e5:be:73:62:
50:30:68:76:72:ef:20:c9:a5:7a:2f:de:45:90:08:
4d:32:83:01:d6:d0:84:8d:4c:b9:d6:4f:44:47:2f:
a3:e3:1a:b4:6e:fc:a4:6b:3e:1c:91:cf:4b:7f:a2:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EE:52:EB:C9:95:31:D7:71:7B:1E:B1:07:9D:8A:8B:E7:85:4D:AF
X509v3 Authority Key Identifier:
keyid:F5:B8:0C:DE:21:C1:9D:11:10:E1:71:8B:27:3B:65:D3:88:74:44:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:0b:aa:85:3c:f9:05:22:47:86:b9:dd:3b:58:1e:9a:33:
de:d2:d5:79:59:35:28:4d:df:90:25:6c:8d:2f:61:48:01:2c:
97:b0:7b:f3:dc:eb:72:76:c4:2a:2c:b8:66:f9:78:f1:2a:f5:
b6:c5:f1:50:7e:69:2e:35:41:b5:ab:e6:92:b6:bb:78:3d:d1:
51:d3:02:32:26:8e:76:c7:a0:37:86:d7:9c:df:71:87:f9:d1:
3e:f9:10:d7:8e:a9:14:e9:a8:ab:b8:77:43:81:a9:4a:a2:cc:
92:fc:e4:53:8a:bf:2e:47:58:46:64:e4:6d:6d:a8:0f:56:7e:
44:20:72:a9:eb:c8:6c:d5:70:52:43:bb:a0:09:18:15:dd:43:
22:11:ed:9a:1f:32:25:8f:c6:a4:f8:65:a5:b2:95:08:66:a3:
52:80:6d:54:d1:b0:9e:49:87:94:20:d1:e4:bd:9b:b2:4a:7a:
45:3f:97:5f:e9:63:9b:a0:9b:58:ab:6c:d6:de:42:b1:05:8c:
e4:2a:f5:a5:06:dc:d0:a2:e1:25:94:f6:35:97:b8:ef:12:fa:
e9:7d:f2:fd:d0:ab:d3:51:63:04:72:da:c6:d8:19:85:d5:a7:
ef:2c:7c:9d:3d:03:9a:0e:f1:8c:65:e9:b3:a8:fc:8c:a0:57:
fc:c8:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:50 2026 by rpki-client