
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
File: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json)
Hash identifier: IBysoofEOIUHjtbr1YhA0oRI+5fXlwFdx47yOpdGV/Y=
Subject key identifier: 82:92:EA:33:36:8B:64:A8:DB:04:B2:F3:5A:06:F3:FA:D3:A9:58:34
Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1
Certificate issuer: /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
Certificate serial: 0CB7F23CB58834B20A7DD5C30096E62193551AD7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 11:32:51 +0000
Manifest this update: Thu 17 Sep 2026 11:27:51 +0000
Manifest next update: Fri 18 Sep 2026 14:10:51 +0000
Files and hashes: 1: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: oOD7NTmNjfQG/u/TIYDzvYaNfZEU7FiUNqSPPPgALvY=)
2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl
rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b7:f2:3c:b5:88:34:b2:0a:7d:d5:c3:00:96:e6:21:93:55:1a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
Validity
Not Before: Sep 17 11:27:51 2026 GMT
Not After : Sep 18 14:10:51 2026 GMT
Subject: CN=8292EA33368B64A8DB04B2F35A06F3FAD3A95834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:42:2a:5f:8b:28:50:4b:28:0d:ca:66:45:
d6:a4:9c:98:f2:79:f4:8a:68:d1:0b:48:a7:cf:38:
67:04:89:16:e8:d7:eb:8f:0c:bd:40:d2:15:be:00:
da:d1:00:98:06:d7:51:65:62:20:75:71:94:c5:fe:
8b:57:fa:9b:25:0c:4c:0f:e3:cd:26:7c:36:34:ce:
f8:69:74:4e:90:2b:a3:51:f6:5d:04:66:91:41:ed:
e5:cb:6d:4a:93:41:ad:64:b9:77:95:44:5f:5e:0e:
48:3a:c7:0b:94:0e:68:f7:5d:16:3a:72:34:c0:f0:
52:51:e1:04:09:be:fd:76:b0:b8:de:b7:7e:31:a5:
49:b0:22:04:ff:e7:3e:d4:cf:ae:c8:27:74:8a:8d:
4f:46:58:c2:99:9c:25:45:64:19:29:31:57:35:71:
a6:92:7a:66:df:87:6d:3d:17:8d:ee:5c:2d:c9:d7:
a2:24:1f:41:a9:6a:d8:ba:3d:dd:fd:6f:0d:4a:15:
75:93:24:5b:26:63:b5:96:72:37:1c:2b:3e:e6:ff:
14:d9:e8:ed:aa:76:f9:09:b4:4e:02:35:6a:f8:51:
b8:ac:29:c0:07:23:01:22:93:2f:0c:53:65:cf:31:
2e:52:6f:d5:f0:9b:bb:13:22:76:f4:30:30:9e:93:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:EA:33:36:8B:64:A8:DB:04:B2:F3:5A:06:F3:FA:D3:A9:58:34
X509v3 Authority Key Identifier:
keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:34:7a:bd:8c:09:e0:81:9e:3e:a1:86:e5:2d:6f:94:47:15:
b8:f1:59:4c:14:47:06:fd:9b:e7:34:08:75:f8:74:db:2e:4e:
9e:f0:da:71:fb:c9:4d:30:c8:d6:08:df:d8:8a:69:01:a9:22:
d0:78:11:a4:00:23:da:52:c7:f8:45:cf:3c:77:a1:13:fb:91:
02:96:7a:da:86:41:ab:ae:04:81:93:19:e3:c2:fc:ac:f2:b4:
83:28:cb:76:57:28:8c:5a:53:46:68:5b:56:88:9c:08:cd:5e:
36:95:43:49:01:66:d1:6c:23:a8:53:d2:10:49:15:0a:6e:fd:
95:e2:5d:12:2d:ae:06:32:4a:f7:b5:96:42:09:54:3c:c6:34:
30:11:74:6c:8b:cd:28:28:9c:f6:3d:1d:60:ba:cf:64:66:aa:
2a:47:05:95:ca:89:46:00:b0:12:2c:a9:83:b9:08:65:19:30:
6e:3f:5a:a4:69:44:ba:a0:00:af:b7:de:8c:16:5a:0f:bb:5c:
37:99:be:f3:27:d9:40:d9:a5:2e:a5:c6:73:a7:fc:6d:ad:d0:
44:da:00:8a:0c:8f:71:5f:6f:0b:67:00:62:02:ac:55:94:35:
fe:d7:06:12:49:d1:dc:17:52:03:cb:27:29:ab:91:7e:82:0e:
52:17:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:49:45 2026 by rpki-client