
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json)
Hash identifier: +qN1i+VCr+zqNyVXR9qihjUI6F/dEEhSUkUMsoML30g=
Subject key identifier: 31:8C:08:7A:12:B6:4D:02:57:87:93:E9:53:98:7C:45:52:90:15:A3
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial: 756C90287D30C001727917BD2C90C59DEFFD5A97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
Manifest number: 61
Signing time: Mon 13 Jul 2026 06:01:03 +0000
Manifest this update: Mon 13 Jul 2026 05:56:03 +0000
Manifest next update: Tue 14 Jul 2026 07:06:03 +0000
Files and hashes: 1: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=)
2: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=)
3: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: c9Bds0ABPvutQ+W6mPpjbfZTNCb332+gJFD4Mvj7wZ4=)
4: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=)
5: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=)
6: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=)
7: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=)
8: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=)
9: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 05:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6c:90:28:7d:30:c0:01:72:79:17:bd:2c:90:c5:9d:ef:fd:5a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Validity
Not Before: Jul 13 05:56:03 2026 GMT
Not After : Jul 14 07:06:03 2026 GMT
Subject: CN=318C087A12B64D02578793E953987C45529015A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:28:be:9b:a5:fd:de:06:2b:67:4a:9b:9f:
24:80:2d:95:0b:02:4e:c7:f8:ca:a6:b2:15:a7:b1:
71:2b:d8:ef:66:86:9d:c2:b6:05:2d:42:37:38:58:
77:67:98:dc:ab:96:62:f1:68:ce:a5:3e:0e:4a:64:
6f:41:58:84:51:da:d0:00:39:f7:fd:76:94:1a:93:
d1:d3:9b:f6:94:6b:61:22:b2:83:3c:f5:de:be:b8:
a2:07:fd:d1:51:3e:f6:d0:36:cd:51:7f:7d:9f:c8:
55:19:d9:81:de:f4:5c:9a:e8:e3:83:87:eb:9d:df:
66:e0:1f:19:01:85:c1:32:cb:da:8e:1a:e7:6b:87:
78:96:7e:e7:f2:38:60:34:01:c1:cc:70:33:ea:ea:
fa:0c:bb:33:cf:67:6c:18:b4:88:76:4b:85:46:2f:
fb:55:94:bc:fb:29:55:92:17:15:b1:28:47:6a:7a:
95:dc:0c:f3:39:f6:0c:3b:6e:19:8a:de:c6:63:1e:
b1:74:d6:4d:bf:da:0e:aa:23:3e:aa:71:49:22:4a:
08:12:a9:e4:70:23:05:26:51:73:99:8b:bd:f3:5d:
55:f5:10:fa:09:a2:3f:ff:4b:28:08:c0:1c:80:05:
2c:25:87:6d:ae:8d:d7:c2:31:4a:c0:8e:53:29:c2:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:08:7A:12:B6:4D:02:57:87:93:E9:53:98:7C:45:52:90:15:A3
X509v3 Authority Key Identifier:
keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6d:e7:07:43:f3:17:f8:de:22:e0:af:aa:ee:9d:bc:17:1d:
9d:5c:74:1e:b9:d7:9e:ed:30:9e:72:ec:db:57:e0:15:f0:e2:
b8:94:8d:ef:d4:3d:a9:7b:a1:58:75:38:be:6b:39:d2:2b:97:
9c:db:af:fb:5f:5c:05:00:6e:57:a3:ee:98:6e:13:7d:a6:f9:
45:98:31:d0:e0:bf:1f:6e:9e:a2:2e:77:c6:2f:05:49:4d:c3:
19:4f:e2:5c:47:53:d4:76:4b:9e:47:2c:83:7f:cb:2b:5a:17:
24:a0:99:d8:ef:08:04:26:18:3b:61:03:e5:e5:cb:b3:32:75:
96:5b:8f:4b:96:c3:f8:c5:85:d0:86:78:7e:a9:a9:29:94:03:
e0:96:7d:c3:99:a1:f2:0d:fb:38:f9:a8:59:7e:10:49:c1:69:
e8:31:51:3b:72:22:6b:b0:c9:d1:ae:42:4e:89:24:ce:34:52:
7c:5f:97:7c:22:e0:6a:6b:f0:9a:b3:3e:8d:d0:52:f9:10:55:
53:c5:38:af:4d:ca:d0:b8:15:cc:81:a6:ce:f4:56:15:77:32:
b5:6f:3f:16:c2:b5:23:de:1c:d9:7b:ea:29:fe:57:8c:95:92:
99:89:2d:f5:dd:29:c5:af:b6:f4:52:91:10:a8:1a:d3:5f:7b:
0c:b2:e5:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdWyQKH0wwAFyeRe9LJDFne/9WpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF
RjYxMjJCQzAeFw0yNjA3MTMwNTU2MDNaFw0yNjA3MTQwNzA2MDNaMDMxMTAvBgNV
BAMTKDMxOEMwODdBMTJCNjREMDI1Nzg3OTNFOTUzOTg3QzQ1NTI5MDE1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAyi+m6X93gYrZ0qbnySALZUL
Ak7H+MqmshWnsXEr2O9mhp3CtgUtQjc4WHdnmNyrlmLxaM6lPg5KZG9BWIRR2tAA
Off9dpQak9HTm/aUa2EisoM89d6+uKIH/dFRPvbQNs1Rf32fyFUZ2YHe9Fya6OOD
h+ud32bgHxkBhcEyy9qOGudrh3iWfufyOGA0AcHMcDPq6voMuzPPZ2wYtIh2S4VG
L/tVlLz7KVWSFxWxKEdqepXcDPM59gw7bhmK3sZjHrF01k2/2g6qIz6qcUkiSggS
qeRwIwUmUXOZi73zXVX1EPoJoj//SygIwByABSwlh22ujdfCMUrAjlMpwofRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMYwIehK2TQJXh5PpU5h8RVKQFaMwHwYDVR0j
BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC
MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy
MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm
MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD
RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK1t5wdD8xf43iLgr6runbwXHZ1cdB65157t
MJ5y7NtX4BXw4riUje/UPal7oVh1OL5rOdIrl5zbr/tfXAUAblej7phuE32m+UWY
MdDgvx9unqIud8YvBUlNwxlP4lxHU9R2S55HLIN/yytaFySgmdjvCAQmGDthA+Xl
y7MydZZbj0uWw/jFhdCGeH6pqSmUA+CWfcOZofIN+zj5qFl+EEnBaegxUTtyImuw
ydGuQk6JJM40Unxfl3wi4Gpr8JqzPo3QUvkQVVPFOK9NytC4FcyBps70VhV3MrVv
PxbCtSPeHNl76in+V4yVkpmJLfXdKcWvtvRSkRCoGtNfewyy5S0=
-----END CERTIFICATE-----
Generated at Mon Jul 13 09:45:35 2026 by rpki-client