
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json)
Hash identifier: SXuJE9lSSVtDWZBYAFiF5esubqbLQQX0l7RKH8Q+Vbo=
Subject key identifier: E5:58:CD:CA:A5:43:80:8A:5A:F7:1A:5B:47:57:26:DC:57:57:78:67
Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Certificate serial: 74989A6F9114414F7CDAC88A3B00A49B63E8E5CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
Manifest number: 8D
Signing time: Sat 15 Aug 2026 01:05:34 +0000
Manifest this update: Sat 15 Aug 2026 01:00:34 +0000
Manifest next update: Sun 16 Aug 2026 03:59:34 +0000
Files and hashes: 1: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=)
2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=)
3: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: 9xnDsumhT0DUY2JL6xmJmltdro5uGBE+9YF5GSQhKg0=)
4: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=)
5: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=)
6: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=)
7: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:98:9a:6f:91:14:41:4f:7c:da:c8:8a:3b:00:a4:9b:63:e8:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Validity
Not Before: Aug 15 01:00:34 2026 GMT
Not After : Aug 16 03:59:34 2026 GMT
Subject: CN=E558CDCAA543808A5AF71A5B475726DC57577867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:05:3d:13:58:09:c5:02:09:2a:47:fb:52:
3b:95:25:12:d4:80:51:00:7b:51:f8:9b:14:99:02:
ad:4b:e9:f4:6c:22:9f:8e:0c:d0:69:f9:5e:50:c5:
f1:63:20:c3:e4:e0:08:33:75:14:38:a1:9c:9c:f7:
90:00:44:74:db:dc:7c:ab:dd:a9:98:e8:b7:d8:55:
33:71:7d:4c:47:57:b4:7b:ce:27:0c:0c:ac:05:a4:
4e:73:aa:08:c4:38:51:55:5f:6e:c4:cd:23:26:db:
ce:ab:77:51:28:4a:8d:aa:22:10:9e:95:d8:83:11:
11:c5:c8:46:2e:44:e9:01:3e:b8:95:5b:0f:d4:77:
39:9e:41:b2:c2:df:e3:fa:56:db:54:dd:cb:a9:94:
93:d5:e1:23:1e:c9:5d:f8:ff:23:6f:f1:4f:cc:32:
12:37:8d:7c:c3:d9:b5:57:0c:0a:b0:9b:36:35:45:
1f:9b:3b:04:c5:00:2a:9a:6a:c4:a1:a0:d5:56:7c:
6f:7a:89:3d:5b:be:d7:c7:9f:39:d2:dc:ca:ad:3e:
84:2b:94:bf:0c:e3:02:55:eb:ee:c7:d7:66:29:07:
ed:ed:6f:9e:5e:b3:b1:de:ba:84:62:8c:8b:1c:e0:
98:9d:08:7b:25:49:6e:98:a7:ed:ff:14:02:46:c9:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:CD:CA:A5:43:80:8A:5A:F7:1A:5B:47:57:26:DC:57:57:78:67
X509v3 Authority Key Identifier:
keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:70:b1:71:6b:44:6a:24:26:c8:73:89:40:19:c7:3d:26:81:
24:15:7b:ed:c2:5c:91:33:66:b3:dc:90:ed:ac:1f:dd:c2:2b:
a6:80:15:cd:36:10:3b:e1:ef:09:dc:f2:6b:98:6f:72:4c:7f:
23:17:45:39:e6:d6:a0:71:e7:e3:3d:55:eb:dd:bc:bf:3d:2a:
07:05:ad:1b:c3:da:d8:e4:6d:4a:b3:83:0a:6b:58:75:99:e2:
bb:30:40:02:c2:1c:28:6a:f4:55:f5:d7:8e:2b:6b:a0:be:d6:
5e:b3:c1:6c:98:50:5b:8b:8c:c1:64:9f:92:f7:a7:9c:e5:60:
56:ca:39:85:5b:ad:0c:35:49:e5:6f:c9:f3:23:a5:b1:e6:d2:
12:d5:d6:7a:e9:78:83:f7:2a:58:5b:2e:d6:38:a1:27:11:6a:
72:c3:56:cd:17:fb:9b:10:43:0b:ae:c8:2e:a0:91:92:34:ab:
7f:bc:5c:17:3c:ae:35:49:b9:d3:9c:24:73:c5:40:f6:af:02:
3f:c4:6e:75:ae:48:49:a3:9a:e9:40:e9:ba:6e:4a:ca:ec:44:
09:d1:c4:79:f9:c7:b2:ab:cf:2d:60:02:e4:23:7a:47:9b:38:
77:63:62:db:e5:9e:7c:bc:e7:9c:fb:28:79:6d:5e:8d:a5:a8:
2b:81:77:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdJiab5EUQU982siKOwCkm2Po5cswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4
RTUyOUYyRjAeFw0yNjA4MTUwMTAwMzRaFw0yNjA4MTYwMzU5MzRaMDMxMTAvBgNV
BAMTKEU1NThDRENBQTU0MzgwOEE1QUY3MUE1QjQ3NTcyNkRDNTc1Nzc4NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XgU9E1gJxQIJKkf7UjuVJRLU
gFEAe1H4mxSZAq1L6fRsIp+ODNBp+V5QxfFjIMPk4AgzdRQ4oZyc95AARHTb3Hyr
3amY6LfYVTNxfUxHV7R7zicMDKwFpE5zqgjEOFFVX27EzSMm286rd1EoSo2qIhCe
ldiDERHFyEYuROkBPriVWw/UdzmeQbLC3+P6VttU3cuplJPV4SMeyV34/yNv8U/M
MhI3jXzD2bVXDAqwmzY1RR+bOwTFACqaasShoNVWfG96iT1bvtfHnznS3MqtPoQr
lL8M4wJV6+7H12YpB+3tb55es7HeuoRijIsc4JidCHslSW6Yp+3/FAJGyb1zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5VjNyqVDgIpa9xpbR1cm3FdXeGcwHwYDVR0j
BBgwFoAUX/hZU8aFDjWUZ6WBw/4ax45Sny8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmRkNDdmNTYtZWM1My00MmViLTliOGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTND
Njg1MEUzNTk0NjdBNTgxQzNGRTFBQzc4RTUyOUYyRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkY4NTk1M0M2ODUwRTM1OTQ2N0E1ODFDM0ZFMUFDNzhFNTI5
RjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli
OGItZmEwOGY4NzRkMzE5LzAvNUZGODU5NTNDNjg1MEUzNTk0NjdBNTgxQzNGRTFB
Qzc4RTUyOUYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACdwsXFrRGokJshziUAZxz0mgSQVe+3CXJEz
ZrPckO2sH93CK6aAFc02EDvh7wnc8muYb3JMfyMXRTnm1qBx5+M9VevdvL89KgcF
rRvD2tjkbUqzgwprWHWZ4rswQALCHChq9FX1144ra6C+1l6zwWyYUFuLjMFkn5L3
p5zlYFbKOYVbrQw1SeVvyfMjpbHm0hLV1nrpeIP3KlhbLtY4oScRanLDVs0X+5sQ
QwuuyC6gkZI0q3+8XBc8rjVJudOcJHPFQPavAj/EbnWuSEmjmulA6bpuSsrsRAnR
xHn5x7Krzy1gAuQjekebOHdjYtvlnny855z7KHltXo2lqCuBd08=
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:55 2026 by rpki-client