
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
File: 5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json)
Hash identifier: diKM4ymXvj3/QGCwKqmzXXCF6bCELGNc320i8YOfUNs=
Subject key identifier: 3B:91:78:52:B9:EA:D8:66:5C:99:15:0C:56:B0:96:B2:DB:F5:A0:72
Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Certificate serial: 3C8B1490276FCB77962C1BEF609BAF2F347EA436
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
Manifest number: D6
Signing time: Fri 09 Oct 2026 21:34:25 +0000
Manifest this update: Fri 09 Oct 2026 21:29:25 +0000
Manifest next update: Sat 10 Oct 2026 22:29:25 +0000
Files and hashes: 1: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=)
2: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=)
3: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=)
4: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=)
5: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: /eaxLNeKR6GnlUEDYzMwv1ow76brXfG0ZHAjhCM1Jeg=)
6: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=)
7: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8b:14:90:27:6f:cb:77:96:2c:1b:ef:60:9b:af:2f:34:7e:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Validity
Not Before: Oct 9 21:29:25 2026 GMT
Not After : Oct 10 22:29:25 2026 GMT
Subject: CN=3B917852B9EAD8665C99150C56B096B2DBF5A072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:89:72:59:f0:57:ac:15:b9:f9:63:d6:18:
dd:09:40:1d:2d:0a:c7:8c:07:7f:4d:17:4f:cb:20:
c2:e1:a4:df:09:f7:89:19:a7:a3:0e:29:98:ac:44:
5f:9a:20:10:33:c3:f6:41:38:14:f2:41:a3:da:02:
c3:70:08:e7:02:04:dc:76:fb:86:64:7e:e3:a2:f6:
3f:17:45:07:0f:38:f2:0b:44:c6:db:e0:81:fa:d2:
ad:44:ae:54:18:b9:61:32:8d:ca:8a:c3:9f:1a:5e:
f8:c5:df:5d:6c:12:1f:46:f1:30:a3:ea:ff:94:87:
2a:65:2e:00:6a:42:5d:0e:56:42:13:33:0c:46:c6:
54:f6:16:ae:c4:70:04:03:4b:f2:0f:75:70:2a:b3:
a0:4a:1b:57:97:43:ae:81:f7:65:7b:ec:ca:65:03:
3a:29:52:e6:8c:19:73:ba:94:55:37:a4:15:5f:b3:
35:5e:fa:94:d5:0d:d9:81:31:54:f6:6c:99:d4:fd:
6c:7e:d2:6b:fa:08:25:f5:ea:42:ee:5d:38:e9:31:
8e:63:3d:fe:7d:63:f7:1f:57:86:ba:8a:8f:f8:58:
c0:9c:0b:80:7f:ed:2d:8f:47:36:41:d4:62:c2:4f:
1b:e0:2d:6d:43:f2:2a:e0:ea:79:e6:a7:d6:cd:46:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:78:52:B9:EA:D8:66:5C:99:15:0C:56:B0:96:B2:DB:F5:A0:72
X509v3 Authority Key Identifier:
keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e3:0d:b3:be:d9:c7:2d:43:1a:47:7e:86:7b:48:23:42:95:
18:c5:ce:2b:06:73:ca:3b:66:83:13:2c:72:bd:24:2f:10:f5:
88:41:5b:bb:19:4d:cc:fd:ae:d1:38:cf:be:72:49:12:76:e4:
51:ca:58:d0:ff:4a:d6:4d:d2:bc:93:86:ea:0e:7b:bd:d6:33:
47:6f:7a:88:26:b3:42:61:c1:07:a9:5a:a9:cd:9d:6e:ee:75:
b7:6e:b8:72:69:15:6a:98:32:72:76:d2:55:b2:0f:89:2b:f1:
cc:37:bd:28:7d:a1:91:3d:a1:d7:a5:75:f0:2b:a8:71:24:84:
7c:89:78:17:94:d6:83:eb:e4:d9:23:40:5a:8e:19:67:e9:3b:
89:ca:a5:43:48:7b:3c:69:36:34:26:e4:bf:4a:ac:4c:8e:3e:
d6:90:9d:b7:d7:b8:7a:fd:a4:ee:d7:f1:6a:4a:93:55:ac:3f:
98:d7:fe:87:3b:8a:76:be:8e:09:a0:91:b8:73:9d:38:e1:4c:
c2:81:55:3a:d2:a7:5f:77:e4:1f:26:21:c0:3b:73:55:4b:34:
fd:8a:0d:c8:c8:7f:01:43:45:0a:5b:f2:2c:4e:27:44:b8:4e:
e6:6c:5f:4f:f4:14:1e:38:00:68:db:10:8f:56:e0:e1:02:6c:
62:54:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:34 2026 by rpki-client