
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
File: 5C0C0165C2202336BADFB9247E38D0C985467004.mft (raw, json)
Hash identifier: rFZ+kWQXQvwrQWhUbkozIfe+ilX/dZOKig1Ob3vd7zs=
Subject key identifier: 3B:14:DF:8B:7E:BE:C0:55:DD:05:0F:8B:0E:D6:16:AC:D2:83:28:30
Authority key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
Certificate issuer: /CN=5C0C0165C2202336BADFB9247E38D0C985467004
Certificate serial: 64BA1686D9ACCFBF468AB9C143DD2E1983974586
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
Manifest number: 61
Signing time: Mon 13 Jul 2026 01:20:24 +0000
Manifest this update: Mon 13 Jul 2026 01:15:24 +0000
Manifest next update: Tue 14 Jul 2026 01:40:24 +0000
Files and hashes: 1: 5C0C0165C2202336BADFB9247E38D0C985467004.crl (hash: 1WTttzXKycgWN1nEg6X5fbVcgysemrX/4QrBfULVRAg=)
2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: /DtJd8dT2bjoU0kUlHmis7kzNqsj8Fecx0D1VoaowR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 01:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ba:16:86:d9:ac:cf:bf:46:8a:b9:c1:43:dd:2e:19:83:97:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C0C0165C2202336BADFB9247E38D0C985467004
Validity
Not Before: Jul 13 01:15:24 2026 GMT
Not After : Jul 14 01:40:24 2026 GMT
Subject: CN=3B14DF8B7EBEC055DD050F8B0ED616ACD2832830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:bc:94:8b:cb:78:b8:3e:e6:25:94:4d:26:
91:8a:d1:47:7e:95:0d:ec:f7:09:d9:78:d7:bd:8f:
25:48:5e:17:a1:af:b9:c9:b7:74:11:77:69:93:e7:
ea:73:96:91:70:9d:80:eb:a5:0f:14:35:6f:91:d5:
73:56:86:00:4f:2a:d4:f0:8f:ec:f3:4b:ca:c8:0b:
31:ae:24:4e:8f:ad:ec:12:f7:b5:4f:7d:0f:16:4c:
5b:f2:02:8f:08:5b:39:9d:5c:b6:c9:51:62:e9:0d:
92:e3:58:4a:fa:0b:39:d0:7b:eb:3d:03:d2:79:ae:
31:0f:b7:66:0e:9b:3f:af:7c:ff:e4:38:ed:95:54:
0e:0f:bc:bf:f1:23:84:87:a0:a7:37:31:8c:e1:cd:
c6:99:ec:16:57:7f:15:66:db:da:35:48:36:57:55:
cd:23:26:d5:6b:e5:40:d1:75:73:9d:d9:96:ee:a0:
e9:2a:2d:56:45:3a:84:49:6d:f7:bb:39:eb:26:28:
08:14:e2:d1:9a:ec:af:48:5e:ff:31:3d:1c:d2:e9:
bc:89:94:1d:67:3f:31:2d:bd:b2:a7:06:6c:4c:4b:
1a:70:91:c1:dd:e0:5f:c8:87:8e:22:bf:ac:d5:83:
da:5f:fa:f2:99:0a:98:9e:51:b1:4d:0f:fd:f9:e5:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:DF:8B:7E:BE:C0:55:DD:05:0F:8B:0E:D6:16:AC:D2:83:28:30
X509v3 Authority Key Identifier:
keyid:5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:74:de:05:23:08:c8:ac:46:3e:c0:ac:82:d5:40:38:20:
fa:56:b7:5d:0c:52:89:82:90:69:c4:2f:0c:ff:d7:57:2c:42:
54:4d:ce:ff:64:05:ff:62:9f:25:87:a9:e3:1a:2a:88:a5:ee:
55:f2:ac:c7:04:3e:03:12:ed:40:b9:57:2a:8b:ea:ab:98:9f:
c5:12:ba:1e:90:8a:b5:d8:cd:54:f4:40:19:8d:22:4a:72:6a:
6f:22:6f:1e:d0:81:69:2b:00:83:dc:05:b8:5f:37:11:93:8b:
a7:c6:a8:85:94:32:79:e8:8b:7c:67:eb:e9:33:ea:d2:d0:66:
8e:57:9a:85:5c:2d:44:13:6b:70:15:9e:97:b5:3d:86:50:5e:
ce:5b:f8:de:df:cf:3a:b0:7f:7b:81:80:e0:96:1e:d0:8f:79:
bb:72:2b:f2:d8:f0:4b:f6:c7:3c:fb:b1:92:86:79:26:cf:c8:
cc:94:17:d3:d3:92:2f:ec:2d:cd:e8:78:6d:87:d7:70:fc:ea:
b9:f9:8a:56:55:e6:15:29:87:97:f2:9d:66:85:ad:d1:02:0d:
fe:47:59:c2:26:84:a9:68:03:fa:ed:f1:78:0d:2e:d6:80:1e:
ae:77:17:9d:b1:d7:97:09:f0:a4:0b:f2:1c:7f:85:e0:88:ba:
cf:32:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:35:04 2026 by rpki-client