
$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json)
Hash identifier: dquNlZaU3osn+S8o25+Ma2hhFWxSsI8a6WjoI3P+mto=
Subject key identifier: 30:AB:18:AD:5A:EF:90:AC:18:09:23:45:C1:29:80:1A:53:68:A1:D7
Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6
Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
Certificate serial: 7A1B4AF1B0171ABE0D34B59AFF0ECAF0AFFD6AE2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 04:27:44 +0000
Manifest this update: Sun 02 Aug 2026 04:22:44 +0000
Manifest next update: Mon 03 Aug 2026 07:58:44 +0000
Files and hashes: 1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=)
2: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: 3owkbgqgX/rVe0EBwSl7A6l6bp08S2qQKhRWsCXS7vY=)
3: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=)
4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl
rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1b:4a:f1:b0:17:1a:be:0d:34:b5:9a:ff:0e:ca:f0:af:fd:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
Validity
Not Before: Aug 2 04:22:44 2026 GMT
Not After : Aug 3 07:58:44 2026 GMT
Subject: CN=30AB18AD5AEF90AC18092345C129801A5368A1D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:83:b2:b6:af:2d:f5:b3:ee:87:c7:6b:41:
5d:12:3e:5d:56:6e:89:d0:88:39:c4:73:96:f9:ba:
f4:fa:ba:dd:41:b8:45:16:bb:8e:64:a0:7d:3b:64:
37:8c:0a:92:be:5d:14:fd:1c:00:3e:d8:6c:ab:d3:
ca:88:6c:83:71:22:97:e1:55:6c:f3:cf:01:3c:83:
f9:f1:0c:d7:ca:bd:a9:c4:cd:6f:f5:6b:8a:f6:02:
4e:f7:29:b9:08:7a:3a:7e:b3:85:0e:eb:49:83:ca:
8a:75:13:95:2e:cc:f1:24:d3:35:a9:ef:91:33:a1:
b5:e2:0f:9f:bb:fe:cd:d8:0a:c6:46:fb:1d:15:8e:
cc:5d:7a:3e:46:a8:7b:54:6e:05:0d:68:18:af:4c:
dd:d1:e3:76:62:2f:95:9e:ef:fe:a3:bf:c4:89:58:
b1:52:28:a0:a1:d1:cb:ae:7c:72:52:c4:fb:3e:e1:
83:9e:b8:62:6b:ea:98:a8:30:a9:45:02:9a:e8:43:
f6:03:e5:3e:9b:2d:b4:e8:a7:50:aa:8e:84:7a:8f:
41:13:93:1e:e1:09:1c:6f:f4:7d:a5:65:92:3b:a0:
2f:92:5d:6e:1e:f7:cb:f4:b3:a5:55:73:d1:54:c2:
04:9e:19:d8:d8:24:78:0d:8e:ce:06:b6:e7:d8:04:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AB:18:AD:5A:EF:90:AC:18:09:23:45:C1:29:80:1A:53:68:A1:D7
X509v3 Authority Key Identifier:
keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:e9:7b:56:0e:e5:c3:f3:cf:70:bc:c1:f2:56:f4:d2:26:
b1:33:b7:bf:9f:b9:42:7d:b6:f9:b8:5e:d9:95:71:8e:86:01:
76:62:f9:da:2a:83:b4:17:43:aa:33:d1:69:d8:6a:5e:75:79:
de:29:21:99:61:ad:17:fc:84:42:75:8e:76:42:b2:0e:b2:c1:
94:15:81:93:c4:09:63:9b:69:9e:54:fa:2c:40:e1:26:b4:b3:
0e:42:b0:dd:9c:a2:a3:27:58:7f:c4:5c:a4:63:70:53:54:bd:
c5:92:a2:fd:d1:a0:cf:7e:19:06:ab:9c:de:61:38:b7:66:97:
f2:ac:ae:31:42:9c:68:d8:9a:f3:a5:35:f7:93:61:b2:20:b8:
86:a8:95:c7:6b:c5:bd:11:7f:3e:ac:1b:32:31:73:86:0e:d2:
a2:6f:f1:6a:16:9f:42:2d:20:0f:c5:03:41:5a:6e:b9:a8:1f:
bb:6e:5d:b3:ed:60:17:c9:65:90:42:d3:32:26:1b:41:c7:90:
36:42:27:5f:86:08:56:38:d1:7c:5b:4e:d9:4d:6f:93:df:82:
09:0c:bf:7a:d4:67:09:a1:9e:1d:94:49:44:77:93:96:03:0a:
9d:7f:6f:16:89:04:61:e2:5f:9d:38:4b:f1:04:4a:e9:4e:fd:
6b:7b:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:34 2026 by rpki-client