
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
File: FF5E59BD445AE731E58ED471848043C324931D05.mft (raw, json)
Hash identifier: ZrQZi5AkKqSpGtP1Rb/UGrcNMV5jye/+f1sP+GBtRpI=
Subject key identifier: DA:D8:4E:26:F8:FF:45:78:C7:0F:61:0E:40:68:55:18:7F:47:2E:58
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Certificate issuer: /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial: 57D4DAF22C6CD09D78318F0B46E9F898D9F64636
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 13:11:53 +0000
Manifest this update: Fri 19 Jun 2026 13:06:53 +0000
Manifest next update: Sat 20 Jun 2026 16:53:53 +0000
Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=)
2: FF5E59BD445AE731E58ED471848043C324931D05.crl (hash: kYHNAYCaOnVDlxiawmQfjFJS4gUphZVnGeyft5f9Upw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d4:da:f2:2c:6c:d0:9d:78:31:8f:0b:46:e9:f8:98:d9:f6:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
Validity
Not Before: Jun 19 13:06:53 2026 GMT
Not After : Jun 20 16:53:53 2026 GMT
Subject: CN=DAD84E26F8FF4578C70F610E406855187F472E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:19:9c:73:79:82:7a:72:8f:4c:74:00:73:
99:dd:7a:11:09:db:9c:e1:d1:2f:41:f7:a4:d6:58:
a8:1a:d8:f1:f2:26:fd:4d:8c:4f:09:8e:00:36:42:
84:49:4f:83:65:f3:21:24:0f:8e:04:fd:9d:10:e8:
58:3b:89:b3:ca:2d:04:5e:72:93:73:e4:dc:02:65:
fd:83:be:6e:b5:98:c6:73:60:fb:61:1a:92:73:6d:
a7:7d:30:cb:ff:29:e2:cd:32:fb:18:26:cf:da:0e:
1f:bd:11:bb:01:56:37:00:ea:6e:08:ae:b3:b9:b7:
a0:dc:3f:12:02:f0:bf:09:cb:68:08:75:ab:e5:d2:
de:30:bf:eb:64:85:fd:bc:b8:59:3d:98:b5:2f:9d:
13:b4:a0:35:42:0a:9f:9a:6c:50:59:5c:31:60:f8:
3b:4a:a9:8b:98:22:86:4a:e3:da:fd:53:d7:f0:79:
f8:94:57:57:73:66:b7:b0:88:40:8e:d4:5f:6f:4f:
51:66:1f:63:b8:f3:cd:43:10:ba:e5:b6:46:9a:f7:
41:67:d4:f1:b7:ba:70:25:9c:ec:97:89:2e:58:87:
50:aa:73:0d:fa:b9:79:6d:06:ab:17:9c:2e:d7:4f:
a6:ff:49:48:23:1c:64:f9:ff:40:76:50:ce:49:77:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:4E:26:F8:FF:45:78:C7:0F:61:0E:40:68:55:18:7F:47:2E:58
X509v3 Authority Key Identifier:
keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:f5:7e:a1:06:b4:b4:c3:75:dc:7d:8f:1f:e1:c9:00:40:
87:51:b8:61:2d:a0:e2:b2:e3:9f:7c:43:21:26:45:9c:52:b0:
5a:10:42:31:4d:07:d2:4d:b4:d7:a2:e5:07:d5:95:16:6f:78:
3c:0f:af:ad:04:c8:68:20:af:87:21:b6:68:fd:7c:79:8b:c3:
33:f3:27:34:32:21:4a:49:a2:c0:6a:4b:1e:e5:f1:9a:f1:5e:
a0:cb:26:1b:35:5d:79:df:98:af:bb:fc:76:f7:26:8f:65:7f:
11:53:83:ee:d1:33:a7:e9:e7:6c:75:b8:11:5d:a7:35:b6:a0:
fd:9c:42:94:89:45:67:bb:9c:7f:29:a3:23:fa:da:4e:24:aa:
98:4e:9e:6b:12:a3:7e:77:5d:81:3b:e4:68:aa:ad:cc:d6:62:
9e:c7:2f:69:c9:dc:61:6b:c9:d4:18:55:82:6b:21:e7:8e:d9:
94:28:12:b4:14:67:89:64:9c:2a:da:3a:6d:64:e7:56:87:32:
b3:4b:3d:29:71:19:bd:8e:19:6e:0a:a7:91:7f:b1:8d:b2:d6:
71:b9:f5:aa:3a:12:81:f8:5e:09:4c:7b:7e:4e:cf:6b:0d:47:
17:d3:09:fa:77:e7:82:63:83:71:54:f5:3a:d4:29:f8:89:37:
3e:d9:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:01:31 2026 by rpki-client