
$ rpki-client -vvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json)
Hash identifier: JZoAWxSsoBwvN2ijTNbzUa3OOisTh0gT8dcN81n1Iqw=
Subject key identifier: F4:D0:B9:32:62:BC:2F:56:49:26:9D:B2:F4:AF:07:47:66:19:2F:C1
Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA
Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
Certificate serial: 3EA06553BD00F0CBD6E51A1E9075A7FC0A9DC7EE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 22:23:02 +0000
Manifest this update: Fri 19 Jun 2026 22:18:02 +0000
Manifest next update: Sat 20 Jun 2026 23:10:02 +0000
Files and hashes: 1: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=)
2: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: t9Cj7fdtI1zLu6bA3JCrPHAsUBzLXbCxzPAnh3hwDQI=)
3: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=)
4: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl
rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 23:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a0:65:53:bd:00:f0:cb:d6:e5:1a:1e:90:75:a7:fc:0a:9d:c7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
Validity
Not Before: Jun 19 22:18:02 2026 GMT
Not After : Jun 20 23:10:02 2026 GMT
Subject: CN=F4D0B93262BC2F5649269DB2F4AF074766192FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:b0:45:5c:6b:64:ac:30:ae:c7:03:08:cb:
59:8e:86:01:6f:58:09:a4:d6:be:11:04:1c:b9:0a:
f3:19:94:cb:25:a1:02:0e:b5:49:23:0f:3f:75:96:
57:46:c4:c2:67:6f:d6:ca:d8:1a:68:cf:5b:79:5e:
05:8e:8a:28:ee:bb:01:57:21:f5:a2:d3:74:19:39:
a5:e8:40:88:cd:17:2d:c5:74:38:ce:ba:1e:1e:fd:
4b:16:c9:46:69:3d:81:09:e1:f4:c6:d9:0b:6c:9b:
5f:bf:97:f0:e6:9d:1f:ca:ea:6a:14:9a:7a:11:46:
ed:79:2e:5a:e2:e9:7b:49:5d:a5:07:ec:d2:93:01:
ea:03:cc:c5:56:14:7f:6f:be:77:1b:b9:1e:81:e4:
01:90:88:fe:35:c2:d2:2c:88:cf:07:98:4b:07:4a:
8d:16:69:c2:2b:7f:b4:16:f9:86:08:fa:7a:cf:e7:
b7:02:d3:30:2d:dd:af:85:6c:a3:fe:0f:b3:24:d3:
22:c6:3b:81:aa:5d:27:16:df:00:5b:32:5b:38:c4:
4d:75:10:37:64:5f:95:bd:99:77:64:ae:86:77:7d:
83:a6:c6:51:4f:7f:10:71:90:bc:89:fc:e4:74:67:
8c:fb:4a:15:4a:4f:4b:fe:7b:80:1f:1a:98:62:10:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D0:B9:32:62:BC:2F:56:49:26:9D:B2:F4:AF:07:47:66:19:2F:C1
X509v3 Authority Key Identifier:
keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:98:ba:80:4d:87:93:fc:d6:85:24:3c:06:b4:d2:b5:19:
f2:53:c1:60:d8:53:1a:7c:95:47:00:1a:69:9c:a2:2b:cd:59:
a0:0e:b2:00:a7:41:54:d3:15:36:67:9c:b4:52:b1:a8:25:cf:
a8:83:c9:f0:a6:cc:c9:2f:f5:0a:2d:ac:7c:e9:b4:aa:ff:c6:
dc:3d:cf:6f:8c:5a:ab:ce:ee:36:18:aa:ea:02:a2:49:f4:7b:
c8:ad:6b:5c:6a:48:9e:08:f9:ff:13:42:e2:8c:3a:94:50:c6:
78:25:d6:ab:c5:01:b4:59:aa:89:b4:3c:1a:45:9e:e3:5f:c0:
2d:cf:4a:99:2b:81:36:f5:83:c0:da:7f:57:49:0f:52:61:e8:
48:0e:f6:11:c7:06:a3:95:ff:2a:14:0e:31:cd:e4:97:ad:d5:
f8:9f:ee:ee:a5:92:26:a6:9f:c1:bb:2b:c8:9b:e6:70:34:ad:
c8:20:fe:77:cc:81:76:de:47:e5:57:9a:9b:ef:33:62:b4:5c:
ff:07:b3:aa:c0:56:15:a8:b8:b2:69:4c:d0:c5:0c:d1:ab:36:
cb:be:2a:c5:be:3f:e6:11:44:7f:a9:01:e8:a7:e1:db:41:70:
53:79:5d:7f:3a:90:ea:76:40:4f:39:0f:43:f0:bf:1f:7a:8c:
8b:8f:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:05 2026 by rpki-client