
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json)
Hash identifier: xjPr9+ZDj2v/GCmPK4pbpdNi4nq+UHv4y2TKm34XjMA=
Subject key identifier: 58:72:75:B3:A9:07:A7:CE:06:F4:C0:1A:0C:BA:96:AB:3B:11:DC:8B
Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Certificate serial: 56B9535191CF553EB4C5BD6A38BC8FFCA1839146
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 23:43:16 +0000
Manifest this update: Wed 16 Sep 2026 23:38:16 +0000
Manifest next update: Fri 18 Sep 2026 01:40:16 +0000
Files and hashes: 1: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: qpIJ6HTVMMUDLgstrESm27Rbg9e+EsHiyOZhYeQ17Ec=)
2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b9:53:51:91:cf:55:3e:b4:c5:bd:6a:38:bc:8f:fc:a1:83:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5
Validity
Not Before: Sep 16 23:38:16 2026 GMT
Not After : Sep 18 01:40:16 2026 GMT
Subject: CN=587275B3A907A7CE06F4C01A0CBA96AB3B11DC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:f3:fe:e3:1f:30:cc:0c:f4:09:06:1d:1d:
29:a4:56:1c:e4:82:5a:c9:58:b5:c6:53:5d:ad:29:
04:d6:73:cc:8e:cb:c3:81:dc:c1:d5:7b:04:46:d4:
30:3f:fb:90:25:93:9f:c3:35:41:10:04:59:fb:e0:
ba:3e:0d:ba:60:c0:c5:24:96:d2:a5:e3:21:8c:01:
93:71:e4:52:b9:21:df:d2:8f:73:ad:93:e3:93:b7:
7b:93:42:91:0a:33:1d:ea:ae:9e:12:d6:38:16:74:
ef:6f:9c:45:dc:91:fc:0c:bd:99:c1:db:71:56:ac:
d4:47:26:73:83:30:90:f6:96:34:51:8b:4f:61:10:
2c:15:dc:1f:79:34:f5:8f:33:be:03:a9:3b:8a:2f:
06:11:47:9d:2f:9e:67:72:07:26:f0:10:7d:13:34:
20:c2:41:c4:85:b3:62:3c:23:c9:66:ef:d2:ce:58:
7e:e4:be:59:2e:89:83:46:f8:a2:41:d4:0f:d1:56:
46:99:88:2b:df:22:ec:99:a8:67:ff:9e:dc:ab:22:
c9:a4:74:2a:78:d1:74:9a:71:33:82:f6:c6:79:af:
33:dc:80:94:71:92:86:c9:da:8c:9a:ea:ea:62:52:
aa:05:e3:d6:27:ea:12:48:66:38:b5:7d:4e:44:c2:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:75:B3:A9:07:A7:CE:06:F4:C0:1A:0C:BA:96:AB:3B:11:DC:8B
X509v3 Authority Key Identifier:
keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:95:b6:cf:c5:6f:a8:57:31:97:c3:9e:b9:4b:03:4d:cd:
99:df:4a:38:bd:7b:fa:12:d2:15:8a:b8:29:77:aa:52:d0:d4:
1a:1c:47:96:67:ff:76:c7:99:5f:ff:a4:82:f5:67:15:93:14:
e0:ff:ee:af:ef:6a:ba:24:03:28:33:7c:5e:33:cc:37:77:6f:
c7:30:a4:21:63:d6:f6:b9:21:04:70:6d:36:03:f5:14:13:8e:
69:43:35:72:1e:2d:9a:c3:b2:b4:c0:41:96:ac:a7:59:60:3d:
9d:af:be:f1:35:b1:1c:ad:25:cb:03:0c:70:b0:22:63:e9:65:
24:40:fc:89:f3:9d:66:9d:16:26:3d:0f:eb:f8:75:42:03:b3:
7c:f3:c3:7c:e6:10:46:53:c7:65:bb:10:b9:e4:8b:6c:e8:fe:
dc:3c:eb:4f:fd:8e:58:9a:16:e4:05:74:a5:e7:34:70:89:36:
94:01:fc:a5:bf:9a:cf:b5:59:92:31:73:a7:66:d4:3a:d0:4c:
7c:80:45:88:3b:ee:7d:47:dc:bf:e9:d3:2a:26:fe:c2:00:f0:
02:65:76:a9:8c:ef:9b:b5:58:8f:3e:ff:df:fa:da:4f:3a:4c:
f2:6d:5f:09:a8:9e:c4:50:67:66:67:84:42:76:68:dd:e0:99:
7b:67:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:12:46 2026 by rpki-client