
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
File: 5340DB769DA0690FFA8A696A6047EDC148F1991A.mft (raw, json)
Hash identifier: sC0TLlLljq/q15rHI4YA8U1lzRGwVbZgm8lK9t/iHiU=
Subject key identifier: D7:77:4E:45:AB:9E:42:C9:FB:26:DE:67:7A:07:DA:92:17:3F:CC:47
Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
Certificate issuer: /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Certificate serial: 6AF4C279F48422971B720AF76B73251ADAF4D042
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 04:50:42 +0000
Manifest this update: Sat 20 Jun 2026 04:45:42 +0000
Manifest next update: Sun 21 Jun 2026 06:13:42 +0000
Files and hashes: 1: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=)
2: 5340DB769DA0690FFA8A696A6047EDC148F1991A.crl (hash: b4KYLaUNH26BdsP4KMqsT5K0OmtD3Ys0obo8XOSeQ4s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 06:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f4:c2:79:f4:84:22:97:1b:72:0a:f7:6b:73:25:1a:da:f4:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Validity
Not Before: Jun 20 04:45:42 2026 GMT
Not After : Jun 21 06:13:42 2026 GMT
Subject: CN=D7774E45AB9E42C9FB26DE677A07DA92173FCC47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:6d:1f:7a:83:d9:f4:f2:41:88:f1:a0:d4:
3f:02:80:1c:15:76:e0:d1:82:26:86:e4:fb:db:d8:
ac:95:14:2e:14:92:55:0b:df:f6:f6:bb:05:82:fc:
8c:f7:a3:13:09:70:b8:2f:5f:01:30:83:04:b8:c8:
a9:29:42:e9:ac:2c:04:57:72:7e:3a:78:52:10:e3:
37:85:09:76:3b:9d:f9:26:2b:45:71:f2:a8:da:59:
57:ea:3c:96:21:73:9a:c9:53:ef:70:71:82:b0:84:
5f:8b:3e:73:9c:ee:f0:40:a3:f1:dc:79:91:f7:0b:
b6:1c:cb:12:9f:7c:f6:66:e6:5d:af:ec:78:6a:bf:
8a:71:d2:36:b1:2f:bf:a0:1e:f2:20:7d:07:6f:8e:
f5:0a:16:36:47:8c:a7:28:e7:76:ec:a4:cf:0d:6e:
36:2f:1f:88:4d:79:3f:40:3a:dd:7b:89:fb:85:70:
85:28:f1:15:9a:eb:68:82:bf:36:6b:62:23:b4:8d:
b3:e6:ae:aa:8a:cb:ab:94:4b:db:9e:57:7d:78:f4:
b6:1f:9f:e7:4b:49:b0:6e:d9:05:33:e9:57:bc:5b:
0d:86:99:78:36:dc:61:ce:ed:d2:9c:e5:8e:d2:01:
69:03:8f:d8:5e:42:e8:bd:7f:a9:42:e0:c9:98:3a:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:4E:45:AB:9E:42:C9:FB:26:DE:67:7A:07:DA:92:17:3F:CC:47
X509v3 Authority Key Identifier:
keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:16:d8:2f:64:65:33:57:3c:49:4d:21:ec:e3:98:8b:3a:97:
91:dd:d6:59:2e:80:88:be:c4:ed:d2:15:02:f8:3a:29:e2:d0:
98:4b:8d:c7:cd:e6:8d:f0:01:54:d6:28:00:e0:5b:dc:7d:0c:
ed:ff:8b:c1:82:66:11:e6:ee:fe:3c:29:18:4d:c6:b1:c7:a7:
af:3e:d6:4c:18:f0:d0:43:f0:72:4a:92:79:f7:32:32:8b:ca:
6e:0a:2c:1c:90:9f:c5:8a:c5:48:69:6a:62:28:4b:37:1f:c2:
3f:4e:a8:b6:6f:02:2d:9a:2e:f8:35:ab:2b:a8:01:49:b0:02:
ba:c9:b1:f6:c8:11:68:f8:ee:ec:d3:13:56:55:56:f2:a0:60:
ea:58:2d:d2:c1:c1:b3:7d:0e:8a:40:6b:6a:bf:2c:c9:b7:7d:
16:ff:09:7d:51:b1:3b:24:c9:7a:55:8f:7f:2b:19:d0:c3:d3:
aa:c9:4e:7c:a4:a0:ee:c9:77:44:81:ba:2b:15:af:7a:b3:22:
e8:b1:e8:69:0f:6e:b3:a7:4b:8c:68:74:24:1b:05:01:62:dd:
09:7d:9c:c6:dc:70:f3:82:3e:29:76:ae:2c:86:45:70:52:09:
7d:27:00:a4:fe:3f:3a:e8:45:9f:07:17:44:2b:61:cf:d2:e5:
22:fb:09:70
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUavTCefSEIpcbcgr3a3MlGtr00EIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0
OEYxOTkxQTAeFw0yNjA2MjAwNDQ1NDJaFw0yNjA2MjEwNjEzNDJaMDMxMTAvBgNV
BAMTKEQ3Nzc0RTQ1QUI5RTQyQzlGQjI2REU2NzdBMDdEQTkyMTczRkNDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKG0feoPZ9PJBiPGg1D8CgBwV
duDRgiaG5Pvb2KyVFC4UklUL3/b2uwWC/Iz3oxMJcLgvXwEwgwS4yKkpQumsLARX
cn46eFIQ4zeFCXY7nfkmK0Vx8qjaWVfqPJYhc5rJU+9wcYKwhF+LPnOc7vBAo/Hc
eZH3C7YcyxKffPZm5l2v7Hhqv4px0jaxL7+gHvIgfQdvjvUKFjZHjKco53bspM8N
bjYvH4hNeT9AOt17ifuFcIUo8RWa62iCvzZrYiO0jbPmrqqKy6uUS9ueV3149LYf
n+dLSbBu2QUz6Ve8Ww2GmXg23GHO7dKc5Y7SAWkDj9heQui9f6lC4MmYOnpRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU13dORaueQsn7Jt5negfakhc/zEcwHwYDVR0j
BBgwFoAUU0Dbdp2gaQ/6imlqYEftwUjxmRowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWM3MTQxMjItODYwYy00MTRlLWE2N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5
REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0OEYxOTkxQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MzQwREI3NjlEQTA2OTBGRkE4QTY5NkE2MDQ3RURDMTQ4RjE5
OTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM3MTQxMjItODYwYy00MTRlLWE2
N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VE
QzE0OEYxOTkxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGcW2C9kZTNXPElNIezjmIs6l5Hd1lkugIi+
xO3SFQL4Oini0JhLjcfN5o3wAVTWKADgW9x9DO3/i8GCZhHm7v48KRhNxrHHp68+
1kwY8NBD8HJKknn3MjKLym4KLByQn8WKxUhpamIoSzcfwj9OqLZvAi2aLvg1qyuo
AUmwArrJsfbIEWj47uzTE1ZVVvKgYOpYLdLBwbN9DopAa2q/LMm3fRb/CX1RsTsk
yXpVj38rGdDD06rJTnykoO7Jd0SBuisVr3qzIuix6GkPbrOnS4xodCQbBQFi3Ql9
nMbccPOCPil2riyGRXBSCX0nAKT+PzroRZ8HF0QrYc/S5SL7CXA=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:32 2026 by rpki-client