
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json)
Hash identifier: 79Dna/cHehqbi8qquxk7K6jVjGo1LezFcHPe7rgIZMc=
Subject key identifier: 67:B2:74:90:0C:52:56:42:58:6B:9A:11:D7:1B:5A:8A:22:0D:44:5F
Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3
Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3
Certificate serial: 783B2CEC1159400DE4AC2CEB169713688029D79C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 19:39:42 +0000
Manifest this update: Fri 19 Jun 2026 19:34:42 +0000
Manifest next update: Sat 20 Jun 2026 22:47:42 +0000
Files and hashes: 1: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=)
2: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=)
3: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: 8pZ5mq5e9Rqd30Lv9BckgAMvEEpPBLPPLawbx7lUsWY=)
4: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=)
5: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl
rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 22:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3b:2c:ec:11:59:40:0d:e4:ac:2c:eb:16:97:13:68:80:29:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3
Validity
Not Before: Jun 19 19:34:42 2026 GMT
Not After : Jun 20 22:47:42 2026 GMT
Subject: CN=67B274900C525642586B9A11D71B5A8A220D445F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:55:e4:3f:1d:e8:9f:ca:37:9f:72:52:f1:
bb:70:e8:36:9f:4f:4a:c3:7f:f1:59:c9:a7:14:94:
ef:05:cf:51:c7:83:35:96:2a:3c:21:82:74:2b:c6:
a9:20:00:4f:7f:44:24:0f:12:37:cd:61:1f:6b:52:
6b:8b:06:9e:37:23:ad:8d:e1:9f:55:59:10:75:fd:
f6:ce:8c:c0:18:84:24:df:36:e8:f2:74:ee:1b:8d:
ff:11:f7:df:71:fe:9e:8d:50:6e:46:9c:e3:ec:e5:
95:12:c5:4c:40:1b:50:13:c5:67:88:fe:10:8f:68:
ce:c9:b3:f8:c7:3a:75:2a:43:59:9b:7b:07:92:34:
a8:ab:5b:5b:1f:d6:06:19:26:6c:11:b7:a9:3a:64:
7b:33:ef:74:15:f8:f0:21:d3:3d:20:a9:23:22:80:
f4:48:9e:c0:7a:d0:7f:92:ba:68:6e:73:ed:bf:a9:
dd:98:44:95:9c:e8:cd:e9:0c:b0:f2:83:10:22:b1:
d2:a3:10:da:74:83:1b:22:11:3e:9e:d9:36:2d:be:
f1:96:06:17:a9:c8:76:45:cb:55:90:0e:2b:72:19:
39:eb:e8:e4:81:ad:14:cd:3c:2f:7a:a1:7a:41:91:
47:3c:6b:29:4e:68:d8:10:fc:43:6b:91:dd:1f:72:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:74:90:0C:52:56:42:58:6B:9A:11:D7:1B:5A:8A:22:0D:44:5F
X509v3 Authority Key Identifier:
keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e1:0b:85:0d:46:01:e8:04:81:f4:7d:bf:e3:8c:13:65:1c:
3a:2b:7d:68:ad:4c:48:c0:90:f0:51:aa:0a:53:45:fd:7e:5f:
25:ed:d1:5d:95:de:18:d5:47:87:ed:1f:af:43:56:fc:23:be:
7d:08:9f:cd:a4:a1:08:5a:c4:62:4d:46:71:39:3a:7d:ae:6a:
09:19:d3:9f:92:cf:65:51:76:1a:13:e2:cd:cd:29:fc:0f:42:
ab:af:fa:e6:af:d0:0d:d5:cf:d1:14:1b:5a:b4:07:89:0d:4e:
99:88:af:f5:b0:57:38:1e:a7:61:9f:dd:70:d6:b0:2d:a2:71:
be:9c:de:e9:fb:f3:97:a8:80:40:9f:ca:eb:3a:a5:a0:e7:90:
68:5b:a7:cb:29:fd:d1:73:bc:64:c6:ca:05:0b:5a:0b:4b:03:
82:88:18:75:a4:c1:0a:d3:37:70:7e:4b:c9:64:c2:d6:13:13:
2c:a7:3a:ba:b5:bf:54:0f:b9:f0:e1:89:a5:c4:c0:26:0f:02:
48:84:cd:be:42:b7:01:68:0b:24:4a:e9:2f:9e:59:26:72:9c:
67:2c:7d:a0:8d:ec:39:df:1f:b4:1f:31:7e:20:6e:1f:8b:48:
73:a3:f2:41:84:06:04:ef:59:fb:5b:75:e3:66:34:e7:08:69:
11:f5:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:58:51 2026 by rpki-client