
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
File: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json)
Hash identifier: m1VDqO5rpwG03UILDwo/ufJ8eb8rLthvDHpHIiIAmM0=
Subject key identifier: 50:75:1E:A4:9C:A0:97:01:72:D8:D1:C1:8B:21:FD:B8:3A:22:3B:0C
Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D
Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D
Certificate serial: 01B93910ED615277928F1D43D43CDD2985E98798
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 14:04:05 +0000
Manifest this update: Sun 25 Oct 2026 13:59:05 +0000
Manifest next update: Mon 26 Oct 2026 17:07:05 +0000
Files and hashes: 1: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: FTpue8/n8rx4ss1nHmHxWQ7QpgPzBBVyYvBG1y56+PU=)
2: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl
rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b9:39:10:ed:61:52:77:92:8f:1d:43:d4:3c:dd:29:85:e9:87:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D
Validity
Not Before: Oct 25 13:59:05 2026 GMT
Not After : Oct 26 17:07:05 2026 GMT
Subject: CN=50751EA49CA0970172D8D1C18B21FDB83A223B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:2a:74:5d:be:2e:b4:90:d0:ed:e3:fe:f4:
9c:99:6b:2b:82:fd:ff:26:2a:e2:58:c1:bd:fb:a2:
75:15:a4:a1:c1:b5:5d:54:fd:2a:7d:74:e0:25:00:
af:be:d0:a3:26:db:9e:82:65:71:34:ff:41:7f:79:
08:c8:c9:a5:33:68:a8:80:04:52:95:14:c0:15:e3:
f7:99:89:64:aa:84:c6:6f:7f:c1:67:8d:1f:23:7c:
9a:24:2b:d0:4e:23:bb:74:c8:b7:8c:7e:d2:ce:50:
9b:84:a4:10:cf:cd:11:21:f3:97:03:f5:87:10:75:
8a:d4:55:d5:ea:36:4d:05:0e:be:35:8c:45:f8:2c:
91:7f:1d:e2:2d:bf:0d:23:10:5c:ae:0e:1a:98:4c:
a2:71:11:72:61:12:34:cd:96:1e:61:a5:d4:89:98:
cf:8e:e4:ea:1d:81:bd:b0:c4:29:01:42:29:97:fa:
34:5d:f0:f4:b6:ec:c9:3c:82:38:eb:cb:33:48:af:
54:91:74:f6:1b:a8:e3:8b:91:0f:34:3a:c5:32:b6:
dc:59:7f:0e:21:fe:d4:70:00:3e:b6:b8:84:00:ed:
e3:01:76:b4:36:c2:70:59:7e:c6:88:8f:60:f2:f1:
4e:37:da:52:bd:33:b6:f5:5c:f2:13:58:32:12:9d:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:1E:A4:9C:A0:97:01:72:D8:D1:C1:8B:21:FD:B8:3A:22:3B:0C
X509v3 Authority Key Identifier:
keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1a:33:ae:e7:7f:33:c4:59:68:4e:a2:03:d5:ff:0c:1a:cb:
bc:6c:d8:43:66:86:f0:85:72:bf:c0:d9:90:54:40:b3:2e:c8:
0d:b4:e6:58:1f:c4:d5:df:ea:dc:fe:7a:ad:a9:4b:9f:35:7d:
ca:95:39:ff:59:11:ad:fb:90:4b:46:84:ce:46:66:69:d4:fd:
8d:e9:b9:85:f9:88:64:5c:51:30:8b:0c:39:e7:4b:9a:97:ce:
04:67:9b:1f:7b:23:23:16:02:8e:f5:a7:83:24:fd:3d:62:dd:
b1:b0:f9:51:d3:31:da:67:ea:9e:68:d7:dd:08:3c:ec:88:da:
cd:8d:02:ec:b1:60:67:9f:78:a1:35:78:0b:1b:ea:ce:94:19:
6e:12:56:e2:b9:a2:5d:5b:c6:30:9d:99:e2:23:20:14:09:1b:
39:d3:2e:50:af:fc:54:43:b0:62:2d:a7:a5:40:95:4d:51:e1:
ef:47:cf:55:c0:7c:28:0c:8a:74:42:8d:d1:7d:d9:ab:a1:6c:
2f:9a:a7:f3:af:f5:78:c7:97:86:45:71:cf:ea:be:4c:74:16:
4d:3d:c3:9a:ee:ae:f7:dc:74:a9:0a:e2:24:35:31:a7:fe:a2:
19:27:cf:6e:7d:03:b8:fc:18:a3:f5:ac:86:7a:da:e4:6f:a7:
a2:ab:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:47:56 2026 by rpki-client