
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
File: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft (raw, json)
Hash identifier: UXwfOhvyvhP9r5aE4nW5gACvWR6Z5z1Ws911yzvItkU=
Subject key identifier: 96:EC:3F:FA:79:95:C4:EF:76:B4:1C:8D:FD:25:4F:47:7B:59:D2:05
Authority key identifier: 5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
Certificate issuer: /CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Certificate serial: 59689AAE5D1C6CF26FB70D41D4292E7801EB5658
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 02:52:04 +0000
Manifest this update: Thu 17 Sep 2026 02:47:04 +0000
Manifest next update: Fri 18 Sep 2026 06:50:04 +0000
Files and hashes: 1: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: x30oT/Lrnap20G4fAn+tMYY1/fn7+IpyTEVsCdXHJyU=)
2: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: qiIo+SN3MC7vwCLrsPjubqqbgVImtRMedDlPEjqNz+c=)
3: 5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl (hash: LRoC6C0sLQq0kXTRrObkfgwFkzvx+rWjm1ZOXnUtxtw=)
4: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: KKf4Jl2OsQd3MJnMUlr/HfdddutYB5E1WPKkn8EgV+Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:68:9a:ae:5d:1c:6c:f2:6f:b7:0d:41:d4:29:2e:78:01:eb:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F13D6485B058C0C1D31D70E67C5C2C5B2767473
Validity
Not Before: Sep 17 02:47:04 2026 GMT
Not After : Sep 18 06:50:04 2026 GMT
Subject: CN=96EC3FFA7995C4EF76B41C8DFD254F477B59D205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:75:67:a3:3e:dd:af:a6:b1:33:f2:40:5f:
61:13:2d:a7:00:12:d5:43:0c:9c:b1:7b:af:e0:4d:
cf:41:8f:78:05:fb:b6:6d:93:8b:63:45:b1:e4:f8:
b7:7e:35:b7:81:7d:5b:88:21:5e:86:fc:f9:52:5e:
6c:91:1c:13:a7:c5:7a:e0:ac:9a:0c:13:aa:6b:de:
6b:6f:df:a6:0f:bb:a9:a0:bc:78:1b:14:a4:9e:04:
e6:5d:82:a6:b0:18:cb:61:09:d5:51:fc:74:f1:03:
63:90:69:5a:b5:ca:60:c2:1c:e8:2a:5b:2e:32:92:
00:f3:c2:81:f8:13:f6:c2:02:c6:6e:02:5d:b0:ba:
87:12:e9:94:60:6e:ca:f0:ac:dd:d0:00:79:c9:4b:
9a:f2:6f:28:68:bb:f8:50:66:eb:2c:d4:94:f4:31:
36:88:cf:dc:7e:a5:4d:28:83:02:ce:1d:0e:2b:0c:
e3:1b:bc:3a:90:e6:52:1e:e1:3a:a7:88:55:ff:d2:
1b:b8:61:f7:00:11:f4:22:57:f0:64:c6:0b:a3:c6:
ab:77:58:69:9d:88:2f:f2:90:c6:25:b0:d4:42:e4:
6e:b7:34:58:d2:61:d8:65:76:6b:8a:a4:d2:d4:43:
8f:e5:19:d1:7c:3c:7a:68:b7:8d:62:70:c4:d7:eb:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:3F:FA:79:95:C4:EF:76:B4:1C:8D:FD:25:4F:47:7B:59:D2:05
X509v3 Authority Key Identifier:
keyid:5F:13:D6:48:5B:05:8C:0C:1D:31:D7:0E:67:C5:C2:C5:B2:76:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/5F13D6485B058C0C1D31D70E67C5C2C5B2767473.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1a:99:39:c4:1f:2a:f8:40:b9:71:95:33:8b:43:66:0d:96:
8a:0e:6c:ba:ae:4b:27:60:5e:c1:8c:87:40:1a:64:4d:a0:3e:
51:e9:cf:a5:65:c9:f6:33:0f:14:57:28:b7:df:63:aa:ff:08:
ab:18:67:bc:b7:b5:b4:66:e9:f4:b2:df:65:24:87:0c:7b:e7:
09:37:b1:82:1f:9c:16:36:5a:41:cb:89:20:dd:0a:19:85:d5:
d4:b7:d7:19:01:91:84:0e:be:de:d8:e7:1e:b8:0c:5b:0b:23:
5d:54:68:ad:38:0a:69:96:c8:dd:bc:68:84:62:37:f2:de:42:
bb:f6:2c:a0:02:b4:96:73:cb:91:86:2b:4c:6f:5a:79:1c:78:
d9:a4:40:6d:1f:1f:85:f7:10:30:2a:65:f0:69:08:99:45:3e:
10:9e:70:0e:ee:11:bc:0e:ff:73:f1:70:ca:0e:06:0a:81:db:
0a:cc:d1:43:4f:44:7d:fb:d7:9f:b3:32:a8:92:0c:0e:3a:72:
31:c3:9d:b6:09:81:fe:f4:85:85:a8:35:d3:dc:ea:8c:7d:a1:
bc:f6:39:03:ea:04:fb:14:df:b7:8f:9b:0a:73:e4:ff:e3:e0:
d8:e0:02:68:f8:d5:99:27:04:98:3d:61:17:2e:0e:7f:09:5f:
51:7d:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:42:17 2026 by rpki-client