
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
File: 5935015AB8D2AA07565ACB7B918A50D49090AA26.mft (raw, json)
Hash identifier: afIT05EDNJ7DjUYx5d4gT5JLGvJXmusizd5JttYMqLg=
Subject key identifier: 7F:F4:C4:B1:18:4F:A4:A3:F1:D2:17:24:19:89:AB:98:AE:26:67:07
Authority key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26
Certificate issuer: /CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
Certificate serial: 5301E213C38FC5379A37D3D2A3CF3C34D6134650
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 19:23:08 +0000
Manifest this update: Wed 16 Sep 2026 19:18:08 +0000
Manifest next update: Thu 17 Sep 2026 22:01:08 +0000
Files and hashes: 1: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: YukTsqh5CPIPhkM3TqJo0K1IkyqlUpFEdp2Xtp+n8JI=)
2: 5935015AB8D2AA07565ACB7B918A50D49090AA26.crl (hash: qK29bD1nMCYquyOH4v4hSsn29XGZTaKG8o+fhTahaz0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl
rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:01:e2:13:c3:8f:c5:37:9a:37:d3:d2:a3:cf:3c:34:d6:13:46:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
Validity
Not Before: Sep 16 19:18:08 2026 GMT
Not After : Sep 17 22:01:08 2026 GMT
Subject: CN=7FF4C4B1184FA4A3F1D217241989AB98AE266707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:9f:5e:d4:98:8e:80:0e:ae:d7:b1:dc:c9:
a6:a8:cf:ce:41:f0:48:67:33:bc:7f:14:5f:8b:06:
9a:e7:7b:69:14:56:8b:08:ef:d4:ea:7c:75:d2:4c:
15:2f:0b:32:a1:3a:42:8f:93:f5:40:4f:87:ee:e5:
da:9a:b3:50:ca:21:65:86:48:bc:eb:5a:c4:c9:f5:
28:71:3c:2e:b7:87:7b:0c:22:46:7d:9d:54:cd:f3:
c2:9b:9d:84:d6:c2:5a:89:ba:e4:53:14:c9:36:27:
b8:b1:51:dd:23:0c:fb:e1:64:8b:4b:e6:37:73:d1:
fe:27:26:ad:81:9e:b1:dd:a1:d0:3a:36:9f:6a:a8:
aa:c2:16:bf:d5:25:f3:69:1d:a3:9f:1f:b4:0f:36:
93:a3:27:70:26:74:3a:a6:14:ee:20:8b:e9:36:04:
a6:d1:1e:1e:e2:55:cd:12:f3:11:10:2f:dd:f4:51:
03:e0:fa:e1:84:bb:ff:f6:99:8d:86:5d:d9:74:97:
46:a5:10:e8:1f:a6:54:f8:a3:be:e2:f7:97:c6:8a:
b0:9f:48:b1:9b:29:34:89:5a:f5:7d:b1:09:a4:93:
a9:cd:2e:37:ee:88:e1:74:d1:94:ba:32:66:9e:92:
3f:81:e3:3b:af:3c:0f:3f:57:14:0e:90:5f:f0:85:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:C4:B1:18:4F:A4:A3:F1:D2:17:24:19:89:AB:98:AE:26:67:07
X509v3 Authority Key Identifier:
keyid:59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:b7:0d:dd:ea:2a:21:ca:74:46:1d:9c:9e:f0:5c:12:a7:
3b:79:f4:da:61:67:af:5a:ac:8b:37:1a:5a:ea:e1:1d:95:43:
29:d6:c0:fb:cd:f4:b8:f1:27:d8:8e:4c:79:4f:b5:ab:50:7f:
98:37:d8:04:30:77:33:61:ee:5d:e8:27:02:4b:57:03:c7:5c:
9e:ee:d8:d8:6a:6f:2f:d6:3e:ee:f2:bf:9d:9a:43:d4:75:21:
46:40:74:bc:29:00:80:b1:50:a9:76:8b:55:2c:94:2e:69:f7:
6e:e3:f8:50:f1:45:e6:a7:62:5f:d0:ab:27:dd:ed:95:3a:06:
50:60:57:f1:8e:d6:48:78:71:4d:44:e6:97:59:fa:05:76:bc:
1c:83:9d:65:63:02:25:ec:f4:6d:3c:c6:7e:5d:68:ac:e1:f3:
7b:1d:69:4b:e5:26:42:23:93:c1:a0:80:f9:22:17:ce:18:61:
1f:20:4e:f7:0a:f1:90:b5:8b:6d:9e:9f:ff:81:5e:35:da:67:
92:da:21:95:61:3c:6e:17:bf:46:bc:86:1e:4c:dd:2b:fc:d8:
46:26:80:5d:bf:8a:e0:d0:b8:ed:c2:6a:b1:10:cd:01:3b:08:
d7:6c:76:05:12:52:21:9a:65:12:e9:e0:56:bd:b6:85:85:9c:
b9:d6:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:50:25 2026 by rpki-client