
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
File: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft (raw, json)
Hash identifier: AyjPxX4RHcle60Ik50c6PsPQf9AFH6TQgX1jxxeYtlk=
Subject key identifier: 51:C2:C2:D5:78:91:EC:2D:7B:7F:F9:6D:89:BB:BD:43:F6:47:8E:08
Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
Certificate issuer: /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Certificate serial: 24EA4350E9605D7551644857A06A6958360F9BDF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 19:28:13 +0000
Manifest this update: Wed 16 Sep 2026 19:23:13 +0000
Manifest next update: Thu 17 Sep 2026 22:57:13 +0000
Files and hashes: 1: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl (hash: ++gFv0KKRNszynY2gVqifB/cwEYiHQq6hdSoOfcwlOw=)
2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ea:43:50:e9:60:5d:75:51:64:48:57:a0:6a:69:58:36:0f:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Validity
Not Before: Sep 16 19:23:13 2026 GMT
Not After : Sep 17 22:57:13 2026 GMT
Subject: CN=51C2C2D57891EC2D7B7FF96D89BBBD43F6478E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:bd:bd:55:18:46:56:e4:ec:41:40:32:fb:
fb:2f:3d:ab:39:30:7a:1d:af:20:a1:03:af:03:67:
fa:92:c9:82:e1:8a:1e:66:99:c2:c8:b2:e1:af:42:
a1:a8:a4:6c:ae:76:98:68:87:65:2b:5c:5c:ad:06:
4a:c8:f4:77:cf:fa:e0:93:14:dc:f9:15:7b:39:ba:
75:11:83:87:19:24:f5:9f:f8:9a:3d:e5:f0:6c:e5:
3e:5c:e0:9d:4b:91:aa:5d:dd:e9:c9:a1:7b:29:b9:
70:53:d7:ec:48:fe:15:2b:48:78:5d:39:55:92:7c:
75:1d:24:81:0a:52:cd:5e:97:4f:41:de:26:6f:0d:
10:df:81:75:bc:15:2e:cd:9f:ff:76:90:62:29:0d:
81:31:f2:11:62:4b:65:00:f7:f4:cf:64:f7:54:2a:
01:af:f1:f2:1c:f8:ce:bf:67:88:67:4b:a5:40:04:
90:9b:07:7e:c6:60:78:66:25:a6:02:de:e0:b9:89:
bd:7c:b8:89:ad:d8:fe:43:2d:92:3d:f7:68:d2:52:
b9:8e:15:62:4f:6b:8a:d1:53:a1:c0:df:3f:44:5b:
cf:e2:3d:c4:d1:b9:4b:58:b5:95:3b:f1:83:63:c4:
32:c4:2d:51:22:43:ce:be:95:2a:d9:1f:24:0a:14:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:C2:D5:78:91:EC:2D:7B:7F:F9:6D:89:BB:BD:43:F6:47:8E:08
X509v3 Authority Key Identifier:
keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:24:e4:df:29:c2:8c:4f:10:08:8e:49:81:21:e5:bb:3d:c9:
2a:c7:42:12:56:88:26:17:70:ff:20:1f:54:94:b6:6e:53:c9:
92:fe:a2:f8:28:af:39:df:e4:c0:33:c1:da:e1:5c:40:e1:de:
85:c1:01:74:32:df:43:81:9d:9a:d3:ca:5f:2c:80:ae:84:fd:
7b:67:97:07:b7:19:71:da:2e:12:19:af:37:14:19:56:44:d5:
f2:59:b9:6e:f3:b7:dd:96:c1:92:ac:ba:44:4b:d7:85:33:32:
16:0e:f9:55:81:5e:ae:a9:73:70:e7:ec:f5:ed:41:51:42:41:
25:ba:52:ed:bd:10:c9:5d:90:f6:5e:0d:d0:6d:43:9a:12:3a:
88:0c:cf:81:9e:b7:c3:8b:00:4d:0d:65:50:1d:56:cb:30:df:
ef:86:2a:ba:06:20:1c:40:fe:56:f8:36:e3:ad:69:44:ff:01:
78:f9:77:d1:30:c5:e4:61:65:eb:cf:66:1a:ee:e2:6a:00:d1:
94:00:42:b6:fd:f7:eb:37:d6:b4:8c:e6:de:ea:29:18:b5:93:
9f:eb:51:dc:73:3e:b1:f9:5f:7f:85:28:f7:f9:fb:36:a3:d3:
cd:b6:b9:6e:2e:53:46:cf:15:76:c3:95:70:8b:9a:39:a6:84:
38:e8:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:23:18 2026 by rpki-client