
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json)
Hash identifier: FEniWYnuZY7cuEugy1tJz/9Vm/CPmmPInB4jNcU+UZk=
Subject key identifier: 2B:25:18:06:63:C9:70:74:62:02:A7:AB:B4:89:11:95:B0:9D:1F:AC
Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Certificate serial: 2E869189E61C5A62606722EC82EBFEC895E918B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 00:29:08 +0000
Manifest this update: Thu 17 Sep 2026 00:24:08 +0000
Manifest next update: Fri 18 Sep 2026 00:45:08 +0000
Files and hashes: 1: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=)
2: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=)
3: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=)
4: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=)
5: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: XYorApx2o5jGo2KMS+xXo9rJssTQtW4KZkbqON6r0cE=)
6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=)
7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:86:91:89:e6:1c:5a:62:60:67:22:ec:82:eb:fe:c8:95:e9:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Validity
Not Before: Sep 17 00:24:08 2026 GMT
Not After : Sep 18 00:45:08 2026 GMT
Subject: CN=2B25180663C970746202A7ABB4891195B09D1FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:c6:bb:17:ac:54:7a:12:37:1c:5a:c1:4e:
63:f8:2c:3b:f3:fc:94:13:13:19:60:6e:7e:de:26:
bf:36:55:c3:85:e4:3b:7c:31:22:87:5e:c6:9c:85:
dc:c0:74:ed:c3:9a:d8:63:17:d7:41:81:ad:67:03:
58:f3:ab:05:6b:12:b9:5d:37:80:a7:58:5f:5a:28:
e7:28:89:09:61:3e:d3:3b:fe:fb:ed:8b:64:30:f6:
2b:25:9f:64:e3:30:58:96:12:ce:56:14:fc:9d:c5:
61:b6:84:a9:c9:a3:f1:cf:ba:35:2c:ea:27:ea:ae:
0e:ad:ca:91:3d:99:a7:0c:8f:87:f6:aa:ef:5c:8a:
f8:f9:41:b5:e4:6b:82:24:a3:8a:e3:a3:7e:af:6b:
e9:4a:b1:3d:49:3e:56:65:15:3d:1d:4d:51:4d:1e:
4c:3e:b0:c2:b8:45:a3:72:0e:38:70:9d:86:64:92:
4d:61:5d:6c:b6:a6:42:57:06:a1:ac:7e:7a:84:fb:
37:a3:8b:21:b9:2c:cb:91:b4:b4:e4:13:98:3b:c4:
84:3c:2b:39:35:86:11:c4:15:e3:28:92:7b:ba:24:
3a:36:3a:2e:00:8e:14:16:46:bf:21:fc:13:58:20:
f2:df:6a:f7:26:ad:3c:c0:fd:93:20:fa:61:31:bf:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:18:06:63:C9:70:74:62:02:A7:AB:B4:89:11:95:B0:9D:1F:AC
X509v3 Authority Key Identifier:
keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:ca:84:32:55:a3:95:3f:c8:89:a5:f9:09:f2:36:17:e3:
fe:8d:ba:bf:82:5d:7b:4a:94:22:9a:27:27:b6:05:4d:ec:f4:
6f:62:70:fe:c6:85:de:02:4e:64:1a:8a:13:45:01:9f:d9:d8:
ad:b8:0a:2d:77:67:ba:cc:c1:e5:52:cd:ed:45:b6:cb:2e:2a:
b1:c5:e3:8e:38:8f:fd:e0:5a:ac:51:6f:94:ed:19:51:77:a1:
38:68:e9:bc:fb:10:e1:43:0d:27:9c:d5:b6:49:f8:72:fa:f8:
ea:2a:5a:c9:8a:37:63:45:60:c2:36:c4:42:d4:77:45:a0:f1:
7e:1e:55:2a:a3:c3:5d:3c:b0:aa:80:1b:da:81:b2:d0:5d:f2:
eb:59:b9:94:8e:40:b6:51:33:57:26:47:73:bb:01:2c:04:b9:
2d:8f:cc:7d:52:63:93:cc:69:a7:e7:90:07:71:36:7c:a4:aa:
ff:b0:b0:32:4c:09:9e:32:34:2d:2d:bc:8e:69:2c:24:d0:9f:
37:36:80:d9:01:0f:3c:c3:e1:35:fb:c3:24:97:3a:fb:90:f7:
22:ee:08:ad:dd:ad:3b:36:d4:69:d4:87:e8:23:30:f4:75:15:
f1:1e:9a:7b:7e:55:75:d5:cc:a4:45:33:9a:ab:a0:d1:cd:cf:
72:72:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:04:40 2026 by rpki-client