
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json)
Hash identifier: LfgHUAN1+NuqD4ZJUzpfjsTTTn+HU1TsRauQluNfjHA=
Subject key identifier: F6:A6:02:75:EF:CA:9C:F6:78:1F:1F:1C:92:3B:65:58:D2:C5:CE:BC
Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Certificate serial: 18AD73431C36654D37D434848247E1B28BF8BC74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 14:09:36 +0000
Manifest this update: Sun 02 Aug 2026 14:04:36 +0000
Manifest next update: Mon 03 Aug 2026 18:07:36 +0000
Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=)
2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: dWn6dZd0Vz75gxLAb05NJx45Xlw9WjLH8maEdwz3c0o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ad:73:43:1c:36:65:4d:37:d4:34:84:82:47:e1:b2:8b:f8:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214
Validity
Not Before: Aug 2 14:04:36 2026 GMT
Not After : Aug 3 18:07:36 2026 GMT
Subject: CN=F6A60275EFCA9CF6781F1F1C923B6558D2C5CEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:56:bd:7a:aa:71:42:34:fb:c0:f0:e1:2f:
6c:ef:ce:b1:2a:ec:a7:22:38:ad:46:25:c5:03:ed:
21:78:96:95:dd:30:bf:22:87:b3:82:8b:be:c5:22:
46:e4:bf:fe:d2:89:cf:35:71:c6:f1:1f:c3:e6:57:
f3:d4:f5:50:3d:9e:c1:ba:db:93:42:4a:a0:53:70:
0c:40:6f:eb:3f:ae:ed:43:21:94:55:2d:72:68:77:
f1:50:74:ff:24:8c:3e:8b:b2:c6:76:ed:5b:06:96:
70:b3:0a:5f:d6:16:80:87:ff:c6:08:75:39:cb:32:
25:0e:62:50:05:6d:db:3e:0a:ad:a6:32:d2:4c:8c:
9f:7b:68:70:b9:b3:ee:ed:4a:d6:69:ea:a8:d8:81:
f5:ee:10:ee:4c:4d:b0:e6:29:c1:67:21:48:43:38:
d8:61:de:2f:b6:12:c4:c9:d5:78:1a:8d:5e:81:01:
5c:2e:0b:05:b2:10:29:00:64:be:77:05:5b:3c:79:
f9:2f:b2:8b:cd:96:c0:c6:4b:55:37:b0:27:14:29:
64:db:8d:b9:02:a7:0b:b2:a4:0a:c3:97:c4:5a:9c:
25:32:f8:ce:79:58:52:f4:01:f2:e7:41:b0:36:d7:
f2:d9:3f:cc:85:61:5b:ef:da:a1:05:a4:d2:e8:ae:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:02:75:EF:CA:9C:F6:78:1F:1F:1C:92:3B:65:58:D2:C5:CE:BC
X509v3 Authority Key Identifier:
keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:64:c0:1d:4e:ab:45:13:43:5f:9a:55:b4:48:32:39:f3:
18:03:0b:88:d5:ae:f3:24:f9:6a:a9:7c:2b:3e:0a:43:9f:ef:
a7:83:c3:11:21:f1:b1:17:5f:be:84:49:4d:db:79:c6:55:1f:
85:34:4f:2e:a7:51:4b:fb:22:8c:c4:4b:89:b5:fd:f6:c0:3c:
52:a6:ce:3f:d1:f4:a1:ff:95:01:69:1d:4e:06:1a:7e:11:7c:
62:19:53:88:9c:80:72:cb:63:3c:69:1e:8b:58:d3:18:cf:bc:
11:aa:8b:78:cf:c3:b2:56:ca:ed:98:20:3c:9f:5f:e3:fc:70:
07:37:03:28:59:6d:77:17:1c:fe:fd:b3:fd:07:05:3e:2e:41:
2c:8a:5d:df:6d:d2:df:11:a4:02:98:28:dd:6f:75:c5:61:90:
7c:f2:c0:d1:02:89:ff:43:d2:8b:4a:dc:4e:0c:7c:c4:2d:6a:
f3:66:4d:ef:d7:0f:5c:77:ee:c9:7d:67:bf:e8:6e:b6:44:92:
12:df:18:bc:49:48:df:b0:4c:d0:f6:9d:1c:04:63:9d:bf:97:
63:40:98:b2:58:c1:04:48:f9:fb:95:95:bd:44:9c:d6:21:f4:
01:94:0e:08:64:90:88:48:85:52:30:71:3b:54:ed:dc:ec:41:
3f:59:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:34 2026 by rpki-client