
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
File: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft (raw, json)
Hash identifier: 8YSYHtksTlGK+Qk4VcXQKutdhiDFw/ZGdP1jZDzmlxo=
Subject key identifier: 44:34:83:99:D1:C8:9C:D7:DA:A6:34:54:8F:37:5B:0C:EB:02:64:69
Authority key identifier: 5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
Certificate issuer: /CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Certificate serial: 36217B657C0027D6A5DA5953D1D7F94AB5705911
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
Manifest number: 10
Signing time: Wed 13 May 2026 07:14:50 +0000
Manifest this update: Wed 13 May 2026 07:09:50 +0000
Manifest next update: Thu 14 May 2026 10:20:50 +0000
Files and hashes: 1: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: 7Q8defqC6lAAWUb6PKdQi9tsdNCBLmxvHmRQL+VpZWA=)
2: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: aimG/5iSSxrYFvvsJNL1+RlZjQ7m0YXtfPl/xnj5GxE=)
3: 5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl (hash: VNw/YrHNQI2Mis3EOvqT3Hha+s/Em7l+FLAbLcPFmxk=)
4: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: t4Yhuqrb+KDLn24Gd9AYMz3qrfeMoa8b1zhrF5DjmB4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:21:7b:65:7c:00:27:d6:a5:da:59:53:d1:d7:f9:4a:b5:70:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Validity
Not Before: May 13 07:09:50 2026 GMT
Not After : May 14 10:20:50 2026 GMT
Subject: CN=44348399D1C89CD7DAA634548F375B0CEB026469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:be:b4:6b:e4:5c:37:f3:ed:1a:fa:97:97:
b6:8c:cf:9a:bf:45:c7:cc:36:47:8f:2a:fc:7e:66:
53:c1:19:d0:2a:cb:9b:89:0a:c2:cc:8e:31:da:b3:
3f:f8:cb:20:01:bb:8b:48:ea:af:e5:45:3f:d0:25:
14:08:ed:52:a5:55:25:88:07:fb:e5:57:5b:24:97:
1b:8b:0d:a9:c0:1e:95:82:b9:8d:09:12:3a:e8:75:
b7:2a:08:05:15:a5:3a:ef:15:8a:72:fb:7d:45:f7:
5c:16:ef:d7:4b:e6:a6:20:c5:1f:5c:21:aa:7a:90:
a5:6e:25:46:80:2b:c0:ac:82:5c:8d:e9:cb:ad:54:
74:f5:3c:db:39:8f:82:e4:df:61:b0:36:48:93:51:
f1:83:03:f3:10:4d:d6:4e:79:33:10:46:d6:1b:0a:
49:0b:2d:48:2c:f9:15:8c:b1:44:c7:f9:9a:3f:36:
a3:87:8b:49:8c:d4:97:5c:d1:a6:db:f9:46:f3:69:
82:6c:1a:0e:ad:66:b5:b8:cc:d8:46:9a:b9:cf:af:
06:af:6f:d7:cc:68:bd:f7:f8:70:35:6f:9c:c6:6e:
d7:32:95:a1:19:05:00:dc:75:b5:89:0a:5e:dc:44:
f1:7d:18:75:64:1c:4e:71:57:93:6d:2c:cd:b3:20:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:34:83:99:D1:C8:9C:D7:DA:A6:34:54:8F:37:5B:0C:EB:02:64:69
X509v3 Authority Key Identifier:
keyid:5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6c:96:3d:00:cf:74:e8:32:ac:a9:b5:12:5f:6a:45:8f:64:
da:6e:73:42:c6:5e:d3:86:d2:b5:6a:b1:7e:07:61:4c:d5:98:
48:79:f7:32:fc:4b:57:55:49:7e:92:68:46:45:dd:5f:54:3d:
f1:ab:6c:a4:61:0e:12:85:4d:87:2a:2a:01:06:53:b4:d6:54:
b7:13:99:de:66:b0:11:4a:f9:fa:28:71:f8:c9:a8:65:10:3d:
0f:2a:39:11:57:f3:63:ba:1a:76:d2:6c:71:0f:10:63:d5:f5:
df:7a:06:c1:d8:30:68:e3:da:f1:ed:d5:38:f0:e8:f6:3a:d5:
41:1d:68:9a:ac:d5:97:14:fa:26:db:b6:ba:61:2b:f8:9f:17:
84:32:88:1b:5b:82:51:13:eb:01:89:a9:d4:bf:cd:e8:d2:94:
c0:e1:1e:e1:05:37:1e:ad:cb:fb:6e:11:93:cf:19:46:54:32:
52:ba:76:e9:6d:6e:a1:05:bb:cb:04:b1:09:16:47:12:4e:15:
6d:f8:e1:0b:02:f9:bc:31:38:d0:31:0a:5d:bb:84:5b:b3:2d:
77:0b:8b:d3:dd:44:fb:ea:33:e4:37:4c:4e:9c:83:b7:f0:63:
cb:a9:23:b1:82:fc:60:80:25:75:62:5f:9b:a2:b3:e5:52:b3:
25:49:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:46:26 2026 by rpki-client