
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json)
Hash identifier: lol6PKdLU4JUemg/j58oPCcOzJCyp4xSwz9pv2q6vKg=
Subject key identifier: 82:9F:58:0E:EF:79:72:49:0D:FE:12:A3:1B:00:B7:EC:48:C1:FA:BF
Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Certificate serial: 7FC6EE6A92829D00821C5FD4D1066030CDB8C81C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
Manifest number: 37
Signing time: Thu 11 Jun 2026 11:20:32 +0000
Manifest this update: Thu 11 Jun 2026 11:15:32 +0000
Manifest next update: Fri 12 Jun 2026 13:42:32 +0000
Files and hashes: 1: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: FmDVU6V4yH7U1lO06MSEpLfv9woqVeYU/bZY3xtuw0c=)
2: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 13:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c6:ee:6a:92:82:9d:00:82:1c:5f:d4:d1:06:60:30:cd:b8:c8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Validity
Not Before: Jun 11 11:15:32 2026 GMT
Not After : Jun 12 13:42:32 2026 GMT
Subject: CN=829F580EEF7972490DFE12A31B00B7EC48C1FABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:95:9c:93:6c:ac:d8:30:dc:1d:99:bf:0f:
12:d7:a4:d0:64:3e:02:8b:ab:5e:2d:c0:22:38:1e:
f1:ab:2d:77:da:05:ee:79:7f:2c:bf:29:33:e8:38:
a3:ab:98:33:e1:1a:cb:53:a7:e1:30:13:cd:ae:5d:
67:18:da:98:19:01:12:76:d8:dd:72:8f:15:3c:27:
aa:4d:cc:fb:8c:63:09:2d:43:55:a0:9c:34:43:9b:
5e:32:74:2f:b0:c5:ff:dd:2f:ed:ac:38:bc:b4:11:
aa:dd:2e:50:d0:fc:1e:18:74:a6:8a:8d:a5:4a:a4:
d3:1e:8b:ac:63:db:ea:32:55:8e:45:43:ea:59:b5:
91:2f:05:bb:ed:5c:4e:53:21:ac:1e:58:e5:cf:73:
09:3f:69:ca:3b:c1:0f:df:d8:cb:9d:08:c9:2e:a5:
16:9a:2d:f2:ad:7c:05:ef:19:a0:ce:1a:d7:44:49:
61:cb:4f:d9:97:ff:98:c6:ca:0f:9e:7b:4f:ad:e6:
a8:d6:0a:8a:aa:a9:ef:66:2d:00:68:a6:51:ef:ea:
45:c6:0a:2e:58:e6:8b:98:b8:03:40:31:4d:10:b0:
40:cd:58:5d:bb:ed:18:58:cd:32:a6:8d:5d:f2:14:
9c:21:d2:1a:18:d2:0c:4e:37:4d:c4:ca:77:40:bd:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:58:0E:EF:79:72:49:0D:FE:12:A3:1B:00:B7:EC:48:C1:FA:BF
X509v3 Authority Key Identifier:
keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0d:4c:30:8f:3e:e2:9c:6c:0d:3b:f4:c6:cf:b9:6e:19:18:
46:e6:1c:54:5c:6c:28:ca:1f:14:44:1f:7d:e4:f3:c0:31:53:
ae:09:de:75:12:4b:3c:e5:79:00:08:aa:9b:b7:3c:b3:b9:9d:
70:13:3b:b3:4e:a8:eb:4f:3b:e6:35:b7:db:8f:ab:20:7e:63:
32:7b:83:af:37:83:73:56:6f:14:95:e9:4a:8e:c4:c0:2c:49:
c1:63:20:65:d4:ba:2f:a1:51:20:e4:bf:62:55:ba:7e:17:ba:
77:16:92:21:08:67:5c:f9:69:b0:34:f3:75:2d:7e:af:92:2c:
5e:2a:6c:60:00:18:6d:33:d2:81:3c:d7:e0:fb:fc:96:15:f8:
ed:a2:e1:be:46:56:3f:f8:82:cd:eb:52:48:fd:47:92:c7:14:
63:e9:1a:b5:c5:9e:d0:19:53:ef:17:77:eb:49:35:7f:47:27:
35:e4:fe:be:eb:b5:b8:94:e7:a4:24:af:74:4d:17:a4:88:51:
d7:b6:74:8a:a1:b5:58:98:39:91:75:e7:8c:f3:a2:88:6a:5f:
aa:e0:0c:72:e8:a8:3b:06:f8:68:90:57:9a:c3:e0:1d:15:79:
4b:ce:9c:c2:1b:66:d0:6e:3f:b6:20:88:29:e7:2a:79:ae:48:
1e:17:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:03:42 2026 by rpki-client