
$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json)
Hash identifier: altQIQM0/hLGmJWMHOrH2Gy0Vz8Xs6ESV1lreLTaVjI=
Subject key identifier: BF:22:9A:4A:1F:94:0B:5A:61:B7:5A:D6:0C:A7:27:C0:7A:CB:15:A5
Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
Certificate serial: 28CDC50AF5956AB9B235D85055C3B60850CFC7D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
Manifest number: 0551
Signing time: Sat 28 Feb 2026 00:10:39 +0000
Manifest this update: Sat 28 Feb 2026 00:05:39 +0000
Manifest next update: Tue 03 Mar 2026 08:11:39 +0000
Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: iw3Cyi1VQGI3NXc1Y1g7ynB6mTlTdwiAa9nkvlJ8yLw=)
2: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: JoAF/8JHzRpOjvTyFawR/Mq5uYGbOZSLU2u9ylGcQ5c=)
3: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: 2no4Xqz8EMimQkiQAobat+Buvc9M4isJRpwk/H+BrgU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl
rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 08:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cd:c5:0a:f5:95:6a:b9:b2:35:d8:50:55:c3:b6:08:50:cf:c7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
Validity
Not Before: Feb 28 00:05:39 2026 GMT
Not After : Mar 3 08:11:39 2026 GMT
Subject: CN=BF229A4A1F940B5A61B75AD60CA727C07ACB15A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:b2:75:d5:ea:dd:23:e1:8d:d4:9b:e4:f8:
0d:e6:13:0e:a5:49:ee:c2:35:9c:7c:e0:ef:1e:6b:
66:0b:98:de:e0:15:6c:09:d9:3b:6e:4f:f3:4e:2a:
b8:b4:8b:a6:58:5b:a5:81:97:d2:db:b9:25:52:14:
40:50:0a:67:42:1a:17:87:e2:ce:d8:97:8e:e6:3c:
38:3d:69:aa:bf:4b:00:0e:03:c6:bc:43:32:fe:81:
85:bf:7d:ac:55:28:dd:35:e8:24:c5:5d:7b:fe:87:
33:db:a4:0d:fd:b7:00:60:79:ee:e0:6b:05:97:71:
86:64:71:ab:40:02:bb:03:88:54:44:2d:dc:9f:57:
24:d4:f6:76:d0:07:a4:b2:46:88:fb:da:f0:f9:5e:
1f:5f:25:3a:f6:c3:ce:52:e5:e9:24:05:ac:88:c4:
1b:9a:b9:7a:46:14:7e:89:59:00:24:6b:11:b0:98:
9d:b2:0c:b2:3f:9b:a4:4c:32:4e:93:a0:e1:cc:81:
a7:2b:68:8d:4f:18:bc:21:9e:61:d0:fb:f5:87:06:
5e:84:f6:66:fc:cf:cf:6e:e6:3f:63:e2:3b:f6:3c:
4d:95:80:07:a6:96:6f:21:5d:9f:e8:19:01:d8:6d:
72:ed:e1:cb:dc:c2:1a:f5:1f:77:15:13:fb:ab:a6:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:9A:4A:1F:94:0B:5A:61:B7:5A:D6:0C:A7:27:C0:7A:CB:15:A5
X509v3 Authority Key Identifier:
keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:bd:90:b3:49:7d:82:3d:82:3c:47:54:d9:73:58:24:ca:04:
b0:11:d8:72:5b:74:ef:89:58:f9:f3:1d:32:78:e6:32:02:e5:
0f:49:fb:7b:8d:9f:1a:15:8b:77:fc:25:4e:ee:54:b5:69:27:
9b:67:c8:88:fb:3d:93:e1:14:9d:c0:30:2d:a5:f9:13:93:3e:
6d:43:1c:92:88:dd:af:a3:17:4a:80:bd:e2:21:ee:f2:58:2d:
51:8f:73:b8:f7:81:b5:2a:55:38:c3:66:a7:10:0e:86:e7:28:
16:ca:d5:44:f7:e7:38:37:db:42:b5:81:1a:64:37:32:c3:ef:
45:85:8b:d8:3f:29:b2:bf:14:89:6a:0a:3e:e2:5e:af:ec:72:
20:90:f6:d0:8c:d1:47:f2:57:c0:96:8b:3d:12:07:ec:be:72:
9f:5a:d7:f0:f2:91:03:d0:c1:68:55:da:eb:02:4b:f6:d4:07:
76:12:56:64:49:ee:c6:3c:6e:61:3f:6f:ae:0d:32:40:98:6c:
bc:0c:10:6e:4e:52:06:8f:d0:47:ac:a4:fc:f6:b2:c3:b1:2d:
ba:8b:9e:3b:a6:54:31:7a:ca:5e:4a:1b:69:0d:45:1a:50:b7:
79:88:40:62:f5:34:49:54:94:f6:21:06:73:41:e6:c7:42:87:
dd:63:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:54 2026 by rpki-client