
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
File: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft (raw, json)
Hash identifier: EnU6quTKBBVY4sFwki79p6J62Wv9qlYjpyo7mHyvbYU=
Subject key identifier: 9F:F3:FE:CF:3F:7A:0C:79:AE:E0:ED:AF:7C:27:25:1D:9D:89:41:48
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 5D380EF8F71F6CCF03613251EEF46686D694081E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
Manifest number: 04F4
Signing time: Sat 18 Apr 2026 21:01:31 +0000
Manifest this update: Sat 18 Apr 2026 20:56:31 +0000
Manifest next update: Tue 21 Apr 2026 21:56:31 +0000
Files and hashes: 1: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: PWM0lPkbAP0xRMCpXkDlVWzP6ea2WwdwLRUG8q+LayE=)
2: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: X/VdQj0myZ9pc/9RSPEVpKcJ8tVPlBcEKUnFIDmfNas=)
3: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl (hash: rUPP3FL5D6yC3KNLyV96fVLSleySgj37xQOBtBmahO0=)
4: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: EILyPmlWJ7Ald971q91eFzzx7IL4/UbfGOvQ+dEFrSA=)
5: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: tkTPeVpGuStZROHiyqEEeRHuHIzs/xnYHlkNrpjcmvo=)
6: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: zv6vAfsefl7yBaAvbq+NQc03d4+XW8OFywPZLJ49jDI=)
7: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: Qc27SwkOs0YfW/ztzPB1WKphcMOFgPy1Jbk8nC9mGIs=)
8: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: bZM4rUbr/5eo/XLmWgfcXg1DbTPNYjhGuHArrlKmdos=)
9: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: r3aeBK0wC19KbZfQEH9JKf1jcb5+iU1gT0Lpa9912/U=)
10: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: NabM5/pZY7uH55QFlnuPnhkQThVK+UfxvckwBcfBjxU=)
11: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: htuRYgwO+/oesGX5fEx8u0E0zBo0A2TVpj6idfUe6I4=)
12: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: tMCr01i6zDN0FA6TrABKI5zl+owqe65uy7t/cVlhO60=)
13: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: pWG6S1U7mazV8YnSvTsXbW1HfQiM8AMh4bxaqVSo3rk=)
14: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: HFJMUP4o/w80jFmIJnz0e1+39WjuAUwW8ZmNSAlo4/U=)
15: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: UtXQmjBeC5CTnscxuxaYsgnMztecD0FiHkFt7rcC/rg=)
16: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: yPLm//MxtanG78hWbvTW/6v5g9FGuAdopFJC5Wtxpfg=)
17: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: 4R7MDWLKy+mdGSR7ZMbqWXtPgKCXx2/9L8xHG7DHjgI=)
18: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: HGxBLJwP40susG9Gyozs1ZhldTfOpAEYxHB8mYqENTo=)
19: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: 3sbGrzZxJUjW0073vRtzqaeSw5EYJ6VU2VkedGKjrwE=)
20: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: tgeej1L1oKyTCx21ba/ovq4/j/qADfAjDv/cbeKHpHQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 20:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:38:0e:f8:f7:1f:6c:cf:03:61:32:51:ee:f4:66:86:d6:94:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Apr 18 20:56:31 2026 GMT
Not After : Apr 21 21:56:31 2026 GMT
Subject: CN=9FF3FECF3F7A0C79AEE0EDAF7C27251D9D894148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:64:42:ff:2d:1e:c6:dd:a3:09:c8:10:15:
dc:61:3e:a0:3f:87:63:2e:37:fc:b3:80:69:24:37:
1b:0f:c7:9e:b1:b4:cf:bf:8b:23:27:a8:b9:5f:c9:
77:38:22:af:ae:ac:9c:62:4d:03:ef:5f:1e:b8:dc:
d1:25:c9:6f:1d:89:d3:88:01:cc:51:f4:fb:ee:ea:
6d:7c:d0:71:cc:b6:21:f1:71:90:57:8f:6e:e6:66:
69:0b:13:d7:37:d3:ff:6a:4a:e2:44:a8:5b:36:dd:
0d:9e:67:90:4c:a1:b6:ce:55:a9:cb:73:5b:e8:dd:
7c:2b:dd:ca:6e:cb:ba:ba:79:64:8a:ee:d8:20:aa:
ce:56:ca:25:47:2b:3f:65:c1:0f:79:4a:1b:6e:6c:
91:4b:1c:18:67:98:e6:2b:cc:cb:84:de:25:9b:f4:
88:55:7f:9f:51:a7:a7:99:35:fa:01:78:f7:17:e3:
ec:7d:1a:3f:05:73:c1:dc:fd:03:6e:36:d6:21:20:
3d:71:ba:93:c6:89:40:62:f2:9b:8f:9c:12:f8:9c:
64:71:69:58:3d:a6:5e:64:7b:a6:09:3c:2e:91:f4:
fc:93:d1:4d:26:7b:73:19:86:e8:5b:fc:98:52:99:
f0:8e:54:99:90:30:a0:51:2b:26:df:21:12:df:59:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F3:FE:CF:3F:7A:0C:79:AE:E0:ED:AF:7C:27:25:1D:9D:89:41:48
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:08:ac:81:c9:9e:19:0f:19:77:96:9f:8e:34:86:96:9d:
eb:86:6c:50:a1:9b:c5:18:1e:c6:d7:c6:aa:1c:18:af:86:a8:
6f:77:82:dd:97:68:d8:76:8e:12:ca:b3:a2:af:8b:58:7e:a0:
a4:90:07:b0:8b:ac:f0:57:82:2a:cc:1e:f6:3f:37:3d:5c:85:
4b:c0:88:4d:85:c4:1f:ea:16:43:1c:a8:fa:32:76:df:8f:9d:
d6:90:f3:b8:0e:b2:b3:33:71:d1:69:8a:4c:28:3d:be:4e:af:
a6:5f:90:29:9b:a2:ed:81:a7:fd:bb:c6:91:e4:d2:80:e1:3f:
8b:24:25:f7:b9:0a:24:15:fe:d6:54:a7:31:b6:7f:a6:99:aa:
0c:40:82:dd:3c:53:66:dc:90:9b:c9:44:06:75:e7:c1:34:73:
84:d3:11:7b:9c:b7:04:6b:fa:cb:07:d9:75:7f:10:36:87:bb:
c6:3c:07:cd:c2:ef:f9:13:42:68:01:c1:fc:4e:c8:ff:34:fd:
8b:1e:24:2e:78:2c:b0:46:2e:e7:a5:e0:90:70:76:ea:c8:c4:
24:09:5f:1e:8e:22:9e:db:5f:aa:2d:62:0f:9d:0d:d4:f0:a3:
97:12:1e:4c:de:12:25:0f:b5:08:0f:c7:21:5b:1d:83:04:7e:
73:37:6d:51
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXTgO+PcfbM8DYTJR7vRmhtaUCB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB
ODFBOTNCRTAeFw0yNjA0MTgyMDU2MzFaFw0yNjA0MjEyMTU2MzFaMDMxMTAvBgNV
BAMTKDlGRjNGRUNGM0Y3QTBDNzlBRUUwRURBRjdDMjcyNTFEOUQ4OTQxNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBmRC/y0ext2jCcgQFdxhPqA/
h2MuN/yzgGkkNxsPx56xtM+/iyMnqLlfyXc4Iq+urJxiTQPvXx643NElyW8didOI
AcxR9Pvu6m180HHMtiHxcZBXj27mZmkLE9c30/9qSuJEqFs23Q2eZ5BMobbOVanL
c1vo3Xwr3cpuy7q6eWSK7tggqs5WyiVHKz9lwQ95ShtubJFLHBhnmOYrzMuE3iWb
9IhVf59Rp6eZNfoBePcX4+x9Gj8Fc8Hc/QNuNtYhID1xupPGiUBi8puPnBL4nGRx
aVg9pl5ke6YJPC6R9PyT0U0me3MZhuhb/JhSmfCOVJmQMKBRKybfIRLfWUKPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn/P+zz96DHmu4O2vfCclHZ2JQUgwHwYDVR0j
BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD
RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB
OTNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZkN2VkZTEtM2ZkMC00NjI0LWJl
ZjgtMGU3M2U4NDk5NGJjLzAvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVG
MzhBODFBOTNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJYeCKyByZ4ZDxl3lp+ONIaWneuGbFChm8UY
HsbXxqocGK+GqG93gt2XaNh2jhLKs6Kvi1h+oKSQB7CLrPBXgirMHvY/Nz1chUvA
iE2FxB/qFkMcqPoydt+PndaQ87gOsrMzcdFpikwoPb5Or6ZfkCmbou2Bp/27xpHk
0oDhP4skJfe5CiQV/tZUpzG2f6aZqgxAgt08U2bckJvJRAZ158E0c4TTEXuctwRr
+ssH2XV/EDaHu8Y8B83C7/kTQmgBwfxOyP80/YseJC54LLBGLuel4JBwdurIxCQJ
Xx6OIp7bX6otYg+dDdTwo5cSHkzeEiUPtQgPxyFbHYMEfnM3bVE=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:58:53 2026 by rpki-client