
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
File: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft (raw, json)
Hash identifier: EHXhtNT0rFUv0eoZoYbEfZEKd1oWmb5W8iIC6QnxRcc=
Subject key identifier: 06:F0:63:96:E6:DF:A1:CA:9F:5F:F4:FF:0A:BE:3F:A2:5B:12:32:42
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 7B1E745772EEDAD15DECD16FC3FBB20378E0DCD7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
Manifest number: 04DC
Signing time: Sat 28 Feb 2026 15:21:29 +0000
Manifest this update: Sat 28 Feb 2026 15:16:29 +0000
Manifest next update: Tue 03 Mar 2026 21:49:29 +0000
Files and hashes: 1: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: hUSefMFAZSv+SA3wPW8iCnypYrFgNGsQ492Jx7YTC9s=)
2: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: tSvzNHHOTLE+PeD8SAArmYqhO7Ztwcuk/62pX8Gu/y0=)
3: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: k6Z1cqOikqx8t9RPh+24QqZnUDFGexk4c6jfFeIucPQ=)
4: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: htuRYgwO+/oesGX5fEx8u0E0zBo0A2TVpj6idfUe6I4=)
5: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: pWG6S1U7mazV8YnSvTsXbW1HfQiM8AMh4bxaqVSo3rk=)
6: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: f4HuOcLxZFUEjT9VvTe4bqIT2DldLAxhqn5BGEuGaVY=)
7: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: CHuhT91L4Bx2gvkmrXL92lkeo0HaZ7kmUtg30YZ0MWM=)
8: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: ONf62+DvPOIB+a7e+YLFywaVigksQeK89X9Q/CSQVX4=)
9: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: E2mbQLtIdlxnYM18Po7s4O6v53R2Qoc6GrMKhL2r4OI=)
10: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: osu6cgVTsajhQgGRr72GUTVIcDtvbcTR6pfscBo/Vjg=)
11: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl (hash: K/nykaOHes659n3KPGsWmoNne2lgOwWEe+QIsjT/Cpo=)
12: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: tDG6Iti0PLnRCu0mbkQzT0b2dqDqUbKctSFPSn5Mn7g=)
13: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: IFLXJKN/cIbd/Oh+HOkULz+7XgZ+889cBvLbuXP+Xf8=)
14: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 1JMzXaJrugo1xCZjzMePjdBBw5qjt3/pxwhlGnC/exU=)
15: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: EILyPmlWJ7Ald971q91eFzzx7IL4/UbfGOvQ+dEFrSA=)
16: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: SDN3qm6IB8N9HF40taceNvsGv3NpAGXMiVjPo6QgiNc=)
17: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: Gz+C+7FnVXoz+0qojAP+rNq+YbCJXPtNpRa9xBnME7I=)
18: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: f6hlVhcf22KoU870LdZr8ofD9JQqnnfyvKLr6j1Qgic=)
19: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: AHvcTCMLEy/XIp7laYrrKnghYH6iwtgODIRCAU7uthM=)
20: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: bZM4rUbr/5eo/XLmWgfcXg1DbTPNYjhGuHArrlKmdos=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1e:74:57:72:ee:da:d1:5d:ec:d1:6f:c3:fb:b2:03:78:e0:dc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Feb 28 15:16:29 2026 GMT
Not After : Mar 3 21:49:29 2026 GMT
Subject: CN=06F06396E6DFA1CA9F5FF4FF0ABE3FA25B123242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:75:a0:06:7e:93:b4:71:d7:fe:0f:28:81:
c7:a8:e1:81:bb:7b:fa:84:a2:5c:42:cd:8b:8b:7c:
9c:c2:73:4e:b0:9d:9a:38:15:72:89:5f:7b:e6:59:
ce:0c:45:af:31:a8:b5:72:62:69:0b:36:ad:bd:93:
f5:e5:41:74:49:ef:88:4a:e0:8f:91:a6:57:24:b3:
5f:f6:85:5e:1d:f1:3e:df:bc:c2:d1:3b:85:d1:74:
dd:3d:9b:84:c6:1a:a3:51:56:31:61:3b:73:e1:3e:
13:83:ad:44:18:1b:bb:2f:5c:ef:53:87:12:e0:ea:
82:1c:64:31:2b:09:4a:40:0c:b0:45:42:c0:5f:a1:
a7:1b:45:f4:cd:f3:ef:dc:e7:f2:7a:c6:73:d8:a2:
a0:5d:19:8c:80:5a:ba:1f:08:34:d4:4b:ad:3e:3d:
b3:7e:4f:e7:32:37:6e:70:09:f1:fd:98:5b:28:c5:
e9:56:d3:f7:5d:63:0d:07:31:ac:d5:3b:b5:0f:41:
a5:73:c5:de:61:77:e8:9b:80:94:37:6b:45:89:cd:
17:f6:b6:02:eb:c4:23:a8:21:eb:35:a4:31:89:e4:
f7:60:11:67:1c:8d:38:ff:ac:f0:ac:4d:d7:a4:ff:
9a:38:ea:c1:e2:ec:69:57:68:67:c7:45:26:36:1f:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:63:96:E6:DF:A1:CA:9F:5F:F4:FF:0A:BE:3F:A2:5B:12:32:42
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:43:b7:8a:cb:ca:c5:39:91:74:ce:74:d1:dc:8e:e8:69:7e:
97:66:23:dc:d0:bd:92:e8:72:e1:d0:3e:a1:2b:fd:b6:fc:0e:
47:ca:04:bb:09:61:52:fb:43:77:36:bb:e7:b5:68:3c:09:13:
74:f9:10:63:53:7e:af:01:44:a7:4e:7e:73:cc:5f:73:36:f8:
48:e5:23:6a:62:24:4a:9e:95:69:cf:47:31:77:2f:a7:dd:ec:
22:8e:8c:9c:ad:ad:96:0a:ff:e8:53:df:77:b2:2d:1e:f2:5b:
36:85:79:78:83:d0:80:73:95:2b:a7:f5:03:36:47:38:55:c1:
c2:2a:b3:fe:e1:55:5f:a6:d2:e9:58:bc:5c:87:e8:32:66:e1:
ac:e1:ff:5b:6a:64:ef:d7:f9:cb:a0:c4:d9:9a:bf:3d:b2:81:
a6:24:a6:e6:a1:80:09:66:17:1e:72:b6:c7:a8:8d:61:5a:f8:
2d:84:88:c0:ba:c1:2f:c7:67:82:66:71:40:a7:8e:5f:7f:55:
70:ce:66:20:c8:1d:cb:fb:c7:d7:c7:8c:0b:2e:ee:a7:4f:51:
8f:fe:6c:b7:ee:b5:85:d2:b9:45:48:c5:a5:3f:23:f9:65:f5:
5e:50:f6:b3:6e:12:fc:fa:d7:44:aa:26:d1:5f:5e:63:1d:ee:
7a:d6:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:32 2026 by rpki-client