
$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier: fwqk+dn+5U+O/Cucez9keDI1LP9tKG6J2c/0M/2u/I4=
Subject key identifier: 2E:AA:8B:61:03:0D:19:A5:C4:93:ED:BF:AF:87:E7:86:54:60:CB:00
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial: 4F70511A29A1AC46084CEEE6ED6B5DB247B254C5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number: 012A
Signing time: Fri 17 Apr 2026 04:40:46 +0000
Manifest this update: Fri 17 Apr 2026 04:35:46 +0000
Manifest next update: Mon 20 Apr 2026 14:57:46 +0000
Files and hashes: 1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=)
2: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: kN1ECRGiX3ENWTpzQjbd3IeoUpIfdsNRvJYswS74cSQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 14:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:70:51:1a:29:a1:ac:46:08:4c:ee:e6:ed:6b:5d:b2:47:b2:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Validity
Not Before: Apr 17 04:35:46 2026 GMT
Not After : Apr 20 14:57:46 2026 GMT
Subject: CN=2EAA8B61030D19A5C493EDBFAF87E7865460CB00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:0e:c0:bc:72:96:33:86:b8:73:de:33:0b:
29:cf:f1:2b:36:db:c4:26:b8:f9:e2:d0:2d:aa:3a:
89:c8:f5:14:2a:e6:6c:ed:db:40:66:1c:f0:ed:a3:
3b:0e:49:7c:71:4f:68:30:49:2f:ab:3f:b9:ae:1f:
3d:f3:4d:5c:b1:b5:3f:3f:e8:7e:35:2a:d5:13:60:
89:90:d8:2e:cd:08:6f:5d:9b:f3:38:8f:ed:2d:bc:
fb:5f:bb:ad:51:17:65:80:6c:81:89:7a:0f:d3:27:
b7:4d:04:61:71:45:fe:55:71:92:02:e4:2e:73:08:
3f:95:6c:5e:ff:a5:60:45:57:91:da:8f:dc:f0:e0:
e2:55:27:6f:36:78:dd:6f:5f:ff:a3:fc:34:4e:ad:
95:ba:38:6d:f5:55:f4:ad:ff:4a:ac:4e:05:ce:ba:
ea:79:05:39:bc:03:f4:c0:25:cc:ea:f5:8f:cc:4c:
88:96:0c:74:32:a6:27:93:8e:12:cf:4e:9e:49:13:
67:c0:1c:97:3d:8f:49:55:42:2c:8b:68:97:68:40:
e5:c4:f2:2e:05:c8:39:03:c3:5e:ba:b2:43:59:7c:
98:b4:28:09:90:91:22:ed:57:2a:b8:35:5e:d2:96:
6f:36:46:c8:2f:f4:75:34:f7:ce:89:b9:b7:a1:27:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:8B:61:03:0D:19:A5:C4:93:ED:BF:AF:87:E7:86:54:60:CB:00
X509v3 Authority Key Identifier:
keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8b:b6:1e:37:62:66:86:72:e6:a3:8c:4a:bc:1f:1f:8c:a1:
30:98:da:14:eb:c5:cf:2d:8e:8f:69:93:e2:5a:3c:fa:0a:0e:
5d:dd:7b:67:f4:0f:68:92:c7:36:9f:67:67:b3:c6:2e:6f:18:
92:0c:79:a2:4c:1a:fd:80:0b:e9:a6:77:56:47:79:94:d2:d8:
3f:10:45:ed:12:50:9b:4c:57:5d:50:6e:ea:af:77:90:c2:62:
8a:44:e3:7e:3c:55:54:83:4e:f1:3f:2e:f4:38:49:48:1c:e0:
6f:93:83:85:dc:fe:ad:66:ee:61:4d:f7:d8:35:70:93:67:ef:
6f:42:29:b6:6d:37:03:a9:7f:b4:df:4c:60:c6:10:b4:84:0e:
4b:0e:9c:a6:3c:1c:84:21:a9:0e:a3:45:6a:b6:05:b4:23:37:
43:bd:ec:9c:a4:c6:61:5d:d2:d5:92:a7:d9:3b:30:db:c0:21:
7f:0d:1b:e2:c3:19:a6:95:10:a0:11:14:85:5d:01:c6:13:6f:
49:d0:59:8d:78:14:ba:ec:ce:12:e1:c1:31:28:02:47:2a:5f:
7a:0d:a5:43:21:13:83:8e:92:23:77:a5:e5:a5:a7:29:61:13:
72:ba:99:61:f3:ab:7e:d8:73:89:4c:60:a6:d8:90:b5:db:0b:
2e:f8:cd:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT3BRGimhrEYITO7m7WtdskeyVMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3
MENFNkM2MTAeFw0yNjA0MTcwNDM1NDZaFw0yNjA0MjAxNDU3NDZaMDMxMTAvBgNV
BAMTKDJFQUE4QjYxMDMwRDE5QTVDNDkzRURCRkFGODdFNzg2NTQ2MENCMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGw7AvHKWM4a4c94zCynP8Ss2
28QmuPni0C2qOonI9RQq5mzt20BmHPDtozsOSXxxT2gwSS+rP7muHz3zTVyxtT8/
6H41KtUTYImQ2C7NCG9dm/M4j+0tvPtfu61RF2WAbIGJeg/TJ7dNBGFxRf5VcZIC
5C5zCD+VbF7/pWBFV5Haj9zw4OJVJ282eN1vX/+j/DROrZW6OG31VfSt/0qsTgXO
uup5BTm8A/TAJczq9Y/MTIiWDHQypieTjhLPTp5JE2fAHJc9j0lVQiyLaJdoQOXE
8i4FyDkDw166skNZfJi0KAmQkSLtVyq4NV7Slm82Rsgv9HU0986JubehJzIjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULqqLYQMNGaXEk+2/r4fnhlRgywAwHwYDVR0j
BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC
RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF
NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk
YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3
Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALmLth43YmaGcuajjEq8Hx+MoTCY2hTrxc8t
jo9pk+JaPPoKDl3de2f0D2iSxzafZ2ezxi5vGJIMeaJMGv2AC+mmd1ZHeZTS2D8Q
Re0SUJtMV11Qbuqvd5DCYopE4348VVSDTvE/LvQ4SUgc4G+Tg4Xc/q1m7mFN99g1
cJNn729CKbZtNwOpf7TfTGDGELSEDksOnKY8HIQhqQ6jRWq2BbQjN0O97JykxmFd
0tWSp9k7MNvAIX8NG+LDGaaVEKARFIVdAcYTb0nQWY14FLrszhLhwTEoAkcqX3oN
pUMhE4OOkiN3peWlpylhE3K6mWHzq37Yc4lMYKbYkLXbCy74zYU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:30 2026 by rpki-client