
$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier: e2W6fDzAMm+AidtcwUjlSM5wY3dJFb9i7i4O618GALI=
Subject key identifier: 5B:F4:84:B4:D7:F7:9B:73:EB:99:36:E6:FA:71:66:00:FF:F4:9B:14
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial: 303F5BC72E0FC26E3FC83B395143DA79F24A1F43
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number: 0115
Signing time: Sun 01 Mar 2026 08:50:44 +0000
Manifest this update: Sun 01 Mar 2026 08:45:44 +0000
Manifest next update: Wed 04 Mar 2026 13:45:44 +0000
Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: pKTXqXOE3xGuDpGeShNjyE7lRUM1XhvXIapS0ZOTcSs=)
2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 13:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3f:5b:c7:2e:0f:c2:6e:3f:c8:3b:39:51:43:da:79:f2:4a:1f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Validity
Not Before: Mar 1 08:45:44 2026 GMT
Not After : Mar 4 13:45:44 2026 GMT
Subject: CN=5BF484B4D7F79B73EB9936E6FA716600FFF49B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:32:11:b7:d2:97:04:e3:64:a6:c7:56:c3:
33:1c:b6:4a:09:c8:cd:93:50:87:3a:79:37:10:fe:
c5:0f:87:0c:46:37:e3:2c:3f:d8:0c:78:d1:17:a2:
3d:37:ec:05:42:e5:11:d1:50:ca:20:af:37:d1:9c:
34:85:11:9c:06:57:3e:a0:ff:e8:a3:cc:e4:10:81:
2f:c7:e9:e2:0c:8c:38:23:4d:46:8c:97:0f:90:c5:
3f:6c:49:f3:ac:ee:d3:da:72:49:35:b1:43:7c:a1:
30:eb:98:9e:b0:55:fe:23:6c:70:50:1c:0c:3b:c9:
ed:e0:06:20:17:bc:a9:15:78:ff:93:14:5b:0e:f5:
99:84:a4:66:12:ee:e6:c3:bb:4d:d9:c5:6e:81:68:
23:15:16:9a:82:f4:c1:af:7c:45:e7:90:e7:90:ab:
42:41:0c:27:15:4f:55:77:62:ad:b6:22:50:74:71:
cd:2e:58:32:82:cb:1b:77:f0:53:38:fb:ca:c6:5b:
55:45:01:94:0d:cb:2c:a3:06:24:c8:08:2c:c2:a1:
f8:48:e5:2a:fb:46:60:08:9d:6e:42:a9:d9:ec:37:
21:7b:61:ad:10:aa:7b:07:67:97:19:ba:6f:7d:4e:
fe:1a:3f:31:10:e6:1c:ba:37:81:88:9a:09:c7:d2:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F4:84:B4:D7:F7:9B:73:EB:99:36:E6:FA:71:66:00:FF:F4:9B:14
X509v3 Authority Key Identifier:
keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:5e:b7:1b:90:aa:04:7d:94:04:3b:87:05:b6:35:e4:33:
13:97:cb:93:c1:89:99:5a:a8:bb:ff:1c:a7:26:33:97:78:0f:
cb:0f:9a:d2:53:a1:2a:4c:73:a8:f6:bb:d0:1e:96:86:a1:b0:
21:42:36:b6:8e:93:a8:eb:33:05:1e:2d:80:8d:d3:4c:b6:86:
87:6d:a5:65:c4:f7:76:71:90:17:87:b9:55:27:d5:e5:a7:59:
cf:5e:74:a2:fc:eb:e7:22:6b:7c:67:60:52:d7:b7:db:98:18:
e1:d9:2c:07:9a:b5:17:37:96:be:6b:ab:64:a8:d6:d3:67:02:
5c:c4:68:47:16:3e:df:bb:d3:55:cb:1e:a0:46:30:de:92:dd:
27:f3:67:72:2b:f2:9f:e0:8a:d0:eb:58:74:b9:0a:cc:11:90:
e7:66:28:f9:c8:20:cd:d3:75:1b:9d:2a:47:9a:f6:70:4e:1a:
46:a4:30:a1:e0:8d:3e:1d:93:a2:43:f6:f3:c3:bd:99:17:6b:
f5:cf:f0:6e:2c:e6:5d:05:94:b9:07:c0:1a:53:0b:19:da:09:
5c:c8:27:9e:20:ef:5b:f0:36:87:ca:7f:4b:06:18:85:9b:bf:
03:7a:a2:a2:d7:ce:66:4d:7e:74:53:69:81:f9:1a:c7:75:dc:
f4:97:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:44:51 2026 by rpki-client