
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json)
Hash identifier: bZgakZ0f0BjOsCLDcdHqsHpos7lUfaufd65jdoU7hbU=
Subject key identifier: B3:52:7A:98:C4:DD:37:27:87:07:B0:6E:AD:C5:F9:46:F3:56:A9:CC
Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Certificate serial: 5386F8BB4291B9790B0BC091E05B488A737572E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
Manifest number: 46
Signing time: Sat 28 Feb 2026 18:01:11 +0000
Manifest this update: Sat 28 Feb 2026 17:56:11 +0000
Manifest next update: Wed 04 Mar 2026 01:38:11 +0000
Files and hashes: 1: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: nCqTJJhTNwChFbXfJZ6wQMHxdEQUuZULAhTsnqJ26uI=)
2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:86:f8:bb:42:91:b9:79:0b:0b:c0:91:e0:5b:48:8a:73:75:72:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Validity
Not Before: Feb 28 17:56:11 2026 GMT
Not After : Mar 4 01:38:11 2026 GMT
Subject: CN=B3527A98C4DD37278707B06EADC5F946F356A9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:be:39:b9:1f:cd:6f:0e:15:0a:af:6b:9d:
b6:dd:60:40:50:e5:f0:c0:b4:b6:95:51:77:6b:a2:
35:40:ce:a9:5a:40:ea:2b:c8:46:cc:0c:e7:3a:5d:
11:41:5c:94:96:af:f6:a1:fe:76:04:0c:c7:46:35:
be:d9:56:7a:72:12:6e:01:bb:4f:cf:71:07:8a:96:
e9:8b:c6:19:ad:ae:bb:b0:40:82:66:db:fb:fb:1b:
f9:f2:15:62:3e:3a:82:c4:fd:8c:70:05:9f:3a:ac:
e2:ab:b1:a9:11:9f:51:8f:e5:df:bb:d3:3f:77:a8:
61:72:4b:a2:49:4e:a5:0a:75:cd:f4:f3:66:4c:e2:
0c:2c:cd:92:a4:65:2b:ca:18:ab:66:f1:ee:00:c6:
1c:a3:87:55:fa:86:b5:aa:51:72:57:bc:ec:ce:2c:
aa:fa:65:bc:94:ff:97:bd:93:9c:92:94:f8:76:cd:
cd:88:d5:e9:cf:ee:fc:a5:7b:e5:3e:14:0c:fe:8a:
3f:c4:43:f6:9e:c3:32:ce:e1:0a:02:66:de:27:9b:
d4:c4:68:da:6e:e1:9b:1d:6a:3c:9e:c5:04:4c:a8:
20:7d:c7:ad:68:76:fa:88:cb:cc:cd:49:1c:46:58:
b2:ac:7a:9e:11:85:83:f4:77:be:d6:71:63:3b:cf:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:7A:98:C4:DD:37:27:87:07:B0:6E:AD:C5:F9:46:F3:56:A9:CC
X509v3 Authority Key Identifier:
keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:58:88:6f:5f:7d:43:0d:1a:22:ae:fa:6d:cc:bc:a9:02:b9:
7f:f0:28:a4:86:da:87:7d:d3:23:2b:7e:58:ee:31:1f:ad:8a:
2b:4b:d8:f0:3d:1d:50:79:3e:4d:ee:da:65:ef:d1:24:07:09:
7a:9b:d4:53:73:79:c4:70:92:5f:25:5b:c9:24:38:c1:ef:72:
c4:7b:88:1d:90:2e:f7:61:f5:d1:05:d9:9f:d7:61:6b:df:a5:
13:12:d8:6d:10:49:ac:92:9a:8f:2c:70:ba:bc:48:53:35:bf:
57:11:00:b1:b7:66:46:3f:46:10:ce:71:74:87:c3:ae:90:ca:
89:b9:a5:0f:4f:ed:c9:33:99:25:7b:08:be:1f:4e:0d:82:8b:
90:4e:ad:a6:db:d8:82:18:b7:0c:06:09:f4:12:fe:d4:17:3c:
ff:5f:19:28:18:c7:57:cc:9a:bd:0c:4e:02:27:79:77:49:de:
e5:e3:17:67:9f:62:cc:30:fc:7b:b8:76:8a:39:11:51:72:a1:
06:bf:2d:3a:60:96:73:e3:13:a2:95:a1:98:46:a1:da:a6:3b:
ff:38:83:42:34:28:9e:20:c2:65:28:12:b1:28:bd:18:55:64:
27:72:be:04:23:72:d3:82:96:dd:db:07:ab:ea:0d:b0:9f:fc:
7b:c9:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:51 2026 by rpki-client