
$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft
File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json)
Hash identifier: 6TDBlx1XpeBQW/9wlqqCMc6QVVnUfUoD0Ytv/DMNP0U=
Subject key identifier: A1:4D:15:72:14:F1:88:91:6E:EA:FE:AF:2B:1A:E6:86:82:BB:66:DD
Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA
Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA
Certificate serial: 3C291461AC8971060E0F0A65645BF21AF6497234
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft
Manifest number: 011B
Signing time: Thu 16 Apr 2026 21:02:12 +0000
Manifest this update: Thu 16 Apr 2026 20:57:12 +0000
Manifest next update: Sun 19 Apr 2026 23:12:12 +0000
Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=)
2: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: rO8c+nr1a/a4hRqn8TtXuRwYV1M29NDpjqKiVZJdUt0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl
rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:29:14:61:ac:89:71:06:0e:0f:0a:65:64:5b:f2:1a:f6:49:72:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA
Validity
Not Before: Apr 16 20:57:12 2026 GMT
Not After : Apr 19 23:12:12 2026 GMT
Subject: CN=A14D157214F188916EEAFEAF2B1AE68682BB66DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:7f:49:de:11:68:95:d9:ad:34:73:71:42:
df:ab:d5:34:5c:6f:9e:96:ae:05:f9:24:24:90:f7:
69:32:89:0d:75:8f:f8:ba:37:5d:5b:ab:a3:4d:ee:
6a:ff:f6:22:eb:48:09:b5:57:b2:41:7f:29:23:b0:
1b:0c:2a:4d:dc:62:f5:29:67:32:5f:b6:84:fb:0c:
aa:60:36:b6:cc:61:a2:17:43:cf:d2:27:13:bb:5a:
27:46:1b:be:8c:66:d9:47:ac:75:8f:fa:f9:2c:81:
d3:9f:34:85:05:6e:bf:08:51:9b:2e:ba:e1:bc:d9:
27:44:74:e8:18:8a:6c:6d:20:e7:46:1f:97:06:49:
5a:68:24:28:d5:36:b2:6c:29:d2:a2:12:64:b2:b1:
80:ee:f1:fe:b7:f2:d8:5e:da:27:72:2d:0a:69:c4:
1b:86:ef:a9:ff:d2:cb:c8:b5:91:b2:f0:e8:d4:6e:
5b:00:50:fa:4e:3b:93:b3:4a:39:05:d2:61:af:3a:
d4:92:3f:b4:72:87:b9:ee:38:02:03:c6:5c:a7:60:
4d:99:6b:8e:f9:0f:b1:63:5a:c9:cb:c6:78:48:7c:
31:ec:52:a7:4c:b6:12:23:c8:46:ad:be:4e:98:f4:
c4:9b:36:25:52:80:21:13:78:bf:40:41:a4:d5:7e:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:15:72:14:F1:88:91:6E:EA:FE:AF:2B:1A:E6:86:82:BB:66:DD
X509v3 Authority Key Identifier:
keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:85:a3:45:07:ac:39:8f:4a:9d:a3:85:f7:6e:82:59:54:ab:
91:c2:33:08:ed:3c:bf:27:09:28:ed:4c:fa:15:39:e7:96:37:
59:cf:02:f8:03:75:cc:dc:27:84:70:c9:e9:47:68:7c:2c:e4:
8f:66:79:17:62:c3:be:23:47:d6:ae:5c:92:9a:ba:55:a0:ac:
c8:ee:c2:27:42:76:9f:39:6e:c2:0b:fc:13:9e:57:d2:58:f1:
ee:cf:9c:2f:24:d6:78:37:22:be:fa:d2:3f:d6:09:e7:50:12:
08:95:7f:79:d1:09:ca:f8:e2:28:cf:7a:02:a3:44:28:6d:6f:
e2:b3:2f:ab:05:b5:d1:cc:ae:10:d3:e1:4b:45:76:48:c9:07:
2c:26:3c:66:8c:09:6f:59:d1:90:fc:62:a6:e0:1d:63:24:2c:
fd:dc:57:65:4a:4a:a0:9e:ab:af:a5:bc:d3:62:5a:6f:be:59:
5c:28:03:db:c8:d4:91:f9:d8:ff:fe:c2:0b:6a:e4:14:57:3f:
d5:e4:04:18:a6:51:60:b1:c7:8c:88:d6:5b:82:e7:89:5d:11:
d0:58:f9:4d:34:b9:30:6a:04:dc:e1:01:01:32:47:f0:8a:99:
ad:70:5d:b8:dd:14:71:b9:88:26:54:81:04:1e:c3:ba:63:04:
b5:f6:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:00 2026 by rpki-client