
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json)
Hash identifier: 7w+eUJw5fAMnIq5sh9+etqPSD1866cBlZgQSrkmk77M=
Subject key identifier: 43:5A:45:AA:F6:C6:86:FD:03:D5:71:05:5E:FF:17:1D:2E:56:EB:30
Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Certificate serial: 54AC601B07D423B6A995DD3E57EA0030781FE7EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
Manifest number: 0182
Signing time: Sat 18 Apr 2026 13:50:53 +0000
Manifest this update: Sat 18 Apr 2026 13:45:53 +0000
Manifest next update: Tue 21 Apr 2026 19:07:53 +0000
Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=)
2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: ZAuan5zxQw/YKSKOnV5f1pDqCiLESSmVKIDGYIHKLF0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 19:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ac:60:1b:07:d4:23:b6:a9:95:dd:3e:57:ea:00:30:78:1f:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Validity
Not Before: Apr 18 13:45:53 2026 GMT
Not After : Apr 21 19:07:53 2026 GMT
Subject: CN=435A45AAF6C686FD03D571055EFF171D2E56EB30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:f5:12:3b:f8:20:ce:54:a7:19:67:dc:b2:
e8:20:74:37:73:d0:b0:e5:2b:0f:6a:a4:34:fc:6c:
81:52:bc:5a:be:b3:30:02:20:f4:d1:d0:65:7c:d7:
b1:6b:e0:37:55:22:11:b7:8f:f2:cc:85:2a:6f:4e:
75:a1:ec:5f:e4:64:76:f9:86:4e:af:34:bb:84:2d:
a3:38:4e:eb:d4:d0:98:93:70:45:f8:6b:86:5c:10:
56:68:7d:2d:06:19:b0:6e:3f:d6:6a:d8:af:3c:8a:
a2:e3:2f:53:60:bb:e3:f1:04:e6:df:d0:35:b9:3a:
5a:c4:f0:48:81:a6:fe:e1:1d:fc:10:7e:34:9d:f4:
e5:a7:21:30:be:7c:6d:b1:b4:70:34:0b:30:1a:43:
e2:05:b2:09:b4:0e:72:a3:98:16:13:d0:3b:80:dc:
a1:d3:7d:35:94:fb:51:b2:d9:eb:c4:90:d9:dd:fd:
ef:a2:30:6f:0d:c6:78:4f:4e:01:9b:6d:04:36:7a:
c2:47:8a:d5:74:61:2b:fd:fc:67:75:e4:f9:b4:05:
eb:a6:ee:46:36:ae:2c:6f:85:60:73:e9:02:95:59:
59:75:02:83:ae:69:46:3c:e4:88:33:cf:55:16:7f:
f4:0e:30:2a:e4:32:27:d6:29:0b:3a:6e:09:12:b9:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5A:45:AA:F6:C6:86:FD:03:D5:71:05:5E:FF:17:1D:2E:56:EB:30
X509v3 Authority Key Identifier:
keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:45:9e:d5:1b:8b:72:71:c4:92:30:11:c4:ac:ca:6f:1f:
58:bb:5b:75:25:f6:aa:d5:07:65:a2:39:ef:c7:cf:0d:a7:ea:
4c:a8:47:46:aa:c2:b6:08:e6:2b:7c:a3:d5:c6:18:8a:20:5a:
3a:2c:8e:ce:ae:c9:1e:85:66:9a:db:89:c9:1e:5b:25:d9:b7:
a6:51:a7:f8:66:b3:c5:f1:95:60:94:c9:6f:07:73:fa:77:4d:
84:ee:67:59:e5:da:96:86:77:a6:0a:6c:99:d6:b9:32:41:7b:
55:01:a6:cc:46:db:47:03:6c:1e:ef:58:d0:e5:1c:0e:2c:83:
80:7a:1a:9d:f4:56:b2:9f:4a:e0:5c:a7:53:86:9b:99:74:13:
98:b3:15:a0:81:4d:7b:9e:55:23:3f:19:7c:80:1a:b6:85:b2:
1d:47:73:25:89:51:29:58:6b:a9:83:50:ce:a7:67:3d:4b:54:
40:5d:11:15:ad:2a:45:c6:42:d3:bd:05:39:10:10:31:fb:f2:
4f:e4:b4:c3:e5:52:ac:bf:e2:c1:2d:70:56:0b:3f:c5:58:7e:
b5:af:fd:61:f9:fa:fb:56:22:ce:d9:ef:5f:d0:4e:5c:0a:cb:
a7:5a:70:09:83:26:c2:72:f7:ae:4b:3b:b2:65:e8:7a:01:02:
dd:06:3e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:33 2026 by rpki-client