
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json)
Hash identifier: gKhZk14mvSWNu3ciECLhewMGV3Jmp1NCbXelqRGaYiw=
Subject key identifier: E0:08:22:53:4F:34:06:87:D6:CE:45:56:A2:FE:E9:72:C6:C4:FC:F5
Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Certificate serial: 6324973577902F1171BDF5DFADC1585893935ACB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
Manifest number: 016C
Signing time: Sat 28 Feb 2026 21:20:54 +0000
Manifest this update: Sat 28 Feb 2026 21:15:54 +0000
Manifest next update: Wed 04 Mar 2026 05:17:54 +0000
Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=)
2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: L/vch4XJaJeseskACAQ7UUweGhNCRbchRB4DQESGuCs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:24:97:35:77:90:2f:11:71:bd:f5:df:ad:c1:58:58:93:93:5a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Validity
Not Before: Feb 28 21:15:54 2026 GMT
Not After : Mar 4 05:17:54 2026 GMT
Subject: CN=E00822534F340687D6CE4556A2FEE972C6C4FCF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fc:07:04:0d:b2:c1:03:90:d4:52:88:90:f9:
b2:fb:8b:53:47:48:a7:cd:60:3c:8b:f8:8a:dd:ab:
53:d0:aa:a6:39:bf:55:bd:a3:72:5b:42:71:e9:8a:
b0:4a:0b:10:49:cf:6a:5a:b5:0a:bc:8e:c0:05:5b:
5c:76:7f:19:6b:1c:74:c5:b0:68:14:0b:44:db:90:
7f:ec:16:48:1e:a7:29:ed:d8:ef:e5:d0:bc:b4:a7:
83:8d:ae:99:d1:a4:08:df:e7:14:8d:10:a2:84:e4:
7a:03:56:d8:3c:ce:7c:c6:1d:47:af:5b:96:61:ed:
ce:55:40:56:02:9b:75:77:ea:1b:9b:d7:8c:ed:84:
e9:09:59:02:17:43:60:4f:9e:88:58:21:65:ff:64:
7b:d9:88:bc:c2:ea:76:00:73:86:70:c7:80:3f:64:
74:d3:9a:57:fe:6e:f1:60:76:bd:18:97:bb:9a:30:
a4:f7:29:d9:6e:b6:a0:71:78:0c:c6:34:a1:87:2e:
b5:b8:dd:9c:07:a8:a2:de:1d:00:ae:84:fc:ce:3a:
e5:43:13:7c:be:f4:b0:69:f1:76:ca:9b:27:90:43:
82:4d:ec:6b:3c:71:b0:c9:95:c1:53:54:fa:f2:ae:
85:a6:b3:ae:59:f5:bb:2b:8a:39:fe:0a:41:18:fb:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:22:53:4F:34:06:87:D6:CE:45:56:A2:FE:E9:72:C6:C4:FC:F5
X509v3 Authority Key Identifier:
keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e7:f4:cb:c1:6d:33:88:37:dd:a6:ae:36:52:a3:31:d1:2a:
ae:04:a2:b0:60:15:a9:8f:c2:50:c3:b6:3d:93:04:1b:9c:d3:
27:6c:0c:36:9a:69:17:e8:40:ea:1f:eb:83:85:bb:ff:6b:78:
66:7f:97:43:79:91:91:49:1c:cc:3b:86:57:cf:e2:d5:82:a7:
d8:cf:0a:fe:d4:57:6c:df:de:37:62:3c:9b:c7:70:84:b0:d6:
16:84:fb:14:c6:05:1c:40:48:2e:ce:0f:9a:00:91:8c:a0:bb:
2e:4a:ee:2b:e2:86:22:fa:6b:5e:8c:07:05:54:2c:67:21:f9:
ae:2a:4e:b9:a9:9e:39:af:ba:b0:88:98:c4:e7:8c:10:f3:3b:
25:f1:a4:3b:ff:b9:84:b3:6c:3e:df:df:64:65:e2:93:27:3d:
7a:9e:df:fa:cd:bc:2b:28:36:28:e3:21:b3:49:14:9c:5f:63:
fd:b3:e3:f2:90:91:75:3d:05:f9:41:59:7d:f0:31:a1:97:36:
db:d8:6b:c3:cd:fe:87:cc:91:d5:22:36:60:54:36:f4:dd:48:
ed:c7:23:bd:32:c6:3a:7c:46:90:87:81:78:44:51:45:de:6d:
b3:a4:9f:94:55:e7:02:6d:0a:c1:a0:6c:43:2b:c5:52:d7:37:
bc:4b:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:27 2026 by rpki-client