
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json)
Hash identifier: Jg6w0EO14Q9spDoT/yvXnoJ3r2KGzxG2uVpig+AmmbI=
Subject key identifier: 9F:9E:4F:4C:EF:77:5B:1E:28:28:21:B3:1A:08:F3:A6:E1:C6:BA:79
Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Certificate serial: 789B4BC09A4F765A9EE7E5FB943A3F30E042D3F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
Manifest number: 0291
Signing time: Sat 28 Feb 2026 12:32:13 +0000
Manifest this update: Sat 28 Feb 2026 12:27:13 +0000
Manifest next update: Tue 03 Mar 2026 13:47:13 +0000
Files and hashes: 1: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: SIPrm92GAS/bblC2+5/1FONI4JupSh82w+f83yW31Zw=)
2: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: y+8t5UUINdTPUUm1lJ0KZGSga3Yl3uHzqVqQyt9zoE8=)
3: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: 3d+mx0+iwzqvKG0kVcKkiTDes8ajUjlfaMyAG4o8aKI=)
4: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: TgHgsu6QYqZ5L3n6Lalu5pdAbtV44ycXni/ET0cNJvg=)
5: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: eLmTnlusz2D6JkNd6vhEC+Aix0imNHgU5omxSQWEZDw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9b:4b:c0:9a:4f:76:5a:9e:e7:e5:fb:94:3a:3f:30:e0:42:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Validity
Not Before: Feb 28 12:27:13 2026 GMT
Not After : Mar 3 13:47:13 2026 GMT
Subject: CN=9F9E4F4CEF775B1E282821B31A08F3A6E1C6BA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:11:c2:c9:9e:32:16:00:f9:42:6f:03:e0:
79:b3:34:cf:7d:05:2e:4d:6f:21:4c:5a:e1:01:96:
80:88:a3:0f:2f:36:8e:c3:ff:f8:62:78:40:55:75:
dc:da:b7:7b:5f:42:56:34:ac:5b:20:00:73:e8:cd:
ba:63:94:b2:61:44:50:e9:15:93:8e:b4:7c:1a:29:
4d:53:ee:d7:33:b2:fa:10:63:56:30:d7:f6:87:ac:
07:ae:83:94:b7:ac:f6:a9:8b:b6:e2:bc:9d:b8:53:
a5:eb:5e:58:1a:55:57:1f:8f:82:6b:39:b9:48:79:
bd:d2:36:3f:ff:0a:11:1e:36:54:aa:c8:c2:aa:a5:
b9:ca:60:8a:98:1c:51:ad:8f:7f:05:9f:c2:63:ba:
35:25:33:b1:e1:d9:23:7c:85:b3:e7:b0:9e:a6:15:
55:fa:f3:88:63:ca:77:3e:dd:01:3f:5b:40:a6:ee:
78:cd:56:9a:54:c2:d7:5c:a1:5a:92:f0:64:e4:a2:
63:3d:17:7f:a0:e5:2c:42:69:4d:70:01:28:52:a1:
d7:8d:ad:20:94:45:eb:eb:79:03:f7:ec:7e:a6:58:
cc:ed:3e:e7:9e:1a:95:76:99:c9:8c:a1:fe:f8:f7:
9e:64:64:a1:59:b0:8a:aa:2d:e9:dc:af:1c:bb:dd:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9E:4F:4C:EF:77:5B:1E:28:28:21:B3:1A:08:F3:A6:E1:C6:BA:79
X509v3 Authority Key Identifier:
keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:50:7f:6e:0a:77:1b:3a:c6:54:30:32:1e:0b:3c:99:39:ea:
75:4a:a6:e4:59:73:0b:a3:de:8b:dc:12:ab:83:0c:b4:fc:1d:
dc:21:23:a0:28:29:da:27:ad:66:fb:e4:66:a8:f1:dc:8c:7f:
ae:52:87:7e:dd:b8:46:ce:2d:85:c6:55:a6:da:25:1d:a2:6f:
58:17:bb:be:67:bb:2e:e3:e4:e8:8a:2d:d5:89:e1:d2:1c:f7:
c9:86:35:70:a9:35:d2:b0:e5:20:a9:6e:57:85:42:ec:1d:37:
42:31:d4:29:8a:77:1c:cd:72:3b:09:c2:50:95:12:73:82:c3:
dc:d0:2b:cb:16:2a:11:85:c4:6f:91:77:f5:45:b8:7e:94:6c:
13:42:a9:67:b4:9f:48:5d:77:35:07:6a:66:75:af:9a:77:42:
af:11:58:cf:27:f3:8a:00:a5:de:41:82:31:f1:99:fd:0c:36:
0b:24:fe:0b:21:6a:66:e5:bd:5c:e5:e3:6b:e0:55:3e:6b:a8:
4c:4c:4e:b6:ae:e5:3f:f5:79:24:de:72:8d:7e:4a:3c:f3:40:
53:61:11:67:67:77:3b:42:65:2c:e0:b3:b8:0c:90:e2:48:b5:
1d:06:fa:cb:d9:de:32:bb:ff:b6:d3:a2:5b:5e:71:d9:30:71:
95:8b:ec:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeJtLwJpPdlqe5+X7lDo/MOBC0/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1
RThFMjIwQjAeFw0yNjAyMjgxMjI3MTNaFw0yNjAzMDMxMzQ3MTNaMDMxMTAvBgNV
BAMTKDlGOUU0RjRDRUY3NzVCMUUyODI4MjFCMzFBMDhGM0E2RTFDNkJBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgxHCyZ4yFgD5Qm8D4HmzNM99
BS5NbyFMWuEBloCIow8vNo7D//hieEBVddzat3tfQlY0rFsgAHPozbpjlLJhRFDp
FZOOtHwaKU1T7tczsvoQY1Yw1/aHrAeug5S3rPapi7bivJ24U6XrXlgaVVcfj4Jr
OblIeb3SNj//ChEeNlSqyMKqpbnKYIqYHFGtj38Fn8JjujUlM7Hh2SN8hbPnsJ6m
FVX684hjync+3QE/W0Cm7njNVppUwtdcoVqS8GTkomM9F3+g5SxCaU1wAShSodeN
rSCURevreQP37H6mWMztPueeGpV2mcmMof74955kZKFZsIqqLencrxy73ZVVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn55PTO93Wx4oKCGzGgjzpuHGunkwHwYDVR0j
BBgwFoAU9cwI8c0LlFedT3c87lq/vV6OIgswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDc5NGQzNi02OWY4LTQ0MDYtYmY5Zi0xMjJkZGQxN2Y0NTAvMC9GNUNDMDhGMUNE
MEI5NDU3OUQ0Rjc3M0NFRTVBQkZCRDVFOEUyMjBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJGQkQ1RThF
MjIwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm
OWYtMTIyZGRkMTdmNDUwLzAvRjVDQzA4RjFDRDBCOTQ1NzlENEY3NzNDRUU1QUJG
QkQ1RThFMjIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKpQf24Kdxs6xlQwMh4LPJk56nVKpuRZcwuj
3ovcEquDDLT8HdwhI6AoKdonrWb75Gao8dyMf65Sh37duEbOLYXGVabaJR2ib1gX
u75nuy7j5OiKLdWJ4dIc98mGNXCpNdKw5SCpbleFQuwdN0Ix1CmKdxzNcjsJwlCV
EnOCw9zQK8sWKhGFxG+Rd/VFuH6UbBNCqWe0n0hddzUHamZ1r5p3Qq8RWM8n84oA
pd5BgjHxmf0MNgsk/gshamblvVzl42vgVT5rqExMTrau5T/1eSTeco1+SjzzQFNh
EWdndztCZSzgs7gMkOJItR0G+svZ3jK7/7bToltecdkwcZWL7Hc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:55 2026 by rpki-client