
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft
File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json)
Hash identifier: 8/od2l2+0CFrFraslJ/TicCvHnX3Jv4AHreSwtq9GFY=
Subject key identifier: 98:00:4E:03:59:0A:1A:F7:C3:FA:CC:FA:AD:9B:85:B4:72:52:57:B8
Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB
Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB
Certificate serial: 44C9D9023055D836D7272DD5F3277F70A3C5D820
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft
Manifest number: 0146
Signing time: Thu 16 Apr 2026 09:51:52 +0000
Manifest this update: Thu 16 Apr 2026 09:46:52 +0000
Manifest next update: Sun 19 Apr 2026 13:21:52 +0000
Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: cUJ2LcaCK5fMJ5oPSD0lydZe8lLuDbk6QpJ4h/kJFOY=)
2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: X7ETbrXLlsb1gErfsePddYhE1xdzeHTt/6mH7d4q/24=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl
rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c9:d9:02:30:55:d8:36:d7:27:2d:d5:f3:27:7f:70:a3:c5:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB
Validity
Not Before: Apr 16 09:46:52 2026 GMT
Not After : Apr 19 13:21:52 2026 GMT
Subject: CN=98004E03590A1AF7C3FACCFAAD9B85B4725257B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:ca:60:50:aa:5c:55:1d:30:36:4c:3a:5d:
6a:1b:70:d5:af:52:bf:4d:fa:4f:17:2f:26:69:7b:
f1:bf:59:eb:a4:b2:69:ac:50:c1:db:29:45:71:e3:
4d:9e:b7:33:71:9f:21:a9:b2:64:52:a8:34:a2:4c:
e8:52:34:a6:58:65:46:93:cc:2c:15:a9:a4:f6:35:
c4:b4:62:24:19:77:4e:dd:8b:91:60:65:2c:c0:94:
06:c8:30:51:01:80:39:f1:3f:05:22:65:3b:4e:54:
96:3a:0c:a9:1f:01:d5:0d:27:ac:2b:10:15:15:4f:
cb:52:0c:79:e4:3e:e3:7a:5f:0b:e8:b4:32:76:5a:
88:da:af:7d:09:ae:59:cf:ab:46:3c:bb:29:d2:74:
31:15:9c:ac:3f:c5:03:35:68:e1:49:7c:66:5d:1c:
c4:00:ce:cf:55:1e:d0:81:fc:f0:e5:ed:66:da:95:
91:40:50:16:61:4c:16:cc:43:54:12:1b:e0:35:f3:
b4:48:7f:0f:83:13:c6:49:07:96:01:df:b5:52:3b:
8f:fc:43:ca:b2:e2:6e:db:79:71:cf:5c:fd:12:97:
4e:a8:29:64:67:bb:30:ab:ce:d0:8f:71:65:f3:90:
52:30:76:74:a4:76:7f:c3:d1:06:37:c1:47:62:3c:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:4E:03:59:0A:1A:F7:C3:FA:CC:FA:AD:9B:85:B4:72:52:57:B8
X509v3 Authority Key Identifier:
keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f2:76:63:2c:99:6c:d2:21:9f:a8:21:2e:99:53:35:d1:71:
2c:49:88:5f:6d:2f:27:c5:6c:ef:3a:9c:45:87:b4:03:29:67:
ff:89:a3:5f:83:2b:75:39:35:3a:11:06:af:c9:87:3c:b1:58:
9a:fb:c2:17:28:1f:6e:1b:09:6b:5c:94:97:f4:e1:d4:a6:0f:
98:c9:8e:a3:f4:77:7f:c2:38:6c:68:3d:ce:ce:d5:a6:e4:00:
af:f9:98:81:c0:cc:9f:25:64:e1:20:8d:11:d7:0c:a0:40:78:
ba:1c:c5:64:53:fc:40:98:9d:50:65:7f:46:e3:8e:77:14:4f:
65:06:ea:34:78:41:ff:ee:0f:78:e3:f4:0e:1f:e3:51:c4:26:
c1:3c:6c:af:3e:53:80:90:e2:95:82:e1:15:fc:c9:4c:3a:49:
88:34:07:d9:c3:20:0a:97:09:dd:d4:60:d1:f3:ef:cd:f7:31:
3a:65:ad:40:69:96:f7:73:b6:37:ac:01:68:c1:50:33:f4:65:
46:d8:ae:bf:da:02:4d:f1:57:d0:00:c0:3d:ff:72:cd:a2:7b:
cb:cd:6f:0b:72:dc:2b:20:f6:57:b3:a8:df:07:69:13:92:70:
8b:85:11:77:3f:fe:b1:5c:a9:fa:cb:bd:d8:c4:70:ff:13:77:
db:4e:12:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:51 2026 by rpki-client