
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier: mrp0VQsFV0RC20E5uZQXVetEhsoJ7GJdio962FWzTbk=
Subject key identifier: 0D:7B:C0:19:E6:98:1C:84:FE:1C:BE:20:C3:1E:2A:1B:CD:37:CC:38
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial: 3D43CDF8DB08CCCE396E3C8DF73B6033BB830710
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number: 053F
Signing time: Thu 16 Apr 2026 05:12:08 +0000
Manifest this update: Thu 16 Apr 2026 05:07:08 +0000
Manifest next update: Sun 19 Apr 2026 05:30:08 +0000
Files and hashes: 1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=)
2: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=)
3: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: 9tT23RgdDyZ23kGaEd6KDEr76K41sz/4BKUEDeG/OuU=)
4: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=)
5: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=)
6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=)
7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 05:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:43:cd:f8:db:08:cc:ce:39:6e:3c:8d:f7:3b:60:33:bb:83:07:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
Validity
Not Before: Apr 16 05:07:08 2026 GMT
Not After : Apr 19 05:30:08 2026 GMT
Subject: CN=0D7BC019E6981C84FE1CBE20C31E2A1BCD37CC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:02:95:09:f2:bf:57:95:0d:a0:b2:64:74:
de:7a:82:2b:1f:99:17:75:9b:fb:92:fe:0f:a2:98:
9b:78:84:3f:26:ca:12:1a:55:7d:4b:7c:63:bd:6b:
61:f8:1b:80:08:be:dc:bd:24:56:60:80:25:55:64:
2e:02:5b:7d:19:aa:3d:f1:3e:6f:b7:28:c3:4a:01:
df:f4:88:99:32:ae:90:8a:31:2d:0e:20:2e:0a:fc:
0d:d3:e6:d4:21:9b:bc:39:94:1e:53:a3:41:8c:79:
15:c1:46:65:ea:7a:8f:11:ac:4b:56:c0:bf:35:e4:
de:20:a4:56:05:31:1d:7f:fc:1c:2f:21:46:7e:10:
51:a6:1f:18:49:8e:e8:28:a0:8e:c9:78:18:45:4f:
52:eb:e7:1f:ec:e3:e9:04:64:79:f2:da:f0:2a:89:
24:e2:c8:ec:0a:8c:64:42:20:1b:03:e6:4a:16:44:
da:cd:90:6d:29:a1:8d:1e:b6:e3:d4:f0:9d:59:f9:
f7:25:ed:d5:62:07:00:10:c8:1f:2d:4d:de:7b:4b:
9a:76:f6:f5:c3:97:3c:90:10:b3:eb:26:8f:33:26:
c0:38:62:f9:f6:61:f1:16:26:31:90:e0:53:af:1f:
f3:5b:c6:87:80:a0:d5:6f:a3:54:cf:f8:24:5d:38:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:C0:19:E6:98:1C:84:FE:1C:BE:20:C3:1E:2A:1B:CD:37:CC:38
X509v3 Authority Key Identifier:
keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:02:34:e9:85:09:e7:b2:5b:82:6b:37:d6:d7:19:13:67:fa:
a0:b9:21:3e:40:b5:41:f0:8f:97:75:3d:50:a8:44:4e:ed:cf:
d0:26:38:1b:07:f8:f6:9d:66:8f:96:e2:cc:7b:b2:4a:70:bb:
d9:8a:7d:a5:da:fd:26:6b:d6:b2:01:0b:15:30:53:85:83:bf:
b5:85:8b:23:36:d1:7d:61:47:a4:0f:85:4d:d9:c3:f8:37:74:
a0:4a:74:0a:35:f6:e6:ca:50:a2:7f:9b:16:86:08:6a:d4:9c:
a3:ed:07:a5:6b:f4:7c:0c:e1:35:c7:14:07:ab:40:f0:aa:59:
39:33:0a:20:3f:28:e8:64:6a:98:07:25:fe:f3:db:0d:39:d3:
03:4f:bc:ec:34:26:99:e4:a6:65:c1:f8:f3:9e:13:61:cb:ca:
13:b4:2e:c0:6e:7f:1e:47:51:02:0a:3d:6b:44:96:75:c3:26:
40:b1:ee:b1:c5:ef:44:8d:ef:a1:9c:bd:05:41:29:23:32:7f:
67:04:ee:ed:3b:34:06:b6:5a:e4:88:3c:02:79:49:4d:13:6c:
2e:94:79:da:8d:53:14:f7:44:4d:8f:7f:4b:b9:da:00:99:1b:
f3:ee:17:b5:1e:f7:5c:f6:c0:5c:11:ce:b5:fa:4c:cb:40:19:
3b:47:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:44 2026 by rpki-client