
$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json)
Hash identifier: uXUuRrgTt9XMZZx8T1kt2jaj4akaz3rBH8XoNN88kHo=
Subject key identifier: 79:D7:AF:24:62:3E:D8:1C:62:EE:79:70:00:2B:2D:5D:E4:19:93:C6
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial: 11F5EF218D114A0659A0B2F6E57FDDF6266F218E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
Manifest number: 0245
Signing time: Thu 16 Apr 2026 16:11:58 +0000
Manifest this update: Thu 16 Apr 2026 16:06:58 +0000
Manifest next update: Sun 19 Apr 2026 23:46:58 +0000
Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=)
2: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=)
3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=)
4: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: w/cNBGed7ZGOsmxzc5Q1whqZsrgqQfde55DpVXIqfcQ=)
5: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f5:ef:21:8d:11:4a:06:59:a0:b2:f6:e5:7f:dd:f6:26:6f:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
Validity
Not Before: Apr 16 16:06:58 2026 GMT
Not After : Apr 19 23:46:58 2026 GMT
Subject: CN=79D7AF24623ED81C62EE7970002B2D5DE41993C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:cc:78:c3:13:b6:1d:82:31:30:6a:fa:6c:
4b:28:08:10:20:67:d8:cc:74:3f:49:5c:37:6a:91:
bc:e1:62:b5:f8:1e:e6:5f:20:12:28:9b:5b:c0:3c:
9b:dc:17:ab:f8:5e:64:a0:96:e3:fd:52:41:92:8d:
38:bf:01:01:b7:21:8d:b8:25:5f:d9:1c:c6:99:5d:
91:b0:bf:c0:00:7e:ae:a5:26:0d:a7:57:f0:4c:ba:
08:96:2d:48:a3:2a:71:6f:d7:b8:3b:40:16:e2:28:
72:15:63:72:13:27:2f:9c:6a:39:2d:db:db:d4:2c:
9d:7a:5e:36:5d:e7:ab:ab:0b:87:9d:57:09:d2:17:
9c:c4:ec:64:fb:68:d6:12:b9:79:aa:b2:04:cd:8c:
61:10:6a:2a:ec:6a:b8:06:f3:3c:21:a2:e2:3e:b1:
ce:b4:d3:cc:d3:b3:1f:13:cc:40:3a:4e:bb:c0:f9:
cd:2b:94:70:8d:3b:c7:1b:45:b9:92:cc:0d:77:cb:
e6:3f:f6:63:0a:b1:d5:0f:cb:01:9c:a4:78:90:8c:
34:cc:66:0e:2e:9e:61:63:91:48:8d:b4:bc:dd:01:
8b:c0:92:2d:3f:5b:e0:0d:6b:27:35:c3:d7:d2:77:
60:14:2b:57:41:d6:a8:bf:11:0b:48:eb:ad:4e:a8:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:AF:24:62:3E:D8:1C:62:EE:79:70:00:2B:2D:5D:E4:19:93:C6
X509v3 Authority Key Identifier:
keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:21:7f:4f:21:0b:9a:72:69:f3:53:43:56:69:78:2f:b8:
63:d4:e4:67:0a:a6:97:fc:ec:1b:31:34:8b:a8:54:1e:01:1c:
f1:a8:11:83:63:28:4d:46:10:d2:ba:37:ef:f7:48:54:96:09:
27:be:74:79:ae:2c:3d:de:bc:ef:ba:eb:85:8c:dd:51:70:63:
83:ad:c3:98:a1:79:62:03:23:43:0a:7a:fd:7d:67:e0:cb:ca:
bb:24:a6:bc:45:a9:aa:f6:a0:fd:31:33:f2:3c:2f:4a:90:9a:
b3:1b:aa:97:04:61:d3:ca:d3:18:b3:f2:5d:e6:85:ce:da:1b:
05:01:bf:3e:c9:df:7a:47:37:79:f5:1a:75:e4:62:cf:49:68:
b9:56:a3:c8:3b:ac:36:77:ee:69:21:ec:4b:8d:8d:b2:cb:aa:
a2:49:f4:c4:b5:e2:64:fe:19:da:b8:2e:33:93:a2:26:2b:c2:
4c:24:20:94:41:ab:b4:a0:e9:14:be:42:36:44:94:5b:6c:9e:
87:b2:ad:5c:e4:d4:2b:0c:e9:ab:ce:79:7c:dc:e8:5a:e8:a9:
0d:3c:87:d0:83:64:bc:21:dc:10:c1:17:56:a5:07:25:33:68:
92:a0:d4:a1:b4:cb:50:57:5d:3e:54:86:7a:c8:6b:3b:78:f2:
2d:72:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:08:30 2026 by rpki-client