
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json)
Hash identifier: /9Ffdppu3hxE05yXMhiDu9jBEZDH+j795SYHwLGLvxs=
Subject key identifier: 5E:47:E6:19:69:F5:A8:8A:8B:DD:CE:65:0D:EC:9B:4C:11:6D:54:4B
Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21
Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21
Certificate serial: 6E77914DBDEAF98920D3C757514AC9C8B03DA07C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
Manifest number: 02CB
Signing time: Sat 28 Feb 2026 08:21:37 +0000
Manifest this update: Sat 28 Feb 2026 08:16:37 +0000
Manifest next update: Tue 03 Mar 2026 16:37:37 +0000
Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: cAMMqmYLFZcUPg4ayY507dr9WxfqaxtawBnw+tB+YLQ=)
2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: TPHc8hMgpG4lNB1VT7M46EhAo2F9SEdX4ITwbrTmfrk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl
rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:77:91:4d:bd:ea:f9:89:20:d3:c7:57:51:4a:c9:c8:b0:3d:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21
Validity
Not Before: Feb 28 08:16:37 2026 GMT
Not After : Mar 3 16:37:37 2026 GMT
Subject: CN=5E47E61969F5A88A8BDDCE650DEC9B4C116D544B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:e8:e4:15:a6:3e:16:e6:c8:9f:c8:53:02:
92:be:04:24:da:fd:01:f0:1c:7c:e0:7a:18:ad:85:
3b:dd:48:70:94:ac:92:88:8d:c0:13:8b:e6:20:ea:
f1:91:98:cd:b8:34:6d:38:44:20:a2:aa:c4:7d:25:
d8:6b:f0:47:40:c4:23:4d:92:1a:c4:cd:7c:80:5e:
f8:40:ce:26:a8:e4:b4:22:03:a5:97:43:39:42:74:
ce:73:a5:89:70:cb:59:8a:a3:9f:5e:de:05:4f:a2:
cd:ac:63:2c:71:5a:19:5b:be:12:95:07:4b:70:2d:
00:d8:7f:7b:60:3f:85:44:26:f1:0c:38:e6:91:23:
04:68:aa:80:b4:dc:74:3b:c8:78:df:d7:6c:52:86:
ab:95:b4:9b:82:17:67:1b:87:28:38:a2:dc:67:ea:
6f:49:7d:2c:39:b1:25:49:73:90:aa:46:d1:a0:f3:
87:f2:ba:10:b5:63:37:9a:1b:be:a4:d2:b1:1c:5c:
11:8f:ea:4d:93:0a:ec:2e:2d:4b:02:3d:40:29:e4:
ab:fe:a5:9f:66:e7:5d:0f:c5:fd:5c:f6:30:0f:fc:
b7:07:27:2f:6f:15:54:b4:66:a1:a7:85:be:37:60:
c5:2a:7e:b4:71:c3:28:df:6c:d4:5c:87:45:56:ef:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:E6:19:69:F5:A8:8A:8B:DD:CE:65:0D:EC:9B:4C:11:6D:54:4B
X509v3 Authority Key Identifier:
keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:15:83:16:a0:2f:81:fa:7a:c0:a2:73:3f:d6:92:1f:6b:
8b:c4:ae:30:05:e7:bf:a7:18:84:93:13:a6:52:e2:94:e6:b0:
db:7c:6a:3a:c4:84:7e:3b:13:ab:80:b5:38:45:4f:04:5c:f4:
13:5a:b4:69:3b:ca:b3:22:fa:a4:2d:3a:7e:8a:9e:db:ae:8e:
8d:2e:1e:c4:e5:fd:6b:4b:85:36:28:dd:f4:ba:4f:e6:12:e1:
2e:ba:63:4a:c1:4f:b8:a2:3a:24:94:f9:81:6d:05:7a:8e:80:
f6:7d:f9:c3:ec:04:64:74:1b:e7:a4:fd:1c:a1:b3:0e:71:bd:
4c:48:9b:da:3b:58:f6:2e:49:fd:a0:d2:2a:cd:14:50:0c:15:
93:b6:45:4b:00:98:fd:95:ce:bf:d4:3f:99:80:46:03:e9:45:
20:c9:87:e8:11:b7:5a:7d:52:71:e4:59:21:7d:33:17:e6:79:
fa:d0:db:62:4f:2b:20:dd:bc:83:75:48:88:3d:5e:89:39:77:
0f:48:82:7e:cf:54:55:11:71:eb:29:b3:14:ba:71:24:ee:e1:
12:23:ea:6f:d7:94:a7:08:06:d7:e7:90:74:c7:ab:25:ea:fb:
3c:4b:42:e3:bc:e8:be:00:0f:81:b3:0c:98:64:30:7d:a0:0d:
3e:8d:67:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbneRTb3q+Ykg08dXUUrJyLA9oHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC
Q0NEQ0QyMTAeFw0yNjAyMjgwODE2MzdaFw0yNjAzMDMxNjM3MzdaMDMxMTAvBgNV
BAMTKDVFNDdFNjE5NjlGNUE4OEE4QkREQ0U2NTBERUM5QjRDMTE2RDU0NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDOjkFaY+FubIn8hTApK+BCTa
/QHwHHzgehithTvdSHCUrJKIjcATi+Yg6vGRmM24NG04RCCiqsR9Jdhr8EdAxCNN
khrEzXyAXvhAziao5LQiA6WXQzlCdM5zpYlwy1mKo59e3gVPos2sYyxxWhlbvhKV
B0twLQDYf3tgP4VEJvEMOOaRIwRoqoC03HQ7yHjf12xShquVtJuCF2cbhyg4otxn
6m9JfSw5sSVJc5CqRtGg84fyuhC1YzeaG76k0rEcXBGP6k2TCuwuLUsCPUAp5Kv+
pZ9m510Pxf1c9jAP/LcHJy9vFVS0ZqGnhb43YMUqfrRxwyjfbNRch0VW77T7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXkfmGWn1qIqL3c5lDeybTBFtVEswHwYDVR0j
BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF
NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE
Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk
MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw
NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACK2FYMWoC+B+nrAonM/1pIfa4vErjAF57+n
GISTE6ZS4pTmsNt8ajrEhH47E6uAtThFTwRc9BNatGk7yrMi+qQtOn6Kntuujo0u
HsTl/WtLhTYo3fS6T+YS4S66Y0rBT7iiOiSU+YFtBXqOgPZ9+cPsBGR0G+ek/Ryh
sw5xvUxIm9o7WPYuSf2g0irNFFAMFZO2RUsAmP2Vzr/UP5mARgPpRSDJh+gRt1p9
UnHkWSF9MxfmefrQ22JPKyDdvIN1SIg9Xok5dw9Ign7PVFURcespsxS6cSTu4RIj
6m/XlKcIBtfnkHTHqyXq+zxLQuO86L4AD4GzDJhkMH2gDT6NZ4o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:12 2026 by rpki-client