
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json)
Hash identifier: QzbqbgM2977u1+JbFAA3GPX5XkxdEhwt+jWGrdd1vGs=
Subject key identifier: 17:58:E7:AC:C1:59:AA:45:CC:CA:C2:AF:12:C5:8E:21:A2:F0:DB:67
Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Certificate serial: 12193BE7B87A849537673EA13DB40B30CD66D72E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
Manifest number: 027F
Signing time: Sun 19 Apr 2026 11:11:50 +0000
Manifest this update: Sun 19 Apr 2026 11:06:50 +0000
Manifest next update: Wed 22 Apr 2026 13:41:50 +0000
Files and hashes: 1: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: QhBtLdWlnMKvBZ6eAuz2Gwx98XEZeoFZTYUKiCOyUjw=)
2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=)
3: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl
rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 13:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:19:3b:e7:b8:7a:84:95:37:67:3e:a1:3d:b4:0b:30:cd:66:d7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Validity
Not Before: Apr 19 11:06:50 2026 GMT
Not After : Apr 22 13:41:50 2026 GMT
Subject: CN=1758E7ACC159AA45CCCAC2AF12C58E21A2F0DB67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:5c:a2:e3:33:48:2a:71:26:91:e7:7a:c3:
d7:41:c1:2e:04:22:ac:69:e8:72:27:45:a5:0d:66:
19:ab:08:4b:f3:d6:54:c7:aa:6a:04:ae:2e:82:f6:
9c:7e:bc:ce:5e:10:6b:95:1c:f1:04:68:48:59:77:
c2:b0:7f:da:ab:61:32:75:a8:38:be:e0:e8:c8:4f:
32:c3:20:80:83:f2:0e:b5:93:41:8d:cb:f8:c8:9f:
08:00:d3:23:89:73:c3:dd:29:58:1e:a4:ab:71:07:
6a:3a:f0:77:50:e5:24:7b:91:1f:da:1f:4e:b4:c1:
d0:bd:d7:61:54:94:7d:37:42:20:33:5c:a7:39:81:
e7:11:53:5f:01:34:21:6c:91:5b:8e:59:96:92:7f:
c0:7b:bc:ad:2a:f9:6c:e0:ad:77:08:13:9b:1c:a4:
b1:33:21:91:8e:2e:2d:ab:e1:0c:51:40:fc:c1:55:
1b:b1:1a:e1:74:7d:d3:04:50:10:35:fc:e7:a0:c6:
52:50:8c:5e:96:2a:14:0f:6b:7e:1b:59:48:f0:d0:
47:3d:3f:89:88:23:5e:bc:cf:a7:21:67:ce:43:ca:
f3:70:85:e3:84:00:a2:8e:73:0b:58:63:fd:6c:31:
fc:67:b7:55:96:64:78:b9:fa:90:90:26:5c:46:e9:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:E7:AC:C1:59:AA:45:CC:CA:C2:AF:12:C5:8E:21:A2:F0:DB:67
X509v3 Authority Key Identifier:
keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:5a:0d:de:34:2e:ca:80:11:c5:f9:06:62:34:cb:cb:e8:
81:65:93:f1:11:62:d5:6a:23:de:03:42:1d:73:6e:1f:de:9c:
bd:34:e4:c6:44:a1:af:a6:05:a9:10:44:a9:19:cb:8b:5f:8c:
f8:fc:fb:72:53:18:ac:c6:88:5f:35:5b:a5:c1:a9:93:e7:31:
1b:74:1a:a3:57:69:91:0c:0a:b3:38:50:5b:5f:65:16:ba:3d:
3c:03:fa:a0:6c:5d:1c:47:48:40:c5:09:6f:aa:04:3b:8e:8f:
cf:7d:da:35:bb:8d:3e:9f:c5:09:99:b2:c7:9a:b9:37:fd:0d:
7f:88:89:8f:28:77:8b:a1:d0:e7:de:e3:dd:7d:a6:9b:00:11:
bb:70:62:74:fb:25:70:2d:e4:d0:bb:98:d4:e6:b0:77:b7:f0:
a8:0a:7e:0c:4f:f5:9b:86:e4:ac:a0:9e:5a:2a:20:e3:3b:56:
8d:63:cc:32:51:7c:9d:62:a2:f2:3f:fe:74:9e:a7:0f:9c:e6:
6a:45:e8:cd:c6:96:fb:ed:3f:bb:29:fe:7f:75:cc:15:e1:a1:
3d:da:55:9c:88:f2:9c:e5:62:b0:7d:8b:3b:ed:44:2f:12:c7:
d9:30:31:69:59:aa:83:11:e5:a5:a8:b7:b8:ef:ba:0c:d5:26:
6f:62:43:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEhk757h6hJU3Zz6hPbQLMM1m1y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF
Q0UzQjY2QzAeFw0yNjA0MTkxMTA2NTBaFw0yNjA0MjIxMzQxNTBaMDMxMTAvBgNV
BAMTKDE3NThFN0FDQzE1OUFBNDVDQ0NBQzJBRjEyQzU4RTIxQTJGMERCNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcn1yi4zNIKnEmked6w9dBwS4E
Iqxp6HInRaUNZhmrCEvz1lTHqmoEri6C9px+vM5eEGuVHPEEaEhZd8Kwf9qrYTJ1
qDi+4OjITzLDIICD8g61k0GNy/jInwgA0yOJc8PdKVgepKtxB2o68HdQ5SR7kR/a
H060wdC912FUlH03QiAzXKc5gecRU18BNCFskVuOWZaSf8B7vK0q+WzgrXcIE5sc
pLEzIZGOLi2r4QxRQPzBVRuxGuF0fdMEUBA1/OegxlJQjF6WKhQPa34bWUjw0Ec9
P4mII168z6chZ85DyvNwheOEAKKOcwtYY/1sMfxnt1WWZHi5+pCQJlxG6TbDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF1jnrMFZqkXMysKvEsWOIaLw22cwHwYDVR0j
BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC
NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz
QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj
M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD
M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACDdWg3eNC7KgBHF+QZiNMvL6IFlk/ERYtVq
I94DQh1zbh/enL005MZEoa+mBakQRKkZy4tfjPj8+3JTGKzGiF81W6XBqZPnMRt0
GqNXaZEMCrM4UFtfZRa6PTwD+qBsXRxHSEDFCW+qBDuOj8992jW7jT6fxQmZssea
uTf9DX+IiY8od4uh0Ofe4919ppsAEbtwYnT7JXAt5NC7mNTmsHe38KgKfgxP9ZuG
5KygnloqIOM7Vo1jzDJRfJ1iovI//nSepw+c5mpF6M3GlvvtP7sp/n91zBXhoT3a
VZyI8pzlYrB9izvtRC8Sx9kwMWlZqoMR5aWot7jvugzVJm9iQ5g=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:27 2026 by rpki-client