
$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json)
Hash identifier: uMWFetvZDVMmvt7K5O0sM9MllpTiQ8f/SpENHZAUf18=
Subject key identifier: B2:2F:D6:91:23:C0:93:70:C4:5D:05:D1:EA:93:26:24:E7:0A:C7:C4
Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Certificate serial: 5569FD7DB48005BB9E5CC7CAD5C10F16333BA01B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
Manifest number: 029E
Signing time: Sat 28 Feb 2026 22:11:59 +0000
Manifest this update: Sat 28 Feb 2026 22:06:59 +0000
Manifest next update: Wed 04 Mar 2026 09:21:59 +0000
Files and hashes: 1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: pSt/9Awp8VJzSNjZywTCGp15pDRirnKkCwF60emNX8c=)
2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=)
3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl
rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:69:fd:7d:b4:80:05:bb:9e:5c:c7:ca:d5:c1:0f:16:33:3b:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Validity
Not Before: Feb 28 22:06:59 2026 GMT
Not After : Mar 4 09:21:59 2026 GMT
Subject: CN=B22FD69123C09370C45D05D1EA932624E70AC7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:dd:11:f0:43:5b:90:a8:81:94:b7:3d:f5:
87:84:17:d3:2e:2a:7d:73:ea:a5:b7:1b:66:56:cf:
d3:ef:4a:95:e3:a6:00:94:6c:6d:b8:44:00:0d:68:
cb:a9:c0:f5:89:0b:54:ae:47:d0:c8:0f:7c:90:d3:
28:0a:e2:27:9d:1f:e7:f6:01:2e:13:d2:3a:c1:8a:
47:b9:55:95:e4:35:8d:23:77:15:10:e7:4b:08:5a:
18:44:84:46:3c:bc:4c:73:e1:11:3c:2a:c1:11:10:
e3:29:a1:1f:b4:9d:5c:41:ee:d9:7d:64:67:af:a5:
0d:b8:e9:6a:93:27:81:ff:82:85:9f:f4:26:79:28:
de:64:c9:7c:b8:17:af:5c:93:29:df:d0:f9:ed:dc:
b4:41:59:a8:2a:c8:fb:e1:bc:c4:94:24:3d:23:dd:
c6:4d:76:c6:70:9c:d4:6b:fa:dc:94:e6:67:30:64:
00:68:a5:05:39:1e:09:0d:55:cc:f3:49:74:5a:60:
27:d2:43:48:6b:0f:24:7e:55:35:b4:ac:e7:ee:fa:
bd:fb:4b:98:9c:40:ff:d6:c7:91:43:9e:2d:4f:ba:
f8:3a:18:11:3f:37:53:2b:f4:65:98:61:13:6c:5f:
57:16:94:cc:d8:8b:31:0e:e3:dd:e0:70:b9:ee:d0:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:D6:91:23:C0:93:70:C4:5D:05:D1:EA:93:26:24:E7:0A:C7:C4
X509v3 Authority Key Identifier:
keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2c:5c:d5:29:b5:95:dc:41:f9:49:61:4e:cd:ff:ce:61:f4:
04:52:3d:dd:92:14:de:14:dc:8b:f8:f1:d9:bf:b4:75:a3:ec:
ed:33:25:ba:ec:e3:e1:25:69:9f:b0:de:91:d1:1b:4a:82:95:
d7:da:6d:07:df:6d:59:88:80:32:13:a8:15:3b:31:d4:c1:eb:
e1:67:6a:12:c2:bd:fd:1f:44:b9:d6:b9:9f:43:b1:48:b6:f7:
99:74:66:f9:33:e3:a9:92:69:ea:d9:14:4c:41:da:87:5f:e3:
49:3c:77:5b:8b:e1:23:52:07:24:c3:8b:54:cf:68:e9:e7:d6:
b4:83:5e:0f:16:ef:fe:37:32:57:8a:5d:3f:94:4b:ea:aa:70:
ea:5f:9e:86:0b:1f:a2:dd:78:e2:f7:d6:61:54:3a:97:8c:8a:
6a:41:28:d6:29:ae:8e:62:1e:d9:00:26:3b:dd:24:0b:b0:11:
06:70:f7:43:8e:95:8e:c4:7e:7e:fd:af:af:0b:10:25:60:bc:
d2:ad:89:12:e4:49:e1:89:0b:fd:09:10:d1:94:3d:cd:42:43:
58:46:c9:89:54:0c:97:62:23:8d:41:8e:a0:ac:5a:4f:92:4d:
90:01:0e:11:80:62:80:31:aa:a6:f2:29:e7:eb:72:74:5f:72:
ed:fb:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:34 2026 by rpki-client