
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json)
Hash identifier: 4HS2hK5536bRFmpIGLma/9Lc8D+5lwde/DbNXuOAEjQ=
Subject key identifier: 5A:68:92:27:A6:9B:FB:FE:C9:10:89:92:3B:DA:F2:FF:3A:19:DD:F4
Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F
Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
Certificate serial: 7BD74EF26FE6AB3106818EDA8B3655BEC1B50302
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
Manifest number: 0169
Signing time: Sat 28 Feb 2026 11:00:00 +0000
Manifest this update: Sat 28 Feb 2026 10:55:00 +0000
Manifest next update: Tue 03 Mar 2026 13:03:00 +0000
Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: 24zK4sK+RJMP42blVvKb6PvbXXPqR/3RFCcYzFZwsfI=)
2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl
rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d7:4e:f2:6f:e6:ab:31:06:81:8e:da:8b:36:55:be:c1:b5:03:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
Validity
Not Before: Feb 28 10:55:00 2026 GMT
Not After : Mar 3 13:03:00 2026 GMT
Subject: CN=5A689227A69BFBFEC91089923BDAF2FF3A19DDF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:7b:77:ca:6d:d0:50:56:b1:7c:72:f0:3c:
cc:a9:c9:76:17:bd:c8:64:a4:bc:c2:00:ca:53:71:
78:3b:d5:8c:de:5b:7d:19:58:da:32:46:09:5b:17:
66:30:18:4f:55:89:e1:da:f3:e7:34:27:ca:52:b5:
4a:33:7a:48:d5:8a:80:fd:ca:b2:56:f8:0e:87:f7:
5f:f0:fb:a4:5a:33:28:c2:50:30:fc:4b:e6:8e:43:
bd:5f:f0:f4:15:70:fb:1f:5e:e5:4d:ea:05:09:7e:
a7:db:0f:c2:45:fb:4f:24:d8:a3:de:3c:61:96:fe:
79:1b:63:d7:e1:b6:cf:f8:bc:96:44:8e:bd:99:2d:
d6:f7:aa:e7:aa:56:7d:79:63:fa:51:4c:c6:c9:a4:
14:33:52:9f:d6:83:ea:92:6b:e3:96:cc:90:85:8e:
8f:97:d0:67:19:7b:da:56:a7:ec:79:f6:27:17:f1:
b7:b4:eb:3a:30:86:11:5e:26:4d:38:1a:18:5f:3b:
5e:0a:52:70:ee:51:05:83:1f:49:17:9f:13:41:fa:
c3:ad:36:24:92:b1:49:31:f7:94:e5:d4:a1:fd:32:
56:db:fb:fc:3a:90:5b:18:af:69:82:79:55:2b:ad:
eb:f4:b0:30:f4:ce:4e:72:20:bc:24:eb:58:4f:d2:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:92:27:A6:9B:FB:FE:C9:10:89:92:3B:DA:F2:FF:3A:19:DD:F4
X509v3 Authority Key Identifier:
keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:80:ec:f3:98:69:71:75:ec:7a:e7:c2:0b:8c:d3:62:f9:2b:
27:5b:b3:1e:18:8f:03:61:4c:a2:8a:36:d9:bb:23:c5:d7:d7:
e8:b8:4a:d0:13:bb:ba:12:18:7c:30:6d:df:f6:a4:44:5d:73:
55:5f:d5:96:13:5a:b3:6e:d1:ab:1d:17:ae:1f:b6:2d:74:58:
5d:4a:74:5d:cd:00:64:7e:ed:92:3e:6b:1c:bb:a3:35:52:4a:
08:a4:16:89:2f:84:cc:c9:ba:f8:69:90:f9:46:ea:a3:34:bb:
7e:92:7c:73:fc:6f:de:11:b1:87:e7:e1:29:7f:f3:62:81:08:
58:f6:7e:9b:4f:d7:7f:24:8f:21:8d:0f:ce:6d:fe:f3:2c:86:
60:d1:95:c1:b7:ce:6b:76:03:1c:fb:e0:82:56:eb:69:a8:db:
41:f9:8e:00:e8:66:0a:f1:35:9d:e9:1d:34:1a:57:de:a3:99:
53:37:16:cc:b6:c7:06:33:1e:a0:e8:b7:e9:ce:b7:47:d3:51:
a9:4e:98:c7:da:3b:b0:59:92:5f:50:01:d0:a1:15:62:83:4d:
6e:c5:dd:7f:0f:e4:1a:ba:b6:4e:40:1e:f2:3d:77:cd:b8:a9:
15:ee:bd:e8:72:17:84:a2:ab:e5:ed:29:9f:37:1a:c0:00:41:
aa:05:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:08 2026 by rpki-client