
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json)
Hash identifier: pSwssYL+0BbxJiZ3RkBjmN8dV0XGhR9RmkRaqrWrKnA=
Subject key identifier: 5A:9A:B5:4E:A4:D2:B3:45:09:B1:27:06:54:B2:7E:45:68:43:5C:9C
Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Certificate serial: 0B293439390815EC0B0877B5228D14CF980BBC5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
Manifest number: 011C
Signing time: Mon 02 Mar 2026 06:31:17 +0000
Manifest this update: Mon 02 Mar 2026 06:26:17 +0000
Manifest next update: Thu 05 Mar 2026 18:17:17 +0000
Files and hashes: 1: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=)
2: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: hTW3Z9ZJVohNhQpyVTO4XmtrW7kg/Es2VnSLFT2Y088=)
3: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=)
4: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:29:34:39:39:08:15:ec:0b:08:77:b5:22:8d:14:cf:98:0b:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Validity
Not Before: Mar 2 06:26:17 2026 GMT
Not After : Mar 5 18:17:17 2026 GMT
Subject: CN=5A9AB54EA4D2B34509B1270654B27E4568435C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:49:29:15:22:11:11:e7:8f:cf:5f:66:df:
28:88:90:db:ae:9f:88:5a:4d:3c:1a:08:cc:b7:a5:
db:1e:5a:71:47:fa:c1:08:9d:a3:57:af:e5:4e:6c:
1f:52:6c:ab:8d:35:73:2f:a1:b9:01:ef:aa:e9:f8:
45:a1:34:17:db:19:c3:d5:a7:d4:b5:da:bb:c5:4f:
79:cf:06:fb:b1:cc:47:a7:02:3a:80:e5:16:8f:46:
42:db:91:8e:2e:90:69:41:fa:21:14:b3:aa:aa:5d:
e0:05:dc:e6:f6:af:bd:85:21:21:53:95:76:7f:06:
44:0b:fa:68:b5:f8:c6:74:8b:e7:cc:74:a4:93:8d:
87:0a:ff:55:d3:15:28:18:cd:03:78:7a:65:7b:81:
bd:80:aa:fb:62:93:d1:08:98:15:ab:aa:6e:02:9d:
a6:bb:67:31:6c:b8:95:12:09:13:25:9c:61:95:35:
3b:26:be:82:ba:98:bd:19:08:66:22:b3:35:88:c0:
45:99:72:10:47:49:b8:ac:1e:c0:ea:28:15:bd:33:
de:69:31:bf:fe:33:41:d6:58:c8:54:bd:d3:c3:b3:
d0:2a:d9:29:f7:48:6a:07:12:29:6c:6d:bf:23:f5:
b6:2d:bc:b1:3c:5a:0d:42:e1:a1:08:0e:54:40:4a:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:B5:4E:A4:D2:B3:45:09:B1:27:06:54:B2:7E:45:68:43:5C:9C
X509v3 Authority Key Identifier:
keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:9f:b0:41:fb:ae:5b:74:66:f9:fb:4e:dd:1c:de:1b:97:
31:08:a2:28:a7:d9:42:23:ef:81:2e:7c:50:64:0f:94:e2:fb:
46:3d:32:f2:c3:eb:2a:14:d8:0c:cb:55:a7:f2:bc:16:f4:06:
e3:c2:66:ad:24:71:36:61:b0:be:57:c3:fc:fe:c4:92:82:1e:
59:5e:36:83:99:19:f8:48:75:50:3d:aa:89:42:6f:d4:a7:16:
6f:27:91:b2:61:12:cb:e3:9e:1c:e0:d3:6a:6c:0e:a7:2a:d5:
e7:74:85:ea:dd:48:b9:46:a2:0a:7c:dc:e8:18:cd:5f:1e:fa:
e4:c6:85:1a:04:8e:92:f8:ff:1f:73:4c:dd:b0:de:e5:7d:9a:
41:87:58:78:33:f1:b1:d7:d1:4d:20:7c:76:1a:8a:a3:35:2c:
c1:8c:00:4b:ff:e8:41:df:7c:42:65:95:79:76:86:3c:ff:23:
d2:1b:65:ef:bf:ce:24:f5:26:28:8e:a7:a4:ac:7c:b4:4c:8d:
db:c8:2d:4a:a2:71:81:91:c4:54:5d:e9:05:a6:61:07:ff:6f:
49:a3:ab:6d:61:10:b1:ae:a5:a6:af:4f:30:33:b5:27:f3:d3:
29:89:b0:5e:ed:4d:f6:91:4e:05:8c:a7:e9:1b:a1:88:4e:f4:
a7:f0:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:59 2026 by rpki-client