
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json)
Hash identifier: ONHb9bo/jmaDAQMEoVNFhmHpBNctj6b9S/LMm62o1Ks=
Subject key identifier: 00:55:5E:61:43:69:EA:63:29:C9:F7:F7:02:9A:82:B7:03:87:E3:48
Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B
Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
Certificate serial: 71751FDF8D5DB08FBFB58AFFB14F202BEA405D86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
Manifest number: 027E
Signing time: Sat 28 Feb 2026 22:12:36 +0000
Manifest this update: Sat 28 Feb 2026 22:07:36 +0000
Manifest next update: Wed 04 Mar 2026 08:41:36 +0000
Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=)
2: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=)
3: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=)
4: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: R/M4KIOnp3tR8Zxenx2eM9FUnYJK8dP3D5ddHKCjjrE=)
5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=)
6: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl
rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:75:1f:df:8d:5d:b0:8f:bf:b5:8a:ff:b1:4f:20:2b:ea:40:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
Validity
Not Before: Feb 28 22:07:36 2026 GMT
Not After : Mar 4 08:41:36 2026 GMT
Subject: CN=00555E614369EA6329C9F7F7029A82B70387E348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:e5:68:75:3d:5c:db:cc:0a:2d:9e:7f:85:
19:50:d1:1d:a8:37:48:b7:c7:b5:d4:4e:15:81:c8:
3b:ab:3b:ac:49:63:92:83:bf:9a:f8:ef:8b:74:d8:
b3:fd:d8:5d:3b:38:40:b8:bc:c6:9a:91:9f:27:b5:
2e:62:80:4c:a6:fb:2c:b9:09:5d:8c:3a:06:5d:9a:
9e:4b:dc:fc:66:7f:4c:31:24:5e:30:32:fc:63:e8:
61:20:37:07:5e:46:a3:29:35:8a:d4:4a:3c:5a:54:
87:b6:81:33:33:8e:58:75:ed:19:ab:e7:99:a6:d6:
e9:a1:5e:85:55:4e:39:e5:2e:df:9a:e1:4b:3c:6a:
84:36:ba:10:13:2a:e2:b7:be:a6:0e:2d:9c:be:fe:
07:08:b5:f6:ef:ac:1f:58:a0:df:80:fb:c9:34:39:
6d:d1:1e:7e:6b:d6:4f:94:09:a6:5b:c6:24:33:9f:
69:83:b8:6c:fc:3a:47:5f:59:58:d6:7d:a9:92:83:
a4:81:8f:f0:79:63:4c:d4:74:3c:19:45:83:4a:0e:
fe:f0:da:18:07:11:d3:f2:3e:d2:62:aa:a3:81:51:
99:5d:be:37:96:30:a8:0e:0a:53:be:37:c9:a6:31:
e9:8a:c4:d8:a1:60:59:21:4d:84:94:50:e7:b2:57:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:55:5E:61:43:69:EA:63:29:C9:F7:F7:02:9A:82:B7:03:87:E3:48
X509v3 Authority Key Identifier:
keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:22:07:51:72:1c:c6:67:ee:af:69:bb:fc:19:84:e9:93:
08:7f:cd:88:c6:fd:27:37:a2:b0:8d:ac:df:55:b2:29:12:01:
83:8a:a8:af:54:3b:71:d3:4c:9b:b5:f3:9b:90:d3:e3:ea:a3:
b8:49:32:22:ba:cc:b9:88:95:43:0c:d7:90:35:f5:ef:48:a6:
8a:89:93:81:e7:49:33:b9:73:21:89:be:13:05:82:0e:a0:fe:
21:ab:ce:f0:d2:ae:4b:6a:e2:55:c4:32:82:57:0c:17:7a:1c:
02:00:7a:82:e3:ab:6e:10:49:34:69:7f:f4:d1:94:66:66:55:
35:55:c1:50:ee:d8:6a:0a:c7:bf:b9:14:ae:d5:8b:73:a7:aa:
2b:8a:c8:b2:30:1b:71:f9:77:41:9b:c7:43:5a:1a:87:c2:5e:
9c:a2:90:06:14:f5:65:07:ee:c9:91:59:98:15:da:c1:2c:33:
b4:b6:33:41:dd:73:b7:b5:58:90:87:39:dd:5d:98:e2:f4:5a:
4d:63:5c:cf:d5:0f:a5:e8:54:23:27:65:67:6a:a0:5b:89:8a:
ee:9f:9e:1c:c4:9f:98:15:b3:d9:17:51:99:21:fc:72:8a:66:
82:18:3f:86:2c:4e:55:a4:99:13:52:7c:1b:23:f9:aa:f4:f8:
1f:f2:f8:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcXUf341dsI+/tYr/sU8gK+pAXYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5
MDg5NTUyQjAeFw0yNjAyMjgyMjA3MzZaFw0yNjAzMDQwODQxMzZaMDMxMTAvBgNV
BAMTKDAwNTU1RTYxNDM2OUVBNjMyOUM5RjdGNzAyOUE4MkI3MDM4N0UzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5eVodT1c28wKLZ5/hRlQ0R2o
N0i3x7XUThWByDurO6xJY5KDv5r474t02LP92F07OEC4vMaakZ8ntS5igEym+yy5
CV2MOgZdmp5L3Pxmf0wxJF4wMvxj6GEgNwdeRqMpNYrUSjxaVIe2gTMzjlh17Rmr
55mm1umhXoVVTjnlLt+a4Us8aoQ2uhATKuK3vqYOLZy+/gcItfbvrB9YoN+A+8k0
OW3RHn5r1k+UCaZbxiQzn2mDuGz8OkdfWVjWfamSg6SBj/B5Y0zUdDwZRYNKDv7w
2hgHEdPyPtJiqqOBUZldvjeWMKgOClO+N8mmMemKxNihYFkhTYSUUOeyVyh/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAFVeYUNp6mMpyff3ApqCtwOH40gwHwYDVR0j
BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy
REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5
NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw
OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy
MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGGtIgdRchzGZ+6vabv8GYTpkwh/zYjG/Sc3
orCNrN9VsikSAYOKqK9UO3HTTJu185uQ0+Pqo7hJMiK6zLmIlUMM15A19e9IpoqJ
k4HnSTO5cyGJvhMFgg6g/iGrzvDSrktq4lXEMoJXDBd6HAIAeoLjq24QSTRpf/TR
lGZmVTVVwVDu2GoKx7+5FK7Vi3OnqiuKyLIwG3H5d0Gbx0NaGofCXpyikAYU9WUH
7smRWZgV2sEsM7S2M0Hdc7e1WJCHOd1dmOL0Wk1jXM/VD6XoVCMnZWdqoFuJiu6f
nhzEn5gVs9kXUZkh/HKKZoIYP4YsTlWkmRNSfBsj+ar0+B/y+Gw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:13 2026 by rpki-client