
$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json)
Hash identifier: P4igNUAzSQuQqzZqwzayADaAJZAteG4qhaSgEBb4sB4=
Subject key identifier: AD:47:70:7D:2F:EB:96:6D:08:BE:61:8F:97:9F:AA:23:21:BD:11:15
Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82
Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682
Certificate serial: 0655D4E46DAA5738101CAC44996FBBCD79DBDE01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
Manifest number: 0196
Signing time: Sat 18 Apr 2026 00:04:19 +0000
Manifest this update: Fri 17 Apr 2026 23:59:19 +0000
Manifest next update: Tue 21 Apr 2026 02:47:19 +0000
Files and hashes: 1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=)
2: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: yi2Bfn48FzVftLo7GCCi06sL8UQotdA1SFuUyYmcgKE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl
rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 02:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:55:d4:e4:6d:aa:57:38:10:1c:ac:44:99:6f:bb:cd:79:db:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682
Validity
Not Before: Apr 17 23:59:19 2026 GMT
Not After : Apr 21 02:47:19 2026 GMT
Subject: CN=AD47707D2FEB966D08BE618F979FAA2321BD1115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:5d:cb:35:86:6f:2f:4a:6c:8e:40:92:8e:
4b:cd:fd:41:6b:a0:32:23:97:34:3e:61:d0:0b:e8:
69:3b:b2:74:24:27:05:67:1f:28:b6:c2:d7:f7:83:
a8:5a:e0:44:54:18:83:88:d6:1c:d4:76:61:44:2d:
e2:0a:7e:3e:00:d8:4d:28:ad:32:99:ea:15:e3:94:
7e:5c:02:9b:e9:4c:78:9b:c6:42:04:d6:25:02:0d:
54:65:9e:b9:25:bc:a8:61:9c:c2:4a:29:e3:af:95:
3d:84:fa:64:12:2d:e3:87:e1:98:38:ff:a2:9e:f7:
fb:05:3d:b2:82:bd:55:c5:e0:9a:bf:4f:43:bc:65:
f8:24:06:63:da:16:5d:4a:94:cb:cf:ae:c2:f8:4c:
99:91:b2:c1:8b:7a:1f:3a:47:2a:68:27:56:6c:8c:
3c:0a:a0:f0:a8:5f:2b:1e:ff:e5:f6:95:60:f3:a6:
9e:f0:44:3b:2c:cb:33:ba:ad:f2:5f:33:c2:1e:a0:
f5:30:b2:45:42:33:ad:d2:ae:a3:31:05:93:ca:d6:
74:18:15:5a:16:cc:2a:04:85:1a:64:64:f5:c3:5f:
bf:e6:31:ec:bb:ec:b7:36:29:67:9d:4f:a3:41:5c:
a2:ac:3c:83:e2:b5:62:02:b1:4e:bc:92:51:fd:61:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:47:70:7D:2F:EB:96:6D:08:BE:61:8F:97:9F:AA:23:21:BD:11:15
X509v3 Authority Key Identifier:
keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:87:8b:d8:f2:d1:26:07:7a:34:0a:7b:91:5e:83:74:d5:
b7:5c:e3:7f:2c:05:c0:44:64:54:bb:e1:76:e8:f6:95:87:4f:
f3:26:fe:b3:a6:4f:aa:e9:70:07:b4:da:ed:dc:38:3d:02:3a:
15:7d:b1:32:55:96:92:4d:13:e4:e3:d2:eb:69:80:81:d3:50:
ff:d8:82:75:76:2e:e4:bc:8f:42:cb:0a:71:61:ce:a4:c6:06:
88:cf:0a:85:b9:b5:2d:17:e8:54:3b:b1:94:62:8d:5f:36:c8:
2b:fb:87:1f:f3:f3:7d:66:fa:28:79:4e:59:ec:ba:2a:e5:8f:
0f:69:49:df:8b:e7:3f:c3:50:f3:d5:7e:99:06:4b:15:1f:62:
77:00:c9:f8:50:a4:33:f5:b5:f7:ad:b4:a1:78:c4:58:65:12:
9f:ab:86:45:78:d7:52:c8:20:2a:0f:98:00:68:ce:9b:ae:17:
1a:85:44:c0:f6:75:f8:79:a1:12:74:d8:79:8e:f0:5c:4c:0c:
8e:a8:24:1b:2e:40:4a:d7:3a:98:7d:df:1d:45:ca:0a:af:be:
00:82:93:4d:da:56:11:7d:75:05:4e:b2:b1:e1:e8:c5:b8:c2:
64:ad:9f:8f:4b:25:e5:27:7a:af:2e:cd:52:1e:17:ef:80:ea:
4b:e2:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:29 2026 by rpki-client