
$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json)
Hash identifier: D5rVf5bZEYvHYMP1VVCReydIcqEpdCsPEEm5fXzcZyc=
Subject key identifier: 5A:DC:EE:AC:02:B0:FA:39:54:E9:AA:F4:10:8E:F5:79:3A:DB:4F:4F
Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Certificate serial: 50AB334BF3DEF0A646B21EA33E8EA05861F9AC97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
Manifest number: 020E
Signing time: Sat 18 Apr 2026 01:51:12 +0000
Manifest this update: Sat 18 Apr 2026 01:46:12 +0000
Manifest next update: Tue 21 Apr 2026 06:49:12 +0000
Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: r4lFs0TNiF7PlJS0PWYOEttBGGT47VYExK2RXJ6gyEo=)
2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: GxmxXJye6bfasDnPvzBoASNJwCo+grU549BHvz3WcYU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl
rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 06:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ab:33:4b:f3:de:f0:a6:46:b2:1e:a3:3e:8e:a0:58:61:f9:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Validity
Not Before: Apr 18 01:46:12 2026 GMT
Not After : Apr 21 06:49:12 2026 GMT
Subject: CN=5ADCEEAC02B0FA3954E9AAF4108EF5793ADB4F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:b6:76:ea:95:52:94:bf:04:31:99:30:d8:
1b:c7:b0:71:e8:da:83:71:67:94:54:a7:d9:d6:37:
ce:93:28:74:8c:f1:3b:cf:c2:64:bd:48:98:6f:1f:
73:5f:68:08:20:a3:35:eb:71:46:25:a4:24:9b:79:
10:6b:cc:d2:53:63:aa:c9:ea:72:9a:b5:c6:1e:1e:
08:70:78:fe:66:3a:20:79:3d:1e:a9:10:c9:de:e2:
90:8d:ee:da:12:84:82:9a:f8:1f:3f:da:61:42:61:
f0:30:a0:1a:ca:d5:5b:b6:2b:d9:27:1a:3d:cc:d4:
fd:9c:c7:17:41:46:78:37:66:47:3c:fb:55:ed:2c:
6e:83:25:88:f1:dd:7f:f7:ec:4d:39:cc:87:77:94:
d6:75:a4:dd:ff:46:27:27:94:29:39:aa:8a:0e:78:
cb:66:24:36:34:aa:d4:4b:85:b1:53:a8:5e:10:94:
b1:85:19:ae:ae:b1:1b:ed:59:d4:2d:2e:a5:37:66:
77:a6:79:90:02:80:d8:df:c7:70:c2:9c:2d:ce:ef:
96:04:88:21:0d:1d:d5:33:9a:63:46:3c:84:d5:4a:
c1:80:a1:5a:eb:15:b1:b1:fa:8b:9e:2d:6f:18:63:
36:2f:56:7a:52:88:a1:07:2a:79:f5:90:3f:11:eb:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:EE:AC:02:B0:FA:39:54:E9:AA:F4:10:8E:F5:79:3A:DB:4F:4F
X509v3 Authority Key Identifier:
keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:ca:95:df:08:9b:3b:f6:33:23:6a:f4:5d:46:53:54:12:
ca:69:44:8d:2b:7c:e9:19:08:c1:29:30:92:1e:1d:89:3f:bd:
11:9c:e2:18:55:5a:3d:fa:b0:c4:7e:24:01:03:41:03:11:08:
36:e6:4e:39:28:38:96:0c:cf:4f:f8:93:2e:2a:5c:dc:60:e8:
7a:92:c0:92:27:6d:6a:31:fa:7d:74:e1:0b:a0:5e:7c:6f:65:
1f:67:c7:1a:8f:85:98:75:95:5f:ee:fe:0b:4c:9d:d4:1f:ac:
ab:26:2e:64:84:c0:bf:01:69:da:8b:1c:bf:31:58:09:75:c6:
73:00:85:f5:e5:c3:d4:ff:af:ac:0c:04:cc:5e:3b:ba:5c:47:
a9:2f:ed:f0:36:6b:d5:fd:58:05:e0:a3:f7:6a:65:60:7d:57:
be:76:b3:7c:c7:d3:ee:01:75:62:8c:3e:3d:61:cf:56:e7:f2:
d4:07:01:3d:a7:13:7a:e5:cd:df:87:16:cd:73:3c:03:03:80:
42:a0:e3:5d:a7:5b:62:ce:f4:9a:bc:d8:9c:eb:08:06:82:fd:
fa:e1:6c:24:0f:70:c9:09:92:86:d9:6e:e4:e8:75:a4:e0:50:
7f:14:77:35:ea:0d:db:bc:3a:69:b2:ec:e6:cc:6a:77:df:c1:
eb:6b:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:44 2026 by rpki-client