
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json)
Hash identifier: 6gqboFIsQmR9F65sCNrdkAqrJwbrvbyaeby0v5ukG0M=
Subject key identifier: DA:48:13:B3:D1:C4:36:64:4C:96:C1:E4:45:98:41:E1:32:16:6B:43
Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Certificate serial: 16FB50800956F9AE2DF14C049B2848D9B55A6F71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
Manifest number: 0268
Signing time: Sat 28 Feb 2026 09:51:54 +0000
Manifest this update: Sat 28 Feb 2026 09:46:54 +0000
Manifest next update: Tue 03 Mar 2026 21:09:54 +0000
Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: etKKSveFADWMloWFgv7k4bcqwUD/JCeti3TZy4ckvfE=)
2: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: ijFC1rraxG+SEwWj9FHEacoEgBSzb1MTmqh/Pe39RTM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl
rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fb:50:80:09:56:f9:ae:2d:f1:4c:04:9b:28:48:d9:b5:5a:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Validity
Not Before: Feb 28 09:46:54 2026 GMT
Not After : Mar 3 21:09:54 2026 GMT
Subject: CN=DA4813B3D1C436644C96C1E4459841E132166B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:16:68:05:95:3f:9b:f2:09:64:c6:02:89:
4a:99:1b:2f:27:82:cc:ee:5c:dc:8f:fb:43:6d:0d:
a6:90:b0:2f:20:61:94:80:fd:74:2b:9b:01:12:9c:
fb:0b:cf:53:c8:c0:6d:75:73:44:b0:a3:36:78:47:
bc:20:a6:c2:f1:19:7b:ab:49:97:06:c8:3c:0b:81:
e8:aa:16:40:16:4b:de:52:57:78:42:14:b4:07:93:
bb:65:6c:c8:16:20:34:f1:de:f3:06:1e:83:b1:a0:
f8:c7:eb:90:7a:f0:d0:a1:8d:a4:75:37:09:52:2f:
c7:9e:54:bd:7e:89:5b:77:50:28:17:ee:3e:06:fe:
54:56:f5:f5:eb:67:ea:b3:e8:91:88:fe:8c:f5:21:
9a:2a:33:19:80:4c:e1:c2:af:83:e7:e0:17:6e:23:
c6:23:8e:99:2d:04:c8:71:76:de:5b:d5:3d:c2:97:
1c:71:bd:5f:90:1e:b4:19:86:76:96:84:4d:f5:c6:
85:80:52:4b:a0:61:da:1c:0c:b6:01:3f:24:cb:88:
92:1c:24:80:8c:53:e2:b3:44:57:4d:5d:ba:51:8f:
ec:36:e9:4c:cf:66:c5:78:fa:73:41:ab:46:8a:0b:
c3:9a:2e:f0:1f:67:8d:b8:13:17:f9:ec:04:c6:66:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:13:B3:D1:C4:36:64:4C:96:C1:E4:45:98:41:E1:32:16:6B:43
X509v3 Authority Key Identifier:
keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:73:f2:d9:57:e8:44:8f:e3:1d:96:56:bd:7a:8e:d0:7a:28:
6f:5e:f6:56:3c:12:bd:1d:2f:ea:c8:ff:36:cd:11:22:40:e8:
60:d4:f7:ae:a1:e8:c6:e0:46:f4:ae:45:8f:63:8f:70:1e:63:
17:4d:18:03:8b:39:72:3d:8a:03:4d:b9:a3:7d:83:93:db:33:
d1:89:6d:59:11:97:12:1b:93:06:ee:b3:65:04:71:9d:f6:5f:
4d:49:01:cc:62:76:2d:03:bd:92:c7:b4:0e:2f:a9:43:b9:e4:
81:be:c6:9a:18:0f:32:ee:af:f9:2d:3b:13:8a:be:f8:1e:3a:
ee:ca:18:1f:97:28:f6:99:b3:3b:a6:e9:7c:a2:87:6a:32:80:
51:2f:59:98:0a:6a:d0:ad:f4:a8:5a:5b:58:f9:7f:02:24:c7:
f9:c2:bb:07:35:01:3e:9c:99:63:ea:c9:99:6b:11:35:30:11:
c1:2d:bf:a8:18:ea:cf:38:f8:c3:89:f4:ea:1a:7e:e7:6e:c9:
5b:68:40:26:b6:64:6c:4f:94:bd:d3:98:67:a9:7d:f4:de:f5:
e1:0a:56:7b:85:b4:8e:c6:b5:b8:3f:cb:da:03:33:4f:0d:a7:
fe:a9:7a:b1:ef:1b:7b:12:10:8f:ed:4f:ba:2b:88:e4:44:95:
60:b7:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:43 2026 by rpki-client