
$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json)
Hash identifier: sVolVqtVs4NzdWZQsaspztzxdDskFXjeZCKYgHmeI68=
Subject key identifier: A1:2C:C6:B6:DE:2D:A7:5C:AF:5D:BC:02:0B:8B:81:07:D2:08:96:16
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial: 1DFFADF2580DD5962C3C40A4BD0D034D03CE6DD2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
Manifest number: 0112
Signing time: Fri 17 Apr 2026 11:41:34 +0000
Manifest this update: Fri 17 Apr 2026 11:36:34 +0000
Manifest next update: Mon 20 Apr 2026 19:44:34 +0000
Files and hashes: 1: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: UOS1E4lcdxBiEya5OWwwkegy20D17r+QM/pio7Jleb8=)
2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 19:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ff:ad:f2:58:0d:d5:96:2c:3c:40:a4:bd:0d:03:4d:03:ce:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Validity
Not Before: Apr 17 11:36:34 2026 GMT
Not After : Apr 20 19:44:34 2026 GMT
Subject: CN=A12CC6B6DE2DA75CAF5DBC020B8B8107D2089616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:96:32:dc:5b:21:47:4d:b4:ef:a5:e5:b3:
3a:eb:44:6e:56:a6:cc:fe:ec:04:77:8a:56:bb:23:
90:3c:c7:34:2f:87:62:5b:90:fd:bd:c2:38:39:68:
f8:45:4f:d1:e1:18:45:19:60:a9:46:bc:0b:e9:d1:
42:7c:f4:be:da:02:fd:ae:48:cc:38:3a:33:76:07:
e1:35:b2:63:0f:8d:d5:0e:39:68:09:05:b4:09:9a:
36:cd:6a:05:b6:2c:93:be:26:a9:85:db:0a:09:e0:
f1:0a:95:ed:8f:cb:8d:4f:58:00:c7:9e:e8:a0:8f:
ec:4b:a1:13:e8:ce:d8:71:c9:dc:8d:47:45:5b:5a:
1f:37:ae:6c:85:d9:bf:d6:96:bc:f2:5d:2a:38:44:
11:ea:31:f8:1d:16:88:a4:e5:58:73:96:11:6d:c2:
af:f9:7f:6a:3c:aa:35:7b:45:69:ce:f5:02:d0:5c:
86:17:8f:2f:1e:66:21:44:6e:50:42:3f:8d:0c:f6:
06:03:bd:63:47:96:62:69:e4:9b:73:23:0d:bc:e4:
a4:f8:b9:53:3f:50:01:13:9a:12:06:fb:90:d1:e4:
2f:b3:b9:a9:42:31:f9:74:e4:6d:a9:23:84:8b:cd:
49:f5:ac:a9:87:02:ba:19:f3:a3:ab:af:a1:52:cc:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2C:C6:B6:DE:2D:A7:5C:AF:5D:BC:02:0B:8B:81:07:D2:08:96:16
X509v3 Authority Key Identifier:
keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:ba:cd:26:33:3a:d4:07:c3:ea:ec:bc:c7:bb:c5:a6:80:
3c:1a:c1:54:f9:0d:cc:d6:46:84:24:25:ee:ef:7c:96:69:93:
b5:b9:a3:d0:e2:fe:5f:b5:fd:63:b1:84:2e:78:21:55:5d:57:
f3:69:37:4f:cc:32:ec:fc:b3:fd:76:d7:02:32:79:52:94:02:
09:8c:66:48:be:cf:2a:8b:ac:20:b5:78:ad:a1:72:a1:67:50:
12:91:d0:4e:c7:19:62:b7:83:dd:dc:b6:37:96:b7:e8:d4:9a:
99:fe:c9:b3:0f:ff:55:1a:46:47:aa:0f:3b:43:72:bc:b0:20:
4a:d8:86:87:36:11:52:cc:2a:53:41:4a:55:57:84:fe:fb:f9:
e1:cc:d2:55:5f:75:ad:1f:20:6f:01:7e:4a:cc:11:78:0c:2d:
f9:59:c5:9a:69:9b:1e:c1:7a:6f:89:97:23:ba:1c:c6:a4:7a:
92:46:83:c3:05:57:a6:85:20:a0:99:44:70:c5:56:d5:16:c6:
1c:0b:2f:2e:07:c0:20:22:a0:ac:8e:5c:20:6a:66:6b:13:14:
12:5c:1f:86:06:c1:f4:8b:62:1c:f1:cd:da:3f:67:cf:e6:74:
ae:a8:4e:07:e1:3c:e1:67:18:bb:e6:e7:b5:7c:92:05:40:51:
7f:bd:46:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHf+t8lgN1ZYsPECkvQ0DTQPObdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy
OUQxM0JERDAeFw0yNjA0MTcxMTM2MzRaFw0yNjA0MjAxOTQ0MzRaMDMxMTAvBgNV
BAMTKEExMkNDNkI2REUyREE3NUNBRjVEQkMwMjBCOEI4MTA3RDIwODk2MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2ZYy3FshR02076XlszrrRG5W
psz+7AR3ila7I5A8xzQvh2JbkP29wjg5aPhFT9HhGEUZYKlGvAvp0UJ89L7aAv2u
SMw4OjN2B+E1smMPjdUOOWgJBbQJmjbNagW2LJO+JqmF2woJ4PEKle2Py41PWADH
nuigj+xLoRPozthxydyNR0VbWh83rmyF2b/WlrzyXSo4RBHqMfgdFoik5VhzlhFt
wq/5f2o8qjV7RWnO9QLQXIYXjy8eZiFEblBCP40M9gYDvWNHlmJp5JtzIw285KT4
uVM/UAETmhIG+5DR5C+zualCMfl05G2pI4SLzUn1rKmHAroZ86Orr6FSzGVzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoSzGtt4tp1yvXbwCC4uBB9IIlhYwHwYDVR0j
BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx
MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx
M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw
Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5
N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC7Ous0mMzrUB8Pq7LzHu8WmgDwawVT5DczW
RoQkJe7vfJZpk7W5o9Di/l+1/WOxhC54IVVdV/NpN0/MMuz8s/121wIyeVKUAgmM
Zki+zyqLrCC1eK2hcqFnUBKR0E7HGWK3g93ctjeWt+jUmpn+ybMP/1UaRkeqDztD
crywIErYhoc2EVLMKlNBSlVXhP77+eHM0lVfda0fIG8BfkrMEXgMLflZxZppmx7B
em+JlyO6HMakepJGg8MFV6aFIKCZRHDFVtUWxhwLLy4HwCAioKyOXCBqZmsTFBJc
H4YGwfSLYhzxzdo/Z8/mdK6oTgfhPOFnGLvm57V8kgVAUX+9RqA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:17 2026 by rpki-client