
$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json)
Hash identifier: sZwyxwCtBxp7HU5VkS3QarwndSxBCXXti6AAxch6AJA=
Subject key identifier: 55:4E:DC:83:10:5E:1E:C2:89:7F:7C:44:48:CB:39:8F:5F:B9:BF:9D
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial: 0ADB9C026B2618572B3F4FD238CDAECABF56ECC4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
Manifest number: FD
Signing time: Sat 28 Feb 2026 05:21:30 +0000
Manifest this update: Sat 28 Feb 2026 05:16:30 +0000
Manifest next update: Tue 03 Mar 2026 10:22:30 +0000
Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=)
2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: ZqEeTBqSXwBTl6vUsWl1J6FgZv33Vs3q0e9SntUELdk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:db:9c:02:6b:26:18:57:2b:3f:4f:d2:38:cd:ae:ca:bf:56:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Validity
Not Before: Feb 28 05:16:30 2026 GMT
Not After : Mar 3 10:22:30 2026 GMT
Subject: CN=554EDC83105E1EC2897F7C4448CB398F5FB9BF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:c3:06:98:2d:fd:aa:84:6a:75:09:36:7b:
0d:e0:19:c7:15:bd:2a:01:42:19:02:b2:39:f1:ea:
f2:07:79:b8:c6:55:b9:1f:e5:5d:80:89:17:1b:13:
00:90:b9:43:8a:d5:f7:4a:01:c1:99:3b:07:51:4f:
2c:cc:7f:ed:32:22:24:45:8c:4b:a8:28:5f:dd:72:
61:ec:96:66:06:5f:d8:36:07:31:26:c6:3a:75:36:
9a:09:7c:7c:c1:3b:ff:f9:5c:ec:3c:84:86:73:0c:
4d:47:36:77:80:4d:30:a4:11:e3:bb:8c:ae:ff:a9:
e2:01:bd:79:61:0e:52:84:0a:35:26:23:de:2a:86:
a1:f3:5e:dc:05:1c:3a:0f:2c:cc:e4:1e:c0:3b:a7:
a8:22:dd:6f:9b:21:b8:c1:7d:1c:0c:dd:7b:69:13:
97:0e:bb:a3:3e:b1:bb:76:c9:84:89:db:c5:cb:33:
60:fa:24:75:91:4a:7f:ae:30:65:06:fb:2f:d2:37:
e0:54:16:f0:11:63:20:9f:ad:60:59:d6:22:7b:69:
b2:05:71:05:df:87:45:a5:51:03:6c:e0:99:14:83:
86:65:5a:a0:4b:95:2e:e9:1e:aa:90:68:fc:b6:0e:
b8:cc:4a:10:a8:c6:92:77:b0:d7:6f:d9:49:f7:85:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:DC:83:10:5E:1E:C2:89:7F:7C:44:48:CB:39:8F:5F:B9:BF:9D
X509v3 Authority Key Identifier:
keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:29:2d:d8:57:ad:65:86:57:5f:c1:2d:e8:08:f5:06:80:
40:0f:85:9c:4f:04:8d:e6:34:5d:d2:78:42:10:32:63:5b:15:
cc:e0:aa:cb:99:ac:26:11:40:fc:1a:ce:c7:14:04:2b:f0:ab:
46:f0:8c:69:82:b7:1c:ba:99:21:be:18:f1:19:29:4f:49:cf:
a9:37:80:90:36:3c:82:11:4c:5e:a1:4f:c6:b9:c2:e4:73:d0:
3d:fc:57:bf:1b:55:e8:07:eb:4f:69:fb:ec:df:50:f0:5c:70:
c6:ae:96:f2:4c:f1:e7:31:00:05:fe:25:ab:a8:43:f3:fe:ee:
60:c0:17:41:5f:5c:d0:66:16:3f:8e:b7:51:f0:a6:8e:59:9d:
95:07:19:9b:b9:85:76:9f:e2:63:10:4a:2c:29:95:98:55:0a:
9e:f7:c0:e7:73:46:c2:bb:aa:23:47:c8:4c:6a:6c:bb:f3:3a:
b0:79:a1:c3:e9:ea:d5:e7:08:11:ab:6e:ba:ab:91:9e:65:ff:
82:4b:b0:51:1d:6e:27:db:59:bc:37:27:a4:c1:8a:60:d9:03:
f2:03:af:a6:0d:30:65:c8:29:35:2b:f1:9d:bb:ea:0b:05:c7:
87:d3:fa:47:46:cd:6d:a4:ee:95:8f:c3:1d:ec:07:d0:ef:b5:
0a:ec:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:44 2026 by rpki-client