
$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft
File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json)
Hash identifier: vgLYVQopBnHlKl3bNTKJVR2oNVx9j7QObzTMctOSs0k=
Subject key identifier: 79:5E:BC:13:77:BE:0E:A6:03:3B:28:42:4A:56:D8:2F:EC:C9:38:F6
Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39
Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39
Certificate serial: 0C3B006C3FFE0372AB6DDDABFB4BAD545A65CEF6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft
Manifest number: 010E
Signing time: Fri 17 Apr 2026 14:12:22 +0000
Manifest this update: Fri 17 Apr 2026 14:07:22 +0000
Manifest next update: Mon 20 Apr 2026 23:06:22 +0000
Files and hashes: 1: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: 0xvvv25/9rGs4pm5cdZiULVHrW2J6ITpKufcjoDy3SY=)
2: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=)
3: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl
rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3b:00:6c:3f:fe:03:72:ab:6d:dd:ab:fb:4b:ad:54:5a:65:ce:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39
Validity
Not Before: Apr 17 14:07:22 2026 GMT
Not After : Apr 20 23:06:22 2026 GMT
Subject: CN=795EBC1377BE0EA6033B28424A56D82FECC938F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:af:c4:09:80:9a:50:91:56:20:ec:1e:96:
8d:f2:4c:12:d0:aa:31:39:1a:2e:4e:bc:48:71:a9:
3b:48:1f:b7:79:af:33:0c:5d:8d:f9:e2:3b:db:67:
97:69:53:3e:ed:65:7f:bd:2c:ab:46:85:1f:2c:30:
09:8a:21:b0:a8:40:0a:81:5f:70:65:d2:b8:4d:ac:
6b:c1:2f:ff:9a:cf:6b:2d:ed:a8:71:63:6b:80:a9:
5b:3f:f2:eb:46:bd:a7:84:6f:5b:88:7f:ad:62:c0:
3d:1a:0d:18:58:21:d8:43:af:bd:84:9a:d4:ae:03:
4f:c0:21:1b:63:e2:76:de:6a:b9:9c:7c:55:83:72:
ad:43:e4:da:6c:83:30:5d:36:3c:32:12:a2:64:68:
e4:7f:65:8a:45:ad:a9:6d:4a:48:04:b9:0c:f5:76:
b1:a7:64:3a:67:15:f1:57:de:53:8a:8f:b8:b3:92:
f4:e7:62:df:cf:80:c2:c6:e0:d0:c9:de:b8:ed:ae:
f6:bc:df:7e:33:26:28:f1:9b:35:1e:07:94:c9:8b:
f4:81:2b:90:3f:1b:71:3d:9a:00:81:9c:8e:19:8a:
4a:63:ad:9d:d6:a2:fe:16:a2:d9:14:79:19:5a:a6:
d4:1e:c0:a0:67:84:22:b1:2b:a7:34:fb:f7:40:a5:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5E:BC:13:77:BE:0E:A6:03:3B:28:42:4A:56:D8:2F:EC:C9:38:F6
X509v3 Authority Key Identifier:
keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:21:e7:2d:2c:fa:75:74:14:e2:cf:18:9e:13:86:25:6e:
83:0a:30:61:62:99:c1:c9:24:27:31:b7:fb:fc:af:68:14:ed:
c3:36:7e:26:95:a4:5d:98:af:c1:f2:3b:fc:75:71:6b:f4:bf:
35:9c:d6:3e:b1:9a:fe:e9:53:e9:f1:c5:93:36:70:97:25:36:
dd:a0:b3:f8:88:f5:03:80:02:53:f7:ee:82:24:93:e8:63:9c:
3b:87:37:f9:16:b3:82:29:53:16:ab:2b:a0:04:3c:10:b9:d3:
b2:68:9f:44:c3:b0:ea:0a:9b:4d:66:37:53:cd:be:87:db:8b:
8f:d0:62:9d:fa:47:0f:34:97:c3:df:f2:1a:12:f6:0e:45:16:
02:c2:be:ce:a8:18:bd:d8:63:ab:b3:7e:ce:ec:19:5c:68:ac:
68:5c:bf:c7:ef:b0:26:e8:64:b7:7c:ad:80:c6:21:6a:7f:66:
12:2c:6e:8b:2a:c0:8f:93:8b:81:3a:3c:30:d1:a1:a3:74:fb:
68:4e:41:79:b3:a7:ac:f9:9c:8c:b3:9b:b4:ee:d6:70:27:e5:
8a:0a:2a:7c:74:33:fc:1e:2b:8c:05:ab:44:aa:3f:72:e4:60:
b6:3e:19:64:d8:e9:59:03:b0:f4:6c:73:2f:b6:95:6b:7d:af:
75:45:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:44:44 2026 by rpki-client