
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft
File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json)
Hash identifier: 4fii538zA/eJuXkMa+2ZbpN9Ndh0Jp6R+OrNaeKoFAk=
Subject key identifier: E4:7C:BA:0C:1E:3C:54:C6:01:73:FE:38:E1:DA:FA:BD:D1:6F:D9:C2
Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD
Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD
Certificate serial: 4F74F73231AE138A096E1FB86B5046DBAB05F587
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft
Manifest number: 0207
Signing time: Sat 28 Feb 2026 00:20:54 +0000
Manifest this update: Sat 28 Feb 2026 00:15:54 +0000
Manifest next update: Tue 03 Mar 2026 07:27:54 +0000
Files and hashes: 1: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: IAfCc36b+ZuLfkNXk9UGXWqhcIrd0+kkw00XJdFWpic=)
2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: cCo2j3DaRw7ST6xKRFKIc+Fk9WAeawaQpPCFHRoRW38=)
3: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: j4qgOuaytx/T1SoWds6Ahuur6DlLes7Qp0dkDQlTzGc=)
4: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: ZDqeHH9c3Ge8DQKLptNu9Fe3zE45Y025wBi0fQHXBeg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl
rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 07:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:74:f7:32:31:ae:13:8a:09:6e:1f:b8:6b:50:46:db:ab:05:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD
Validity
Not Before: Feb 28 00:15:54 2026 GMT
Not After : Mar 3 07:27:54 2026 GMT
Subject: CN=E47CBA0C1E3C54C60173FE38E1DAFABDD16FD9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:48:f4:0f:ce:16:9a:24:20:1b:36:3d:99:
96:12:13:27:13:ea:74:e5:42:fd:df:2a:fe:69:e6:
67:16:de:89:71:75:61:3e:22:78:4c:fb:4e:2a:2a:
6a:fc:b8:1b:d9:1c:4e:72:61:c8:3a:ea:46:da:d5:
00:40:ad:06:71:95:d1:17:e1:31:e9:d1:35:3a:d5:
f7:69:d3:e0:33:6f:1d:f0:c0:68:b2:be:c0:e5:f4:
0e:88:b6:ef:e2:1d:34:4f:75:52:ee:55:f1:51:1e:
80:2c:45:e4:19:9a:4a:6c:38:c3:43:03:73:1d:c5:
a3:18:1d:39:21:bb:61:7b:92:0d:f3:0a:f5:6c:1e:
34:00:07:95:5e:e4:14:a8:5e:4b:a7:78:56:5e:2e:
f7:b6:44:67:19:de:dc:59:94:64:b5:91:48:99:7d:
48:5f:fe:5a:a7:57:e3:49:ea:37:f7:3a:7f:c7:06:
85:46:bc:1b:5b:4f:95:75:77:bb:af:1c:6f:bc:38:
a9:89:3e:a6:b6:0d:06:fb:ec:15:34:09:20:cf:fc:
6d:e7:e0:f6:2c:76:fe:9f:c3:57:1e:1e:c3:ba:3b:
93:76:cd:31:2a:56:5f:73:50:3f:b1:10:a4:ed:72:
74:b7:6e:f9:4b:47:72:60:5c:6c:3f:46:e1:b0:4a:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:BA:0C:1E:3C:54:C6:01:73:FE:38:E1:DA:FA:BD:D1:6F:D9:C2
X509v3 Authority Key Identifier:
keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:9d:0b:28:14:38:c1:6d:d0:34:27:fb:07:75:5e:3c:7e:
74:1c:f5:d9:c2:f1:c4:5d:4f:72:95:6a:ee:62:8d:bb:bc:ea:
47:cb:5b:aa:e8:be:9a:dd:e6:55:36:dc:c2:bf:66:83:cb:40:
ba:6a:89:4b:da:69:17:b3:16:b1:f2:5d:6d:de:9f:05:27:e0:
a3:9d:03:8c:f0:01:46:ff:9a:c6:e9:64:8c:a2:22:ee:ed:5e:
5b:1a:e9:47:1b:01:09:38:26:4a:f1:03:8b:5f:8e:55:be:d0:
c2:b2:f9:42:20:8b:8b:bd:ab:a2:09:84:e8:5d:e2:48:83:4a:
18:3d:b2:e1:6f:3e:6f:0c:90:3f:97:36:df:02:91:6c:88:0f:
1e:af:38:66:d2:e2:46:20:74:22:7a:f1:4c:bc:55:b5:b5:cf:
b8:0b:96:1d:32:13:63:1a:0c:5f:42:19:c6:e4:64:67:2b:4f:
bc:ee:e1:7e:52:6a:39:d2:ed:e3:79:4b:9e:38:70:24:b9:e1:
0a:0c:1a:64:be:88:98:71:33:c0:51:2b:35:4f:b9:e7:47:89:
43:6d:e2:ee:77:89:63:ac:c2:e2:87:79:5a:6f:f7:b6:c5:eb:
a1:f8:96:1c:ca:50:e1:7a:e5:89:df:a4:bb:3b:4f:f8:b5:40:
af:2f:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:22:21 2026 by rpki-client