
$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft
File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json)
Hash identifier: I+TMuPFlt8oENV8mH9To7UER0iwr9QH+nGEsjLcZyuw=
Subject key identifier: 7E:BA:DE:2C:D5:D3:4A:CE:4D:E2:9D:CE:EE:84:BD:92:46:58:7E:A4
Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82
Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482
Certificate serial: 6D50F4F308574A144E8C53B7370C3E3F193B2952
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft
Manifest number: 026B
Signing time: Wed 18 Mar 2026 20:42:13 +0000
Manifest this update: Wed 18 Mar 2026 20:37:13 +0000
Manifest next update: Sun 22 Mar 2026 01:09:13 +0000
Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: /1l0bRMD/EaByPs+esXB9qXPtrRRPsFH5fewog/OE58=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl
rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 01:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:50:f4:f3:08:57:4a:14:4e:8c:53:b7:37:0c:3e:3f:19:3b:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482
Validity
Not Before: Mar 18 20:37:13 2026 GMT
Not After : Mar 22 01:09:13 2026 GMT
Subject: CN=7EBADE2CD5D34ACE4DE29DCEEE84BD9246587EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:3d:1a:90:3f:9f:f6:a6:7e:19:26:d1:1f:
52:36:bc:67:b8:d0:94:0a:fe:f8:f2:2f:e4:97:5f:
f1:7e:2f:ea:5c:89:aa:4e:90:b3:81:36:c8:9c:04:
fb:9d:cc:28:c3:c8:5d:df:be:f9:b0:17:22:e4:e1:
cb:f0:b0:a9:ac:70:80:77:5e:d9:8d:62:4a:17:2a:
7e:18:61:c1:3a:64:9d:a0:fb:89:03:91:de:66:58:
15:cc:19:60:2c:81:49:b4:84:a0:ad:fb:48:95:48:
d1:cd:c6:05:43:d5:cb:fc:3a:d7:00:40:67:08:10:
d4:15:6c:87:bb:a2:51:ca:fe:16:51:a5:e3:a1:c5:
61:5f:a8:7d:d2:ea:95:f9:1c:b5:6c:3c:a2:f2:e4:
6d:65:8d:7f:30:f0:be:40:38:ac:c2:f6:f1:e2:4a:
4e:f0:21:d8:7c:fa:9a:b5:45:7b:8b:10:67:41:2d:
8b:6c:f4:88:d5:b0:b0:85:c9:f7:90:c7:0a:ed:7a:
ad:ba:ca:76:a8:6d:df:d4:ad:06:6d:a3:52:c4:cd:
ee:46:27:56:b3:f1:42:b3:88:d3:1b:d3:2e:77:ff:
03:23:e1:e1:12:2c:19:f6:72:79:59:4a:c7:5d:4b:
c3:48:27:ab:b4:78:ec:a6:b6:2f:90:c4:8f:ce:f3:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:DE:2C:D5:D3:4A:CE:4D:E2:9D:CE:EE:84:BD:92:46:58:7E:A4
X509v3 Authority Key Identifier:
keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:0a:d6:2c:5d:82:dd:7a:20:81:7e:60:af:18:18:77:3e:
42:93:cc:b4:b2:d5:a0:05:20:58:61:b1:b2:b0:ce:49:a0:47:
33:4d:8e:a9:79:4d:dc:b2:48:ca:ce:3e:fd:47:e6:9a:ef:16:
b2:d9:ef:2c:48:22:9d:2f:28:81:56:ef:9e:42:56:53:49:6f:
43:4c:8c:73:30:fe:00:7b:7b:c3:4e:db:ba:b1:7b:fc:fb:e8:
91:0c:67:74:68:18:e4:fd:67:73:e8:aa:19:3b:6f:a6:94:25:
71:45:6e:0c:e4:a3:dc:73:b5:21:c3:21:9e:84:0e:28:43:82:
94:38:8f:1b:8c:19:d2:f7:68:32:6c:86:56:12:3c:95:11:14:
35:6f:b1:3f:48:17:db:f4:a9:da:4e:8f:e5:c0:74:dd:ad:2b:
57:43:5e:cf:99:63:f5:3e:2c:48:bf:c9:82:68:a8:21:ea:ec:
c8:0a:bc:e3:ca:ae:f2:cd:5f:eb:6e:60:30:a5:fe:39:4d:99:
6b:44:f1:8b:13:0a:c4:2a:60:fa:9c:72:b0:de:bd:e3:96:dd:
23:cc:1d:c5:68:d9:ce:8c:eb:50:5a:64:85:2c:85:a6:e5:9b:
82:e7:41:f2:a3:ab:f6:2d:44:65:c6:d0:6e:0b:03:3a:57:ec:
a3:0f:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:53 2026 by rpki-client