
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json)
Hash identifier: fMZlT1ds168vdGM2bfaeb6yvgB2AJsx2+1qA9NfcdGc=
Subject key identifier: 5A:08:2B:DD:C1:F7:F8:87:EC:58:8B:FE:DE:4D:4A:0E:A9:0D:A7:FA
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial: 2BAFD52C32CB9844E70BC05260E3A336F58D1ABB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
Manifest number: 0562
Signing time: Sun 05 Apr 2026 09:10:54 +0000
Manifest this update: Sun 05 Apr 2026 09:05:54 +0000
Manifest next update: Wed 08 Apr 2026 18:41:54 +0000
Files and hashes: 1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=)
2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=)
3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: 0dUYEAZtUqvAvteADp9ukxe3zVz3o/K+qgljWpbrVxU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Apr 2026 18:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:af:d5:2c:32:cb:98:44:e7:0b:c0:52:60:e3:a3:36:f5:8d:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Validity
Not Before: Apr 5 09:05:54 2026 GMT
Not After : Apr 8 18:41:54 2026 GMT
Subject: CN=5A082BDDC1F7F887EC588BFEDE4D4A0EA90DA7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:5e:06:3e:cd:c0:b3:b8:c3:ea:6e:c1:31:
2f:7b:0c:7d:d8:14:0e:6b:0d:a5:f3:bf:0f:e6:d7:
68:81:ca:2c:f0:ce:08:65:a0:79:83:b5:43:bb:f7:
74:68:df:8d:a9:b0:13:0d:62:e3:ba:f4:67:5c:13:
77:bb:00:ce:26:f1:3a:b9:df:4a:fa:c8:0d:4b:28:
79:99:2f:53:fa:3c:9a:58:42:31:1a:e5:be:6b:79:
53:83:cf:a8:69:a4:91:13:e2:f4:77:52:55:0e:ac:
13:28:78:b4:69:56:d5:20:06:4a:6c:00:bc:86:55:
d9:c7:47:6b:22:12:ad:ff:db:a8:2d:7d:58:dc:3b:
03:dc:be:37:05:7a:33:50:69:da:ba:90:2c:e1:1c:
7f:3e:e9:2f:ae:b5:89:e8:40:90:ca:d9:e2:3f:11:
88:d4:a6:86:16:f8:5f:ac:fa:f4:45:3d:29:dd:35:
dc:56:de:4b:4d:74:05:8b:50:e7:ba:53:35:43:96:
e9:e0:21:23:f3:7e:ca:03:b8:65:59:c7:ad:fb:92:
5f:62:86:02:71:3a:11:c1:72:d1:9d:69:4a:09:9a:
fb:57:84:60:bf:57:dc:0b:ef:8b:21:7a:ad:9d:3c:
17:ab:6c:32:6e:6d:5d:93:dc:22:cf:12:9b:76:dd:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:2B:DD:C1:F7:F8:87:EC:58:8B:FE:DE:4D:4A:0E:A9:0D:A7:FA
X509v3 Authority Key Identifier:
keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1a:80:07:a6:5e:5a:d8:ff:35:f6:5d:8e:7e:e3:4f:c1:7f:
2e:d4:da:ec:12:3d:2d:67:4d:19:b7:77:df:2f:62:8a:e7:09:
ad:0f:9b:38:9b:f8:3c:1f:e5:66:e5:0a:b7:92:c4:e8:86:44:
3d:cd:f3:44:f8:05:c0:6b:26:44:6d:6c:e0:5c:d6:82:a4:4c:
cc:17:0b:f7:18:50:2a:cd:5b:40:b2:70:f4:ca:3b:bb:c6:1d:
0f:dc:56:ae:1a:3e:40:b8:70:bd:d5:8c:04:f8:dc:5c:31:10:
12:0a:d3:30:61:40:fa:24:fc:37:70:86:a0:92:d0:bc:b0:f5:
9d:8d:94:87:38:81:9d:69:79:ea:b6:60:d7:72:26:9e:53:9f:
cd:9d:e8:31:c1:c7:8c:5a:d5:96:f4:ac:01:ca:b1:1c:84:be:
f1:59:61:1a:a5:c5:5d:29:39:1a:85:66:0b:1d:a8:b1:17:b7:
ef:1f:d7:64:fc:3c:36:d2:67:48:09:c4:28:b9:0f:28:74:8d:
6f:3a:d9:9c:ea:69:4b:0f:ca:a2:a1:5e:f0:5f:17:5f:43:87:
89:c1:5c:e1:81:a2:c0:e9:fd:d9:74:0f:ce:6a:51:d3:e5:fa:
f8:bb:68:e7:03:a7:4a:6d:60:9e:b8:82:fa:bd:0c:8b:fb:7f:
ea:a2:ae:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUK6/VLDLLmETnC8BSYOOjNvWNGrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2
QUI1Njk1RTAeFw0yNjA0MDUwOTA1NTRaFw0yNjA0MDgxODQxNTRaMDMxMTAvBgNV
BAMTKDVBMDgyQkREQzFGN0Y4ODdFQzU4OEJGRURFNEQ0QTBFQTkwREE3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzF4GPs3As7jD6m7BMS97DH3Y
FA5rDaXzvw/m12iByizwzghloHmDtUO793Ro342psBMNYuO69GdcE3e7AM4m8Tq5
30r6yA1LKHmZL1P6PJpYQjEa5b5reVODz6hppJET4vR3UlUOrBMoeLRpVtUgBkps
ALyGVdnHR2siEq3/26gtfVjcOwPcvjcFejNQadq6kCzhHH8+6S+utYnoQJDK2eI/
EYjUpoYW+F+s+vRFPSndNdxW3ktNdAWLUOe6UzVDlungISPzfsoDuGVZx637kl9i
hgJxOhHBctGdaUoJmvtXhGC/V9wL74sheq2dPBerbDJubV2T3CLPEpt23aJpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWggr3cH3+IfsWIv+3k1KDqkNp/owHwYDVR0j
BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC
RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1
Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh
NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB
MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALYagAemXlrY/zX2XY5+40/Bfy7U2uwSPS1n
TRm3d98vYornCa0Pmzib+Dwf5WblCreSxOiGRD3N80T4BcBrJkRtbOBc1oKkTMwX
C/cYUCrNW0CycPTKO7vGHQ/cVq4aPkC4cL3VjAT43FwxEBIK0zBhQPok/DdwhqCS
0Lyw9Z2NlIc4gZ1peeq2YNdyJp5Tn82d6DHBx4xa1Zb0rAHKsRyEvvFZYRqlxV0p
ORqFZgsdqLEXt+8f12T8PDbSZ0gJxCi5Dyh0jW862ZzqaUsPyqKhXvBfF19Dh4nB
XOGBosDp/dl0D85qUdPl+vi7aOcDp0ptYJ64gvq9DIv7f+qirvY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 11:43:11 2026 by rpki-client