
$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json)
Hash identifier: SnnLaxcmSF/sj6KHZDYiUpEB3vMjVrO5L3WMi8MtRFs=
Subject key identifier: 82:A7:BF:1A:97:56:5C:66:F5:12:F7:CC:10:D3:C7:63:56:AB:FF:A7
Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0
Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
Certificate serial: 5F12136BFF3C157CDA732576F70B8A55A42881F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
Manifest number: 04C7
Signing time: Thu 26 Feb 2026 08:01:00 +0000
Manifest this update: Thu 26 Feb 2026 07:56:00 +0000
Manifest next update: Sun 01 Mar 2026 12:32:00 +0000
Files and hashes: 1: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=)
2: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: FdXoyC18LsDv/EO36IeoHUFePFgyJHRTVARP5lC20e0=)
3: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl
rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Mar 2026 12:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:12:13:6b:ff:3c:15:7c:da:73:25:76:f7:0b:8a:55:a4:28:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
Validity
Not Before: Feb 26 07:56:00 2026 GMT
Not After : Mar 1 12:32:00 2026 GMT
Subject: CN=82A7BF1A97565C66F512F7CC10D3C76356ABFFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:a1:3d:01:1a:4c:48:3c:08:ce:c7:7c:73:
b0:21:9a:87:9a:22:87:7f:fd:fe:8c:14:a3:40:15:
64:32:34:b6:66:81:9c:62:4a:53:cc:27:c0:55:1f:
6c:f7:26:c7:1e:28:3f:47:51:9b:1b:b3:26:c4:9a:
6e:70:d3:ba:ba:57:b5:a5:0e:8c:46:8e:be:53:81:
3e:3d:d7:bf:27:2f:42:f2:90:0f:35:f9:06:aa:23:
41:d7:86:b8:41:65:2c:ff:f1:58:7a:ba:c3:e2:43:
ac:4f:0e:7c:c2:a2:60:44:ce:d0:d9:c8:a1:b9:70:
7a:a3:1f:f1:45:28:4c:1d:6c:ef:65:d7:b7:17:12:
37:b3:dc:bc:93:d7:9f:98:f2:dd:11:8c:82:96:39:
6e:24:b9:32:b4:dd:73:e5:5d:c3:21:2f:1d:c3:8a:
e2:5a:32:c0:1b:37:66:e4:37:24:c5:ea:2c:85:52:
c8:c9:f7:fc:ae:05:73:e7:7d:65:c1:16:43:54:66:
4c:08:41:35:0a:dd:56:94:fc:45:13:1d:de:3a:aa:
60:e8:22:3e:c0:3b:00:d5:47:43:1b:76:e5:ba:90:
95:7a:cd:10:2d:91:fc:f9:a1:e6:18:15:7c:b6:9b:
7d:e0:c4:e0:a7:95:b3:07:fe:c4:ca:40:42:db:af:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:BF:1A:97:56:5C:66:F5:12:F7:CC:10:D3:C7:63:56:AB:FF:A7
X509v3 Authority Key Identifier:
keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:1e:fd:5e:b7:5f:67:4f:1a:63:93:95:b9:84:4a:4a:f3:7b:
a2:15:dc:dc:5b:63:bd:79:b7:7e:53:6b:83:5a:63:01:63:a9:
1c:27:ab:2d:c9:06:a7:b5:68:1b:95:39:a5:90:dd:3e:31:68:
ce:c9:6e:cf:23:2e:5a:0d:45:2e:52:a4:8f:ce:dd:0f:02:ad:
6c:96:6e:e6:33:81:f9:00:67:7a:81:60:70:b0:96:40:2b:db:
04:3b:86:f6:82:88:56:50:02:ec:14:ba:76:f5:2c:3e:03:17:
31:dc:03:ef:77:9f:69:7d:63:fa:ed:8b:eb:00:0d:cf:59:f2:
e2:69:92:cf:ea:d4:72:f3:5b:5f:bb:a2:98:d7:42:96:24:25:
2f:49:dc:72:9b:b9:d9:c7:88:13:81:e4:6f:fd:dd:4f:54:df:
2b:e7:13:c1:dd:be:17:7d:87:56:85:fa:81:a4:b1:c0:e7:03:
77:08:42:95:dc:71:75:a9:42:8b:49:f1:1b:17:c0:76:54:a4:
b8:71:90:86:7c:40:f0:3d:d9:41:2e:89:8a:90:97:b1:b5:de:
9e:df:ef:af:fc:c3:78:08:48:d2:16:19:b1:14:0f:fd:cb:95:
58:f2:f9:05:84:2a:5e:8b:e4:7a:b6:a6:9f:83:d8:d6:24:f3:
e3:48:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 04:53:56 2026 by rpki-client