
$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier: tX072xqTKYujN/Ia4RKnnp9XngsbipqpkNfh898dT9I=
Subject key identifier: 69:32:3C:7D:2A:59:48:72:06:A5:2F:C9:40:3F:49:BB:6A:B5:9E:BA
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial: 49ED2D1B8F6B1C433E4DC3ADD59D10E3413467CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number: 012C
Signing time: Wed 22 Apr 2026 00:20:47 +0000
Manifest this update: Wed 22 Apr 2026 00:15:47 +0000
Manifest next update: Sat 25 Apr 2026 11:47:47 +0000
Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: bdqPz2VJsY/+Hseo1YQL2hNqwtsyUe25RTPBgS73iYc=)
2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 13:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ed:2d:1b:8f:6b:1c:43:3e:4d:c3:ad:d5:9d:10:e3:41:34:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Validity
Not Before: Apr 22 00:15:47 2026 GMT
Not After : Apr 25 11:47:47 2026 GMT
Subject: CN=69323C7D2A59487206A52FC9403F49BB6AB59EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:8c:38:66:47:d6:d4:b5:c5:2a:d9:f9:6c:
7b:e9:86:7b:e4:c5:da:00:e4:64:59:fc:62:d1:4f:
90:7f:9e:f5:d1:8d:6b:e3:11:90:0e:67:30:74:cd:
c9:2a:4c:d7:dd:5f:3b:00:e5:ff:65:c8:3c:b1:bc:
68:58:0b:d4:82:50:89:ce:21:23:89:5c:00:bc:07:
59:40:52:8c:2f:8c:f1:14:c9:27:19:03:84:82:0c:
e0:27:d2:6c:a2:cb:d3:12:79:cf:0a:31:60:8c:ed:
e4:3f:f3:62:bc:c3:8c:40:06:f9:ce:cb:13:ea:83:
85:e3:d4:38:38:ae:09:b8:a8:6a:00:df:ca:96:4b:
56:5b:dd:4e:c6:73:55:8e:92:0b:56:95:2a:72:4b:
8b:24:b8:47:a5:02:ac:a6:58:46:69:b6:be:d0:95:
a2:12:5f:a5:97:83:5a:d5:e4:27:a7:7e:95:c8:82:
bb:bf:40:5b:9c:c5:88:5d:55:62:ef:03:cc:32:4a:
04:e7:16:0a:6c:f5:db:7e:fc:7e:e5:0a:0d:a5:6a:
7e:ec:3b:d0:d1:9d:87:48:95:e0:8c:a9:fd:11:4a:
76:9c:de:18:6a:18:1c:58:63:17:60:c2:bf:61:b4:
fc:7b:72:90:39:44:2d:87:0c:55:35:da:41:32:a7:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:3C:7D:2A:59:48:72:06:A5:2F:C9:40:3F:49:BB:6A:B5:9E:BA
X509v3 Authority Key Identifier:
keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e3:ff:f1:2d:7f:c0:32:97:6b:13:1a:55:c9:3c:5f:ed:55:
f6:a7:a1:fa:aa:0a:86:2f:49:0f:77:f5:c6:a7:4f:50:5d:ca:
62:79:fe:f6:6f:99:17:4e:5d:d7:1c:0e:5c:21:c2:08:2b:29:
6f:c3:7a:aa:e2:88:e3:e6:f8:53:2c:4a:45:ad:e8:3b:61:04:
bf:80:3f:36:8f:91:ab:3b:c6:b2:63:75:ca:65:64:f3:d8:0c:
d9:77:76:4f:6c:07:ff:3f:d0:4d:4d:3c:05:04:3e:62:af:26:
e5:f9:9c:95:7f:f7:77:d0:4c:cc:bd:03:08:96:81:ae:22:b4:
c2:a9:5c:b3:fd:c3:7f:79:de:92:c9:91:c8:d9:d7:6b:0c:4e:
39:b6:a9:96:b2:1f:8e:61:9d:16:31:ba:dc:83:55:80:4e:5c:
22:3b:61:3d:08:8c:3f:cb:51:e1:0b:61:e0:cd:b3:be:bb:4b:
44:3f:a3:05:7b:4e:86:84:f7:d8:5d:58:98:1f:f8:67:aa:71:
96:f2:0d:33:bd:6b:87:3d:53:70:e6:6f:56:67:8b:25:07:5c:
32:b5:5f:da:c3:f0:30:a3:75:ef:6d:c4:3b:1e:ff:9a:63:80:
7a:af:55:31:60:5a:c6:2f:d9:65:55:73:78:18:45:9a:7e:11:
c2:16:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:55:18 2026 by rpki-client