
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json)
Hash identifier: 7pd2HscZaUSHa9Ui1vFP8/2QZJ6VjbOU5VrdhRuF+vI=
Subject key identifier: BC:9C:FF:65:D2:1F:1A:13:A6:FF:74:9E:85:E1:FD:FA:3D:72:80:0D
Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Certificate serial: 741EB86978A4A1999BFF684DB3734703518D09DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
Manifest number: 4B
Signing time: Thu 12 Mar 2026 02:51:12 +0000
Manifest this update: Thu 12 Mar 2026 02:46:12 +0000
Manifest next update: Sun 15 Mar 2026 09:14:12 +0000
Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=)
2: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: ik23zo0AsCPljwqFaJZsmTzXamKhSfyyvrwJNe/irHQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 09:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1e:b8:69:78:a4:a1:99:9b:ff:68:4d:b3:73:47:03:51:8d:09:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Validity
Not Before: Mar 12 02:46:12 2026 GMT
Not After : Mar 15 09:14:12 2026 GMT
Subject: CN=BC9CFF65D21F1A13A6FF749E85E1FDFA3D72800D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:46:b4:90:20:74:f5:c6:d1:fd:bd:97:32:
af:03:d9:e3:11:6b:d2:77:5f:9c:2b:21:9f:5a:be:
2f:36:39:9c:ba:d8:75:79:3e:de:f5:c0:a7:dd:66:
14:9a:f8:67:f1:04:27:6a:c9:60:b0:38:08:b5:f6:
bb:6a:f5:71:e9:e4:a1:ec:75:38:5f:dd:59:3c:56:
42:ba:11:e7:1f:ae:cb:96:07:60:61:69:64:f8:4d:
92:cb:e0:e2:aa:4f:32:45:29:01:e7:86:1c:65:5a:
9f:fe:94:7e:a8:90:4c:51:55:77:7d:a5:81:63:de:
3b:26:10:5b:5e:68:ea:0c:2f:79:f6:ee:ec:83:22:
92:52:db:59:2d:f8:55:df:a2:8f:0b:92:bc:10:21:
53:7f:64:0c:a6:5d:7c:7e:51:71:30:26:58:2b:7b:
f1:fc:ee:59:fa:89:5e:8a:47:9c:5d:0b:da:0f:07:
bc:0e:a1:07:fe:92:4b:c8:5f:d1:06:58:bb:e9:9a:
9f:c4:a7:a5:56:d8:22:14:35:50:a5:dc:06:ba:d0:
75:fd:c2:cd:28:aa:05:b0:7c:ed:24:1d:f9:da:e1:
94:df:50:52:64:f3:48:ee:47:6e:3c:7c:0b:af:2d:
10:14:c1:3c:17:5a:44:34:4e:92:6e:1a:f1:fb:fa:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:FF:65:D2:1F:1A:13:A6:FF:74:9E:85:E1:FD:FA:3D:72:80:0D
X509v3 Authority Key Identifier:
keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ff:cb:46:60:63:54:07:5d:51:12:87:80:b0:c5:a4:55:29:
c4:10:67:b8:10:cc:e4:34:7f:b7:99:3e:bd:55:7f:1b:ba:55:
73:73:56:cb:fe:24:86:e0:bb:e6:15:7f:df:ec:32:e3:1f:1c:
69:22:e3:cd:b5:a5:e6:ad:87:71:f3:82:a1:ca:63:1e:89:2e:
97:30:28:a4:bb:1d:34:3e:64:53:89:ac:50:a2:60:72:58:87:
87:c7:9a:24:d8:79:1b:bd:c7:07:30:a5:1b:6a:38:cc:11:f9:
96:ae:8e:28:4b:be:68:76:44:a5:0a:49:a3:f5:a3:87:58:5e:
b8:4f:fb:83:36:2f:aa:4b:21:19:b1:14:54:b9:54:d5:e9:04:
4e:08:19:f2:4e:f6:d9:e7:ee:12:df:e3:06:ee:1a:70:85:eb:
4c:db:b1:2e:8f:ea:36:4a:1f:a2:11:f9:6b:b2:11:73:39:be:
f8:d1:d6:c5:22:f2:7f:2a:b8:73:b3:7e:39:24:15:1b:3c:ac:
5a:96:fb:59:61:b9:0c:df:cb:05:b5:3b:cb:45:87:d0:d0:b8:
43:6e:2d:79:e5:2e:8a:2f:4a:e5:1b:da:83:b5:5b:9d:b9:ea:
fd:2a:9d:ec:b2:fc:01:5b:b6:05:d7:d8:fc:c7:a1:75:0c:6a:
3a:1c:f9:0f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdB64aXikoZmb/2hNs3NHA1GNCd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdB
OTZGMzZDRTAeFw0yNjAzMTIwMjQ2MTJaFw0yNjAzMTUwOTE0MTJaMDMxMTAvBgNV
BAMTKEJDOUNGRjY1RDIxRjFBMTNBNkZGNzQ5RTg1RTFGREZBM0Q3MjgwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgUa0kCB09cbR/b2XMq8D2eMR
a9J3X5wrIZ9avi82OZy62HV5Pt71wKfdZhSa+GfxBCdqyWCwOAi19rtq9XHp5KHs
dThf3Vk8VkK6EecfrsuWB2BhaWT4TZLL4OKqTzJFKQHnhhxlWp/+lH6okExRVXd9
pYFj3jsmEFteaOoML3n27uyDIpJS21kt+FXfoo8LkrwQIVN/ZAymXXx+UXEwJlgr
e/H87ln6iV6KR5xdC9oPB7wOoQf+kkvIX9EGWLvpmp/Ep6VW2CIUNVCl3Aa60HX9
ws0oqgWwfO0kHfna4ZTfUFJk80juR248fAuvLRAUwTwXWkQ0TpJuGvH7+mbXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvJz/ZdIfGhOm/3SeheH9+j1ygA0wHwYDVR0j
BBgwFoAUXyLSCE93S2jZ3pdjOXtWV6lvNs4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YWIxYTc5MC1kY2VkLTQ2NGEtODk1ZC05MDM1YTBjYzVmMmYvMC81RjIyRDIwODRG
Nzc0QjY4RDlERTk3NjMzOTdCNTY1N0E5NkYzNkNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdBOTZG
MzZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5
NWQtOTAzNWEwY2M1ZjJmLzAvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2
NTdBOTZGMzZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEn/y0ZgY1QHXVESh4CwxaRVKcQQZ7gQzOQ0
f7eZPr1Vfxu6VXNzVsv+JIbgu+YVf9/sMuMfHGki4821peath3HzgqHKYx6JLpcw
KKS7HTQ+ZFOJrFCiYHJYh4fHmiTYeRu9xwcwpRtqOMwR+ZaujihLvmh2RKUKSaP1
o4dYXrhP+4M2L6pLIRmxFFS5VNXpBE4IGfJO9tnn7hLf4wbuGnCF60zbsS6P6jZK
H6IR+WuyEXM5vvjR1sUi8n8quHOzfjkkFRs8rFqW+1lhuQzfywW1O8tFh9DQuENu
LXnlLoovSuUb2oO1W5256v0qneyy/AFbtgXX2PzHoXUMajoc+Q8=
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:32 2026 by rpki-client