
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json)
Hash identifier: ZY7buxcsw6BKsw7taVUj79455iT7mXz/d12EcGSnjoc=
Subject key identifier: E6:2F:4A:45:34:D8:69:D9:92:3F:6E:FB:6C:F2:2E:E8:69:ED:99:A0
Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Certificate serial: 0D46800229352526A5D360FD7A8FE9299F01EB19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
Manifest number: 5F
Signing time: Sat 25 Apr 2026 15:21:14 +0000
Manifest this update: Sat 25 Apr 2026 15:16:14 +0000
Manifest next update: Tue 28 Apr 2026 21:36:14 +0000
Files and hashes: 1: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: K2LAgDr18kkttoewrk5NQk5jAIWpK4yTPhrPRRnuUXM=)
2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 21:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:46:80:02:29:35:25:26:a5:d3:60:fd:7a:8f:e9:29:9f:01:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Validity
Not Before: Apr 25 15:16:14 2026 GMT
Not After : Apr 28 21:36:14 2026 GMT
Subject: CN=E62F4A4534D869D9923F6EFB6CF22EE869ED99A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:6a:d2:e0:77:45:de:e8:85:72:60:3e:68:
f8:a4:a6:1e:38:f6:ea:1c:36:3f:c1:ca:54:36:87:
1c:8f:f6:30:0d:50:80:f6:c2:36:3a:d2:78:2c:73:
39:9d:8f:ea:2a:92:cd:f4:a2:05:a9:d0:bd:fb:f4:
bf:16:32:23:dc:c1:d7:78:f3:5e:a9:04:8a:47:2a:
60:9b:e5:c7:a6:95:a0:4d:16:c2:dc:a7:4c:41:92:
f2:11:8e:3b:b3:5e:7e:f4:47:05:cd:6a:5a:75:d4:
d3:2c:27:cc:11:b2:ce:c8:ee:d2:e7:96:c8:71:a0:
3e:84:22:69:97:2a:d7:2e:9a:21:53:2d:98:21:8b:
18:08:41:4a:d6:53:f6:d5:09:f0:b4:9e:f5:a3:67:
7a:18:f2:b9:92:66:18:ee:5c:a4:08:18:67:68:48:
c3:ae:9c:bd:ed:cf:3f:3d:1d:b4:67:bd:b3:4d:97:
bd:05:c3:cb:ef:7e:d5:c8:49:7b:8b:06:31:f1:b2:
38:81:fe:f1:24:fe:98:6f:97:8a:f6:85:d4:79:90:
d9:83:ed:d2:6d:bf:25:8b:18:89:d6:94:d6:de:ab:
9c:26:6e:88:bc:2e:5d:5a:eb:e6:c8:7c:e5:09:b8:
fa:4b:66:3f:ea:96:cc:e4:3b:78:6d:e7:c6:64:56:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:4A:45:34:D8:69:D9:92:3F:6E:FB:6C:F2:2E:E8:69:ED:99:A0
X509v3 Authority Key Identifier:
keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:31:b6:4f:0f:93:46:d7:3d:4b:9e:42:b0:18:bd:2b:97:ee:
b6:32:a0:ab:12:77:14:29:ad:fb:25:97:63:14:a5:c2:6d:a5:
11:d2:5a:51:f6:35:ee:3d:f3:dd:d5:b2:6d:dd:50:8a:40:db:
61:9e:4f:c7:85:e0:75:2f:dd:8b:8d:1a:0e:03:b1:2d:13:2b:
06:d7:f6:d9:85:ee:0a:09:4f:ae:ae:40:f6:14:46:0d:4e:3d:
8a:43:7e:db:c0:c5:84:bc:a3:cc:12:40:38:52:dc:2c:0b:da:
89:34:ad:60:c6:a5:40:b5:51:b2:cb:fc:f5:a9:06:ef:c8:e5:
17:6d:a2:f5:35:5e:35:da:73:c3:f0:cc:28:3c:63:57:fe:23:
f4:4a:5e:a7:b4:83:9f:07:eb:a7:e3:5c:08:cd:bd:84:58:1c:
80:c1:a9:05:ce:5c:d5:18:a6:d3:d9:2a:00:94:4b:af:cc:85:
bc:1e:5f:21:dc:13:c2:c7:f9:89:56:26:b7:d7:fc:61:38:02:
6c:19:01:21:ef:43:45:97:05:88:85:87:ab:e3:1f:09:0e:94:
1f:fe:92:9a:cb:1e:b9:05:ec:ea:74:d5:b6:da:92:bc:d8:e8:
17:12:80:8d:cb:f2:24:2e:2e:56:8b:0c:06:c0:54:b6:6e:1c:
e0:f5:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:46 2026 by rpki-client