
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft
File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json)
Hash identifier: 9wj9NYYeG5yJZV1D2eNZ0Y5ydvgaYAQPkLndcoz85WM=
Subject key identifier: 82:79:78:E1:CF:02:D7:88:94:4A:F0:DA:21:5E:B4:D7:10:ED:6F:AC
Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Certificate serial: 50B1A4AEAA308607D156EF5C24A0AA46B9A63993
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft
Manifest number: 010D
Signing time: Fri 06 Mar 2026 23:21:42 +0000
Manifest this update: Fri 06 Mar 2026 23:16:42 +0000
Manifest next update: Tue 10 Mar 2026 04:55:42 +0000
Files and hashes: 1: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=)
2: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: NdCkCh/xnJDoCMVfUmTBnq8URK1vCWyK293HFpO07OE=)
3: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=)
4: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl
rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b1:a4:ae:aa:30:86:07:d1:56:ef:5c:24:a0:aa:46:b9:a6:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Validity
Not Before: Mar 6 23:16:42 2026 GMT
Not After : Mar 10 04:55:42 2026 GMT
Subject: CN=827978E1CF02D788944AF0DA215EB4D710ED6FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:af:b7:a9:22:fe:79:af:be:ff:b3:c7:2d:
da:32:04:9c:87:31:6f:e1:34:9a:60:d7:9b:e9:1c:
8f:97:a2:99:94:4d:2f:7a:a7:c9:1c:96:2d:7d:4d:
9f:3a:87:f6:f2:8c:f6:fa:f8:22:ef:6f:b6:41:e9:
8e:1c:58:5c:7c:16:ad:ec:ea:a5:a0:e6:3e:11:70:
2e:e5:13:4e:4e:b9:83:6b:9d:31:d8:88:35:86:35:
26:83:6f:46:e4:b8:01:ae:20:cc:e9:fa:ec:ca:91:
4f:83:97:da:2b:b9:db:ff:b4:fa:83:09:ac:39:f5:
91:1b:31:a0:9f:42:f6:4a:45:fc:d4:36:3e:29:8d:
ab:28:7e:07:37:37:8d:ed:3d:f8:57:1a:42:5d:a7:
6c:26:1b:8f:c4:a0:b8:a6:70:19:14:fd:1d:2e:57:
b7:70:75:00:b9:29:d3:0f:eb:94:06:54:87:cd:9d:
2e:a0:fa:64:07:6b:50:de:d4:24:43:04:92:da:54:
d4:a1:99:48:fd:ef:f6:52:ee:6b:83:17:26:ec:75:
a2:87:d8:20:83:df:6a:ca:91:f5:eb:ec:41:99:bf:
b4:3d:3c:0e:b0:60:5f:61:ff:a6:ef:24:f4:32:45:
ce:7e:7d:f2:a8:0d:46:e9:ff:c5:08:52:ac:6c:a7:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:79:78:E1:CF:02:D7:88:94:4A:F0:DA:21:5E:B4:D7:10:ED:6F:AC
X509v3 Authority Key Identifier:
keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:98:28:3e:0a:b7:ba:84:7d:21:a3:3e:0d:ff:92:98:ef:
95:e2:58:5b:c7:78:7a:a2:2a:77:77:f9:3d:de:82:2c:9b:5b:
74:31:a4:9c:9e:4c:02:03:15:e2:78:1b:2b:6a:9c:5c:3d:ff:
4d:f2:47:ad:f1:81:ef:ca:57:c3:17:20:2c:e7:7e:b0:ea:25:
7f:26:96:b0:ac:02:93:6a:9e:ab:85:ec:b7:7c:c8:3d:8e:f4:
8b:25:30:ef:96:3f:c8:67:aa:27:f5:65:6f:98:94:77:1b:eb:
86:84:71:a1:9c:ec:c4:2d:9d:81:b2:f3:b8:ef:f8:9c:60:ec:
e8:31:5f:a0:05:1d:15:91:98:53:b4:9e:c9:d5:d8:5d:20:b6:
b3:15:06:b5:46:2c:66:87:49:b7:92:ec:b0:9b:c2:58:56:33:
84:10:52:47:a7:78:fa:8a:da:43:66:b8:f2:e4:31:78:fa:a0:
b8:6c:ac:a5:d5:5c:3e:de:29:22:ef:be:08:ff:46:d7:a6:a7:
ac:f8:2b:fa:42:c7:38:bc:28:37:13:7b:36:3a:ff:49:cb:d4:
73:d1:2d:da:34:56:ca:79:15:d4:79:58:fd:c4:a8:f3:dd:75:
30:f6:0a:3e:72:5d:dc:a2:ca:97:a1:d1:d9:dd:d1:3a:aa:64:
30:31:54:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUULGkrqowhgfRVu9cJKCqRrmmOZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2
Mjc4MEI3RjAeFw0yNjAzMDYyMzE2NDJaFw0yNjAzMTAwNDU1NDJaMDMxMTAvBgNV
BAMTKDgyNzk3OEUxQ0YwMkQ3ODg5NDRBRjBEQTIxNUVCNEQ3MTBFRDZGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkN6+3qSL+ea++/7PHLdoyBJyH
MW/hNJpg15vpHI+XopmUTS96p8kcli19TZ86h/byjPb6+CLvb7ZB6Y4cWFx8Fq3s
6qWg5j4RcC7lE05OuYNrnTHYiDWGNSaDb0bkuAGuIMzp+uzKkU+Dl9orudv/tPqD
Caw59ZEbMaCfQvZKRfzUNj4pjasofgc3N43tPfhXGkJdp2wmG4/EoLimcBkU/R0u
V7dwdQC5KdMP65QGVIfNnS6g+mQHa1De1CRDBJLaVNShmUj97/ZS7muDFybsdaKH
2CCD32rKkfXr7EGZv7Q9PA6wYF9h/6bvJPQyRc5+ffKoDUbp/8UIUqxsp4tNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgnl44c8C14iUSvDaIV601xDtb6wwHwYDVR0j
BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix
QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4
MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0
NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD
NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAcvmCg+Cre6hH0hoz4N/5KY75XiWFvHeHqi
Knd3+T3egiybW3QxpJyeTAIDFeJ4GytqnFw9/03yR63xge/KV8MXICznfrDqJX8m
lrCsApNqnquF7Ld8yD2O9IslMO+WP8hnqif1ZW+YlHcb64aEcaGc7MQtnYGy87jv
+Jxg7OgxX6AFHRWRmFO0nsnV2F0gtrMVBrVGLGaHSbeS7LCbwlhWM4QQUkenePqK
2kNmuPLkMXj6oLhsrKXVXD7eKSLvvgj/Rtemp6z4K/pCxzi8KDcTezY6/0nL1HPR
Ldo0Vsp5FdR5WP3EqPPddTD2Cj5yXdyiypeh0dnd0TqqZDAxVBg=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:33 2026 by rpki-client