
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
File: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft (raw, json)
Hash identifier: CPq1+uOy5VOnuu+fiQHoq0ytmKvZzl3NgxVt194ClN8=
Subject key identifier: 16:47:D1:A4:C2:6D:4E:7A:7B:CA:B1:82:3D:BA:7A:38:12:B5:18:C5
Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0
Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0
Certificate serial: 2906213B014B6A509F800B4E8071A456D7B3225F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
Manifest number: 055D
Signing time: Wed 25 Mar 2026 09:22:06 +0000
Manifest this update: Wed 25 Mar 2026 09:17:06 +0000
Manifest next update: Sat 28 Mar 2026 17:32:06 +0000
Files and hashes: 1: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl (hash: u77dOh/ehukjMgDP1crlqt4NvR7kVwvsbS4YWVoo+Ys=)
2: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl
rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 17:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:06:21:3b:01:4b:6a:50:9f:80:0b:4e:80:71:a4:56:d7:b3:22:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0
Validity
Not Before: Mar 25 09:17:06 2026 GMT
Not After : Mar 28 17:32:06 2026 GMT
Subject: CN=1647D1A4C26D4E7A7BCAB1823DBA7A3812B518C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:2a:4c:1f:c7:79:03:a4:f2:3f:9c:86:3c:
29:4c:e6:30:bb:21:d1:cc:73:f9:a1:bf:74:4b:2c:
65:83:0e:fa:f6:74:22:95:bf:f1:32:3d:89:24:6b:
68:f0:f6:86:13:6a:94:fd:4b:b4:b8:28:1d:26:55:
ba:34:1f:45:40:0e:83:3c:2f:7f:51:bc:b1:0b:27:
a4:42:60:0e:02:d7:02:13:34:d5:e1:58:67:0d:f0:
14:6a:0f:b8:12:4f:7e:b6:f2:4c:2a:26:1b:e3:f3:
71:64:2c:45:78:01:06:3b:4a:5c:57:fb:c7:8f:fb:
aa:4d:99:94:17:b2:b3:c5:43:56:85:5f:42:c4:82:
f0:e4:83:d6:36:ed:ab:c2:56:de:d8:f2:8c:41:d5:
2e:d0:85:1d:84:b5:65:0b:0c:07:fb:03:1a:a3:bb:
ce:2e:46:1b:cf:44:05:e2:10:1b:97:c7:03:9c:b4:
8c:5b:43:2f:1c:2d:93:f7:d6:28:cc:a2:8c:99:14:
e9:9c:8f:9a:3d:fc:78:fa:ad:28:86:cc:5b:91:4a:
21:9d:e5:40:12:c6:17:89:f8:8d:d2:2c:5e:9d:b8:
65:3c:0e:f8:33:71:35:9c:51:7f:52:4d:a7:b5:72:
c8:87:f3:a9:94:32:c3:a2:bd:53:a8:0e:6e:be:af:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:D1:A4:C2:6D:4E:7A:7B:CA:B1:82:3D:BA:7A:38:12:B5:18:C5
X509v3 Authority Key Identifier:
keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:3b:a3:f5:37:82:8b:80:01:78:a3:79:2a:4d:7e:97:3c:
fe:2e:5e:f7:c1:5e:38:c0:5b:2e:4c:78:85:a9:f8:6f:e6:04:
97:04:21:12:d3:4c:ca:03:c1:e6:a0:2d:18:db:d5:49:62:ae:
d4:80:73:e1:a0:b7:61:59:4a:29:0f:40:28:1f:c2:7e:54:68:
51:71:7b:c2:5c:b8:7e:3a:a7:fd:3d:4a:ac:c0:bd:5a:d9:84:
27:fe:85:73:34:d2:ca:34:be:10:1f:43:e3:8f:d6:87:64:98:
36:a9:9a:cb:84:33:a6:ed:4b:d6:5c:bd:70:b2:68:4d:04:b4:
42:d2:06:4c:d9:1e:0a:16:38:bc:62:9a:1b:30:72:c6:5e:3f:
fb:be:aa:39:ab:f6:52:59:b3:c9:53:07:e6:e6:c7:65:ab:54:
7a:ab:0c:0a:7a:4f:26:ed:b4:a9:e3:39:45:65:5a:4d:f7:0a:
42:4f:c3:ab:ca:78:2e:a0:67:25:36:3a:e2:09:a5:e7:2d:b5:
0d:e2:0d:cd:b2:45:4f:a5:87:33:e1:ff:c2:a6:46:43:d2:af:
43:e1:59:48:ac:ec:0e:20:94:32:1d:e7:af:23:7e:d1:91:64:
3e:47:61:1a:0b:6d:ad:4d:ec:98:d7:0a:49:96:a9:e5:5f:2b:
c6:47:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:31 2026 by rpki-client