
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json)
Hash identifier: MdO1fTNrNvOhsQQ+e39Bh3sM3teEtBR1ajRZeVxyekQ=
Subject key identifier: 5A:EB:15:89:7E:1F:D5:20:7A:F3:E2:B4:81:85:54:39:1D:39:D7:4F
Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Certificate serial: 5BC66E2949C6C33E637EBDA2796C8FC625C47F70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
Manifest number: 025B
Signing time: Wed 25 Mar 2026 13:11:44 +0000
Manifest this update: Wed 25 Mar 2026 13:06:44 +0000
Manifest next update: Sat 28 Mar 2026 17:30:44 +0000
Files and hashes: 1: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: UNPDIojRbXRNmYZ12WvQ4WTxlm6xYqmNmoRe7LP1rhs=)
2: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: o9HU0CrVTQycJgLZz8HUkkMxGbR9NaWzzFPR3fhFim4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 17:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c6:6e:29:49:c6:c3:3e:63:7e:bd:a2:79:6c:8f:c6:25:c4:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Validity
Not Before: Mar 25 13:06:44 2026 GMT
Not After : Mar 28 17:30:44 2026 GMT
Subject: CN=5AEB15897E1FD5207AF3E2B4818554391D39D74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:5a:30:8a:14:a3:88:d4:c0:85:40:0f:3d:
b4:85:15:7e:3f:48:95:d3:87:6e:a5:48:31:78:54:
ec:67:d8:0e:b0:7c:34:67:b6:ad:cf:d9:5f:9a:2c:
bb:cd:1d:43:91:d4:03:dd:90:4e:92:64:5c:1a:50:
bd:3a:88:11:37:75:41:7e:22:d6:e7:39:fe:83:f8:
f3:ec:a1:ad:84:61:db:50:6e:1c:00:1f:1d:a4:2f:
f6:94:8f:5b:a4:d8:e3:f9:34:79:1f:f8:39:5c:9c:
7d:6b:f3:41:fd:44:ca:14:cb:ad:93:01:88:b5:77:
82:8c:27:54:8f:97:26:2f:9a:87:90:0e:a4:4e:7d:
fe:9c:a3:cf:0a:b3:50:74:01:9c:da:a3:d9:e8:d5:
e3:01:4d:78:02:7c:7f:8c:9d:c7:3c:5a:44:ee:80:
26:0c:09:13:56:e9:37:af:af:6e:e0:df:45:8a:bc:
f4:c1:72:97:37:bb:ea:f2:51:62:81:2f:f3:bb:3d:
30:0e:99:f0:4a:77:97:cb:1a:04:85:1b:c5:a4:42:
5f:bb:09:1e:fe:c9:73:94:2d:28:63:02:93:1f:7d:
9c:07:79:5a:10:f6:1b:ac:a1:a8:6c:0b:51:42:a7:
d6:e3:83:87:d1:a5:9c:e2:9d:cc:42:f5:48:75:ce:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:15:89:7E:1F:D5:20:7A:F3:E2:B4:81:85:54:39:1D:39:D7:4F
X509v3 Authority Key Identifier:
keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f8:07:78:62:3a:30:48:23:ed:22:5e:04:be:9c:48:4d:bb:
18:0b:b1:63:6d:4c:b8:b8:ef:f1:2c:b6:b8:6c:6b:c5:2c:d6:
11:ec:14:3c:87:1a:2d:97:bd:94:3c:2a:31:50:ee:98:0c:ab:
c1:af:f2:a6:7f:c2:1e:af:41:de:be:a4:85:a7:6d:b9:14:47:
0e:f6:86:44:0e:00:24:26:3a:c1:60:8f:76:5c:4c:ff:52:51:
c0:91:ac:1f:ad:c6:ed:d7:8c:71:00:5e:a0:3c:71:62:fe:53:
14:ff:12:a0:87:c5:49:e5:ad:6b:04:fb:72:6e:cc:9b:4c:98:
d9:28:65:ac:db:c1:e0:93:ba:5d:d4:aa:bb:fd:20:63:72:d9:
cb:fc:00:f7:9d:df:6e:6c:25:20:63:db:31:eb:8b:f9:c9:67:
12:bf:a4:5b:a4:01:ac:69:ae:39:6c:72:53:86:11:a2:07:14:
bd:52:a7:05:31:70:b8:8c:90:ca:00:01:10:d3:4f:94:75:17:
d2:9d:d0:51:0c:30:0d:52:60:e8:0c:b9:7f:c2:97:18:5a:fb:
22:7c:06:73:27:1c:9f:f7:1c:4e:05:65:ad:20:48:d2:b6:9e:
5a:e8:0e:d5:90:30:cc:f6:24:be:1c:94:52:0d:6c:2f:60:93:
f0:37:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:36 2026 by rpki-client