
$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json)
Hash identifier: xVzc/EmYaBVZDnu7hm5seaksijmnBjJOrX5yiDdFzfY=
Subject key identifier: F4:D2:C4:19:7A:E2:72:F4:70:C3:E6:66:E0:6F:1A:FD:C1:A3:BC:21
Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93
Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
Certificate serial: 3B32D51FA2B3FD754FF720CB997B18ACFE5D45B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
Manifest number: 0119
Signing time: Mon 02 Mar 2026 04:42:30 +0000
Manifest this update: Mon 02 Mar 2026 04:37:30 +0000
Manifest next update: Thu 05 Mar 2026 15:39:30 +0000
Files and hashes: 1: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: u5dp8tub4zzDxVmtXfxen9gQX5VJby6JrCs5UT1iCNA=)
2: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl
rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:d5:1f:a2:b3:fd:75:4f:f7:20:cb:99:7b:18:ac:fe:5d:45:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
Validity
Not Before: Mar 2 04:37:30 2026 GMT
Not After : Mar 5 15:39:30 2026 GMT
Subject: CN=F4D2C4197AE272F470C3E666E06F1AFDC1A3BC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:89:cc:a1:43:d3:8c:4b:dc:f9:40:72:21:
57:04:49:57:01:fa:68:b9:ed:26:8a:c5:e5:bf:56:
d7:46:46:57:4c:55:df:22:60:27:9c:c9:2f:75:05:
2d:00:b2:f7:00:1b:41:e5:e4:cf:e9:b4:86:b7:88:
15:e2:6f:48:48:85:71:d7:47:fc:a8:aa:45:28:91:
4a:bf:90:a2:8f:7b:96:e4:5e:c1:ff:95:6b:8e:25:
a4:46:ee:10:f5:55:be:0f:bc:55:80:ca:57:b2:94:
e1:13:9c:80:6f:29:30:7d:86:81:de:72:be:d7:e9:
cf:eb:a1:2e:6d:cb:12:04:b6:ff:28:cc:9d:e8:3c:
ba:5d:a1:e8:1b:3f:24:38:fc:c4:49:b5:ea:90:0b:
35:cf:51:d0:63:c4:dc:80:8e:b8:d2:fa:ad:1c:08:
72:5f:6a:84:5b:fe:29:29:b9:db:62:cc:48:11:72:
c0:e0:ff:8c:d5:d4:c1:41:93:66:34:ef:d6:58:18:
21:11:d9:af:21:20:84:08:3c:f3:57:d3:cd:85:db:
d7:7a:58:fd:75:c3:48:98:ec:14:c2:b3:c3:4a:e2:
55:6f:c9:a9:37:91:07:20:42:41:3a:ba:1b:b3:02:
fa:62:12:7d:b5:a3:aa:88:95:ef:a6:0c:c5:14:bd:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:C4:19:7A:E2:72:F4:70:C3:E6:66:E0:6F:1A:FD:C1:A3:BC:21
X509v3 Authority Key Identifier:
keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:bc:cf:9d:6f:41:54:48:80:4d:e5:0c:c9:6f:5b:0f:6a:
fd:50:03:00:92:5d:04:99:ce:ef:a1:ef:67:c5:d4:b9:6d:ed:
f7:e3:8f:62:9c:4d:89:17:4a:d9:88:ae:9f:ca:4c:91:21:65:
a0:be:39:86:72:d0:6b:01:c1:73:bb:34:5f:e5:88:4c:55:96:
c4:04:ae:40:f0:d0:af:f9:da:b7:15:d9:65:dc:49:c6:40:9b:
6a:3a:d9:b2:68:95:41:40:da:4d:86:52:06:66:da:d8:a0:c8:
03:61:e8:86:28:0f:80:71:5e:1d:b8:51:e7:cb:c8:ea:b8:dd:
14:0f:8d:5c:97:d1:de:f1:af:f8:60:cc:61:94:ad:5a:43:75:
2f:9a:14:d2:60:2d:a3:93:68:f1:1a:89:63:9f:b7:fe:97:27:
98:4d:0b:9d:88:a6:bd:d5:b3:9e:cc:8e:40:af:1d:24:70:18:
df:89:fc:2a:43:c2:94:21:31:eb:c9:59:2e:f4:52:11:e7:34:
21:9b:3f:b2:c0:f5:08:11:fa:aa:64:43:3f:df:9d:bc:f0:d7:
9e:3e:d9:65:5b:dd:b6:aa:0e:9b:a2:97:ae:57:3e:f5:d1:b7:
18:b1:c4:80:e3:c5:e1:6f:71:de:83:f0:8c:13:28:10:fa:a2:
98:56:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:41 2026 by rpki-client