
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json)
Hash identifier: paptnr3BCLJ4zzbdLILuAicm7AK44EY8SObD6eXl+SU=
Subject key identifier: 72:F1:86:97:B9:36:E3:AE:4A:A5:69:84:2C:1D:68:56:84:43:B9:C1
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 0E6FAB0A5BB957875C4E7E74E6BEDDF2E82EC45A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
Manifest number: 0553
Signing time: Mon 02 Mar 2026 06:01:22 +0000
Manifest this update: Mon 02 Mar 2026 05:56:22 +0000
Manifest next update: Thu 05 Mar 2026 13:05:22 +0000
Files and hashes: 1: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=)
2: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=)
3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=)
4: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=)
5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=)
6: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=)
7: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: 7nzkwN00t2bc7uLOy1ay7AWJJ9png0dka/81IvRi7l4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6f:ab:0a:5b:b9:57:87:5c:4e:7e:74:e6:be:dd:f2:e8:2e:c4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Mar 2 05:56:22 2026 GMT
Not After : Mar 5 13:05:22 2026 GMT
Subject: CN=72F18697B936E3AE4AA569842C1D68568443B9C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:08:10:81:fe:f7:14:2a:29:24:b9:e1:9f:
0d:1e:5e:48:23:eb:e2:4c:e7:1b:10:ef:62:b0:23:
a5:a9:09:da:c0:4c:47:ed:e4:6b:81:01:91:f7:40:
9c:a3:39:4d:7b:a2:ab:ff:26:9a:a7:7f:f0:14:c7:
88:a1:5b:52:5e:79:d8:d2:a4:9f:b2:d2:cc:39:6b:
fd:47:f0:c0:f9:3b:57:30:87:99:bc:2c:11:b4:dc:
2c:33:3b:f0:f2:db:ba:a3:32:07:86:d4:c5:25:a4:
44:a1:86:a3:35:e2:b3:56:fd:6f:36:eb:1e:46:4a:
c4:f8:31:c7:bb:35:04:8f:9a:e7:27:e4:b8:29:24:
ed:c7:25:fa:3d:06:96:a7:c2:89:97:61:db:8b:5e:
95:ef:42:55:77:b3:ef:a2:89:a4:e2:21:37:d1:ac:
8e:56:df:d2:7a:fb:f1:62:ac:7b:21:64:17:f3:6f:
13:c8:9b:04:e1:1d:a0:76:9a:be:b8:5b:0d:ea:bc:
fb:64:ef:ec:98:7f:b0:a6:18:dd:1a:7e:bf:83:83:
bc:92:0d:1b:10:61:a0:c0:53:d8:f0:08:68:c0:05:
a2:5f:36:74:94:b5:b3:0d:da:44:87:76:d2:46:03:
a3:ba:26:ab:21:d7:c1:2d:33:41:20:2a:46:bb:95:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:86:97:B9:36:E3:AE:4A:A5:69:84:2C:1D:68:56:84:43:B9:C1
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:a6:7f:d8:60:cf:a4:ea:86:63:a4:cc:67:4d:9a:1e:87:
85:b7:6f:72:52:af:cd:71:ca:e3:f2:03:74:18:60:09:77:2b:
ed:9d:c8:f5:2a:1b:6a:5f:eb:21:da:6d:f9:04:2c:67:eb:28:
a6:47:44:85:91:93:be:df:8d:84:93:2a:31:2c:8c:5e:f8:65:
16:8c:96:dd:f3:f1:f5:10:77:a8:d9:5f:52:f7:cc:6c:68:58:
e4:57:cc:9a:98:5a:59:fd:69:a2:90:58:4b:ad:11:89:f0:32:
13:8f:d5:03:3c:80:62:29:96:62:4b:ad:00:30:d2:61:7c:f1:
91:c3:1a:a5:ed:60:6b:eb:51:99:5f:6c:b3:7f:cb:d6:10:92:
3d:3d:c5:de:12:f8:6b:09:d7:68:50:06:d0:c0:14:57:bc:b1:
c4:f4:0d:c6:f5:74:68:a8:df:96:38:b6:c9:4c:53:2e:76:73:
61:d1:45:d0:71:df:f2:a8:7e:d5:14:a3:b5:20:45:7d:12:26:
fb:f9:84:b9:57:0e:fe:80:95:54:1d:ab:68:02:3c:5c:1a:6e:
67:b3:0b:9e:0b:42:48:b5:d4:be:80:ad:55:ad:05:51:f0:56:
4e:39:14:a5:96:db:3f:e9:ee:32:a8:f6:51:5a:68:23:09:94:
1d:12:cb:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDm+rClu5V4dcTn505r7d8uguxFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz
OTI0NDkxRTAeFw0yNjAzMDIwNTU2MjJaFw0yNjAzMDUxMzA1MjJaMDMxMTAvBgNV
BAMTKDcyRjE4Njk3QjkzNkUzQUU0QUE1Njk4NDJDMUQ2ODU2ODQ0M0I5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaggQgf73FCopJLnhnw0eXkgj
6+JM5xsQ72KwI6WpCdrATEft5GuBAZH3QJyjOU17oqv/Jpqnf/AUx4ihW1JeedjS
pJ+y0sw5a/1H8MD5O1cwh5m8LBG03CwzO/Dy27qjMgeG1MUlpEShhqM14rNW/W82
6x5GSsT4Mce7NQSPmucn5LgpJO3HJfo9BpanwomXYduLXpXvQlV3s++iiaTiITfR
rI5W39J6+/FirHshZBfzbxPImwThHaB2mr64Ww3qvPtk7+yYf7CmGN0afr+Dg7yS
DRsQYaDAU9jwCGjABaJfNnSUtbMN2kSHdtJGA6O6Jqsh18EtM0EgKka7lVcPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcvGGl7k2465KpWmELB1oVoRDucEwHwYDVR0j
BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy
NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0
NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3
MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx
MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJe2pn/YYM+k6oZjpMxnTZoeh4W3b3JSr81x
yuPyA3QYYAl3K+2dyPUqG2pf6yHabfkELGfrKKZHRIWRk77fjYSTKjEsjF74ZRaM
lt3z8fUQd6jZX1L3zGxoWORXzJqYWln9aaKQWEutEYnwMhOP1QM8gGIplmJLrQAw
0mF88ZHDGqXtYGvrUZlfbLN/y9YQkj09xd4S+GsJ12hQBtDAFFe8scT0Dcb1dGio
35Y4tslMUy52c2HRRdBx3/KoftUUo7UgRX0SJvv5hLlXDv6AlVQdq2gCPFwabmez
C54LQki11L6ArVWtBVHwVk45FKWW2z/p7jKo9lFaaCMJlB0Sy1k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:35 2026 by rpki-client