
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json)
Hash identifier: v/x/sI4rNbOErRyaL8YzNtxhV+i/2gE3dZWsyDBxO6E=
Subject key identifier: 20:22:25:0B:50:D9:CC:DD:95:2F:2F:35:F4:40:C3:11:9E:F5:C4:BB
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 37BD6ABC9BA47407D7DA044BAF5A987069E20184
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
Manifest number: 0567
Signing time: Thu 16 Apr 2026 00:01:23 +0000
Manifest this update: Wed 15 Apr 2026 23:56:23 +0000
Manifest next update: Sun 19 Apr 2026 00:56:23 +0000
Files and hashes: 1: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: b3cYZ6uz9UDs4sb3q6Yk7EVlQw4zlEDp2CQRZqyQAr8=)
2: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=)
3: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=)
4: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=)
5: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=)
6: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=)
7: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 00:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bd:6a:bc:9b:a4:74:07:d7:da:04:4b:af:5a:98:70:69:e2:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Apr 15 23:56:23 2026 GMT
Not After : Apr 19 00:56:23 2026 GMT
Subject: CN=2022250B50D9CCDD952F2F35F440C3119EF5C4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:b8:6d:ec:63:97:ca:e3:94:b9:64:f5:22:
de:13:59:41:85:88:eb:4a:b6:72:47:f0:11:0a:44:
07:87:ec:ed:b1:40:41:7d:20:8c:c3:90:1d:a7:6e:
fd:f2:b0:f5:f4:43:fd:8b:ec:e6:5d:f3:34:d7:7c:
91:cc:0b:1e:f0:ef:58:bc:ea:42:33:e1:21:ac:ee:
e2:5f:49:40:c8:dd:0e:6f:47:28:ee:35:e4:a9:7e:
f0:14:b4:f2:8d:dc:b1:cb:68:05:9a:76:41:43:49:
6a:5f:ff:06:a7:c2:48:7b:2a:9c:ed:2d:0a:47:ed:
0d:29:6b:95:4b:a7:22:34:65:5e:39:1c:35:d2:1f:
00:d0:f6:93:3d:b7:28:b9:a3:1d:f2:ef:01:40:24:
ba:d1:0b:af:88:f5:1f:0c:5c:8d:af:46:53:04:81:
7f:a2:85:01:7c:94:45:9c:dc:93:10:a5:63:58:54:
de:84:3a:04:0c:ca:ed:80:2a:60:01:80:ef:ee:07:
0c:85:cf:15:ac:63:3f:58:2b:7e:36:f0:4a:64:65:
6c:62:0d:43:34:b3:15:fb:c8:2a:4e:03:9f:33:4a:
83:4c:58:6b:ca:ec:08:94:8d:e1:76:f0:64:24:65:
bf:4d:3b:d0:d9:29:7d:70:c3:28:0a:0c:09:95:f7:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:22:25:0B:50:D9:CC:DD:95:2F:2F:35:F4:40:C3:11:9E:F5:C4:BB
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a4:89:5e:d3:9c:60:0c:dd:8b:ba:a9:b4:4e:d4:a1:6c:24:
e4:d2:97:11:fd:6e:c7:6e:76:a3:70:b9:55:09:a2:9c:67:6d:
a3:b2:6f:7f:95:4c:59:ce:1c:c1:12:27:69:6a:57:05:ae:3b:
f4:72:53:30:5f:13:0a:e4:ca:8d:74:9e:a5:da:75:f0:a8:25:
31:f8:b5:e6:ef:60:de:bc:6e:48:d3:a4:17:a3:b7:b4:13:51:
3c:71:2c:74:80:b0:c2:2a:98:14:65:e1:64:ea:81:76:f9:72:
0b:72:2e:50:22:ab:87:ec:2f:d2:f2:59:2c:15:5d:7e:9c:58:
da:34:51:cd:3f:c4:8d:88:42:13:76:1f:9e:99:78:94:a8:fc:
09:f3:f8:42:43:88:37:94:a3:1e:fa:fe:7b:98:72:79:7b:f4:
38:88:37:c6:0c:83:f8:e7:c3:30:a1:1d:cc:dc:4d:b1:2e:85:
20:5e:9a:a2:2b:aa:25:40:2a:1b:58:67:32:77:6e:92:69:a7:
15:41:cf:04:0f:bb:d0:d0:fc:e5:20:52:2c:b9:81:cf:e8:81:
a4:80:61:9f:cc:b4:eb:1b:00:39:55:fc:41:53:b3:5b:cb:6d:
e3:7e:4d:95:98:8f:d2:c2:25:f8:93:81:50:1c:c3:4d:4a:4a:
5d:2a:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:33 2026 by rpki-client