
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json)
Hash identifier: 95mYqEAS8KcSFEgRjna556JeRMfjq1g20WFwsqvrrIM=
Subject key identifier: D4:B5:A1:6D:AD:3D:7C:2C:6F:91:E2:56:9D:12:9E:F1:FA:06:7E:14
Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Certificate serial: 2243260EE7D46D3F768D4E176F5CA78F175FFF56
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
Manifest number: 0247
Signing time: Sun 01 Mar 2026 15:01:32 +0000
Manifest this update: Sun 01 Mar 2026 14:56:32 +0000
Manifest next update: Wed 04 Mar 2026 15:18:32 +0000
Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=)
2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=)
3: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: PJTDyjOohLqS3f0WO9D/JoU8wFr6qICVfVH0e5VvU5g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:43:26:0e:e7:d4:6d:3f:76:8d:4e:17:6f:5c:a7:8f:17:5f:ff:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Validity
Not Before: Mar 1 14:56:32 2026 GMT
Not After : Mar 4 15:18:32 2026 GMT
Subject: CN=D4B5A16DAD3D7C2C6F91E2569D129EF1FA067E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:69:6b:2c:13:2c:86:f2:80:a0:e0:c0:3b:
80:ce:79:b6:6c:e5:8b:13:eb:4b:1e:d2:1c:f1:4b:
d5:85:ea:90:7b:20:c0:e6:8b:96:77:9f:85:b5:7e:
fe:2b:d9:a9:7b:d7:e6:ed:1b:df:3f:38:f5:4e:b6:
72:e6:ab:6b:4d:b0:4e:d5:32:61:ff:16:d0:92:a1:
9b:08:e0:e7:7b:6f:b1:03:4e:dc:58:c4:f4:20:ae:
46:fb:50:eb:02:bd:32:e0:40:5f:ad:dc:0d:55:0d:
b7:24:96:a8:fb:bf:2d:5b:ac:69:14:5f:34:d9:60:
1f:b7:50:2c:90:24:a7:f9:a1:8f:fe:43:b1:fb:f9:
a7:99:9b:7b:7d:0f:41:7a:2e:c3:7e:69:3d:c0:69:
41:17:41:b5:66:23:c9:9a:b3:c6:f0:92:5d:36:86:
a4:49:43:3a:82:7c:45:39:da:11:90:02:16:43:3f:
65:18:bf:96:25:22:29:ca:13:c4:22:85:d9:c6:09:
83:f7:ac:09:a1:1e:6d:0e:6a:db:cd:02:a6:6d:bf:
62:34:8a:ee:58:d2:94:1b:07:60:6f:e1:e9:be:83:
7a:4b:ed:67:2b:9a:b9:77:fd:df:e1:eb:07:f0:45:
f2:97:39:13:76:50:86:cf:bb:e7:53:04:c1:1f:e5:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:A1:6D:AD:3D:7C:2C:6F:91:E2:56:9D:12:9E:F1:FA:06:7E:14
X509v3 Authority Key Identifier:
keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:35:b2:f9:e4:d9:e7:58:3f:7c:f4:d9:dc:cf:ab:a8:ff:ad:
a5:48:d0:44:56:02:c6:b4:63:07:c0:02:79:0c:dd:fb:e0:54:
a8:b5:1d:f4:b4:73:4e:58:c8:bc:e6:33:dc:db:cd:60:63:b8:
01:09:84:17:74:6f:c8:a0:78:07:8c:f7:31:01:7c:8f:39:15:
76:dc:b5:b0:28:a6:3d:40:52:e8:74:21:a4:f3:b6:4b:b2:67:
73:e8:4a:d4:bd:21:63:0a:e2:ef:1b:c3:ce:f7:0b:5f:ad:e5:
df:09:f4:59:75:d9:43:56:8e:db:fb:ba:8f:60:20:93:33:07:
b8:e3:6a:1a:92:d3:e6:bb:0b:2a:49:20:a0:11:ce:8d:0f:ee:
fb:85:c1:b9:5a:fc:74:37:8f:4a:43:b0:8a:98:ed:0e:ca:33:
b2:6a:7d:50:64:8f:73:74:53:87:a0:97:1b:5e:4b:06:0b:47:
12:c8:78:93:96:2f:c7:33:c3:da:a9:b4:21:9c:5e:7a:9a:e1:
0d:71:c1:9e:e7:73:6f:34:48:fd:b4:02:4f:23:58:c1:28:86:
1c:36:32:81:98:55:e5:10:5b:f0:47:cf:33:e1:bd:bc:92:98:
0e:88:a9:63:81:dc:82:6e:80:2c:c0:76:0b:43:a7:ef:10:70:
93:8e:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:51 2026 by rpki-client