
$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json)
Hash identifier: zl+cpkYgL6pVGY0/Zm8AtommrgGZm1hPNTn8vGX84xI=
Subject key identifier: B8:12:C9:39:F4:F8:C1:82:81:06:A7:01:71:6E:05:D5:59:BE:A6:12
Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61
Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561
Certificate serial: 28D82E56C8C8ADF99F72B0DBD2CDA6493F0D4E51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
Manifest number: 0172
Signing time: Sat 28 Feb 2026 00:22:32 +0000
Manifest this update: Sat 28 Feb 2026 00:17:32 +0000
Manifest next update: Tue 03 Mar 2026 09:59:32 +0000
Files and hashes: 1: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: TJPKk6EUcsJ5SrxwhL+4t8nTxBLTWAisPJ6RwbBMMmw=)
2: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: 4g7FCyKoIAcKDnKoinVIDZbyk+0ilB+hanJJOS6EiJg=)
3: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: H1Gb+eiOUICwBUcSb7QWvdT/w9/QaKzCCS+ZZRgMwMs=)
4: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: nwEHa3/WlV/z4/EUCjtnhlcu3D5Y4h6NQPei0E4YMNc=)
5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: Gg4PjaHJJ2ELmK/kINP16QwFpCzFc3eTiKaJ4v4sLgo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl
rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 09:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d8:2e:56:c8:c8:ad:f9:9f:72:b0:db:d2:cd:a6:49:3f:0d:4e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561
Validity
Not Before: Feb 28 00:17:32 2026 GMT
Not After : Mar 3 09:59:32 2026 GMT
Subject: CN=B812C939F4F8C1828106A701716E05D559BEA612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cb:e9:a9:eb:be:0e:2a:29:00:5e:83:f9:0b:
77:29:00:fa:d3:3e:97:e9:1e:86:1e:e8:36:a5:92:
e3:f7:6f:bc:21:e3:4d:f5:c9:59:fe:5e:a3:a2:47:
d7:fe:df:ee:02:8e:83:6e:bc:1a:d9:92:73:78:94:
f4:ee:5d:57:78:97:4b:61:64:1b:ba:7d:f7:0d:26:
6d:4b:7d:60:1c:5d:df:59:76:96:f2:f5:c4:20:3b:
09:41:51:47:dc:b8:da:3f:1b:9c:b7:4e:4a:e5:aa:
99:61:d9:04:81:fa:a9:90:e8:d1:e4:5e:f1:2c:b0:
5a:83:2d:7e:27:bb:ed:10:5c:e8:fb:1b:f4:fd:72:
fb:a3:fd:82:2c:c3:84:fc:9e:5d:88:91:9e:4d:ce:
9b:40:5c:4f:88:97:5a:45:88:a0:bf:12:5e:a8:f1:
78:11:73:73:29:c5:fa:1c:7c:0a:f6:bd:7f:da:95:
bd:b3:ec:d4:64:ab:1c:b7:0b:bd:3d:fb:ef:d4:03:
d1:7c:4a:b5:dc:79:ec:54:e0:06:8a:9f:9c:76:4b:
d3:bc:66:06:71:11:c1:9f:db:b6:80:19:75:82:06:
69:8e:bc:bb:4e:b6:78:da:36:d6:d7:3b:26:c7:d5:
a3:48:b2:41:36:84:32:a1:d7:37:47:e0:54:88:a6:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:C9:39:F4:F8:C1:82:81:06:A7:01:71:6E:05:D5:59:BE:A6:12
X509v3 Authority Key Identifier:
keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:19:d9:eb:96:36:b7:0c:0d:89:b2:0e:5e:61:21:83:8b:fc:
fc:ad:05:f6:c9:b1:8c:d6:f2:be:25:99:5c:13:69:96:d0:2c:
1d:75:07:3a:4a:ed:bc:ac:6d:aa:90:72:ad:a4:88:3d:1f:a4:
db:f2:ee:64:30:aa:36:af:6d:f6:aa:5c:25:af:70:d8:70:88:
b4:9c:c5:d2:55:32:49:f3:9c:da:7f:87:1f:5a:41:a6:6d:9b:
4d:93:0d:f9:30:fc:9f:00:b6:3a:e6:91:d0:9f:26:e6:80:01:
30:62:07:4f:39:7f:95:71:43:70:21:12:5a:a5:07:ef:d4:07:
58:e1:ad:43:fc:37:14:5f:d1:68:f9:7b:14:32:af:fa:7b:af:
57:61:fe:98:2e:d6:66:59:25:d2:ce:2b:3e:01:0e:ed:81:75:
58:4b:1c:99:5d:ca:6c:b5:e5:4b:2c:2e:47:3e:3f:f9:81:b4:
26:5b:ae:eb:f2:b4:c1:79:d8:7c:47:35:d4:24:bd:71:c4:f1:
67:6e:be:4e:22:26:9c:26:76:f7:52:a7:ea:d9:99:1d:d3:d0:
41:34:8a:86:fd:cd:33:30:ba:8a:59:05:63:73:98:72:70:63:
f2:6b:da:8c:40:34:ba:9a:ec:a9:c0:85:51:7b:7b:07:2e:75:
d5:f3:4a:bc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKNguVsjIrfmfcrDb0s2mST8NTlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3
MkZENTU2MTAeFw0yNjAyMjgwMDE3MzJaFw0yNjAzMDMwOTU5MzJaMDMxMTAvBgNV
BAMTKEI4MTJDOTM5RjRGOEMxODI4MTA2QTcwMTcxNkUwNUQ1NTlCRUE2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDey+mp674OKikAXoP5C3cpAPrT
PpfpHoYe6DalkuP3b7wh4031yVn+XqOiR9f+3+4CjoNuvBrZknN4lPTuXVd4l0th
ZBu6ffcNJm1LfWAcXd9Zdpby9cQgOwlBUUfcuNo/G5y3Tkrlqplh2QSB+qmQ6NHk
XvEssFqDLX4nu+0QXOj7G/T9cvuj/YIsw4T8nl2IkZ5NzptAXE+Il1pFiKC/El6o
8XgRc3MpxfocfAr2vX/alb2z7NRkqxy3C709++/UA9F8SrXceexU4AaKn5x2S9O8
ZgZxEcGf27aAGXWCBmmOvLtOtnjaNtbXOybH1aNIskE2hDKh1zdH4FSIpkVVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuBLJOfT4wYKBBqcBcW4F1Vm+phIwHwYDVR0j
BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3
RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE
NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz
MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG
NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACsZ2euWNrcMDYmyDl5hIYOL/PytBfbJsYzW
8r4lmVwTaZbQLB11BzpK7bysbaqQcq2kiD0fpNvy7mQwqjavbfaqXCWvcNhwiLSc
xdJVMknznNp/hx9aQaZtm02TDfkw/J8AtjrmkdCfJuaAATBiB085f5VxQ3AhElql
B+/UB1jhrUP8NxRf0Wj5exQyr/p7r1dh/pgu1mZZJdLOKz4BDu2BdVhLHJldymy1
5UssLkc+P/mBtCZbruvytMF52HxHNdQkvXHE8Wduvk4iJpwmdvdSp+rZmR3T0EE0
iob9zTMwuopZBWNzmHJwY/Jr2oxANLqa7KnAhVF7ewcuddXzSrw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:29 2026 by rpki-client