
$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json)
Hash identifier: NPdZ0OJ5LXQrq2h8vzSo8actx4mQ9po0Nk/eofpFRgQ=
Subject key identifier: AB:5E:0A:29:A2:9C:7D:3C:B7:71:64:5B:BB:86:80:90:0B:43:FB:4E
Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85
Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
Certificate serial: 45134A72EA5606C9D53BE127C7854BF41726538A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
Manifest number: 0227
Signing time: Fri 17 Apr 2026 08:41:53 +0000
Manifest this update: Fri 17 Apr 2026 08:36:53 +0000
Manifest next update: Mon 20 Apr 2026 14:13:53 +0000
Files and hashes: 1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=)
2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: mLDopU83RY4OljaM/qMZ/2OBXNYYaWYRy267QQCE/2Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl
rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 14:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:13:4a:72:ea:56:06:c9:d5:3b:e1:27:c7:85:4b:f4:17:26:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
Validity
Not Before: Apr 17 08:36:53 2026 GMT
Not After : Apr 20 14:13:53 2026 GMT
Subject: CN=AB5E0A29A29C7D3CB771645BBB8680900B43FB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:11:ed:9e:65:7c:92:7b:b2:2b:47:8d:1c:
3d:7a:16:2e:ca:76:c6:ce:4b:45:fa:ae:6e:ee:e0:
c4:ac:3f:a5:72:19:24:7a:a7:87:94:1a:49:44:25:
81:f8:0a:fc:a2:ae:97:b5:05:f0:eb:5f:ff:02:d1:
67:37:94:f9:01:04:5b:da:f0:a2:8f:fb:44:24:bf:
19:fe:fa:65:38:c7:89:c0:6a:c7:2d:a5:b5:95:4e:
46:80:3c:58:3f:df:8a:08:b5:7e:06:50:24:06:d5:
83:ca:cc:a2:5a:56:a3:77:79:4a:ed:64:0b:08:c5:
26:36:d4:02:9c:da:27:18:a0:f7:94:16:e6:39:6a:
4b:25:14:19:ac:dc:95:5e:48:55:30:66:36:64:93:
6c:2a:7e:38:af:76:88:c1:37:96:67:e0:e9:54:20:
e2:15:bc:b1:e8:a8:bc:e4:47:51:fc:61:63:49:e1:
d4:e8:a2:25:b2:f9:9e:5e:50:a1:fb:c7:68:7a:b9:
f1:b7:a1:0b:19:d5:8f:7f:7a:3d:83:45:41:4b:12:
dd:e5:25:70:f6:c5:15:bd:c4:9a:6a:fc:c5:63:ac:
8f:6c:6c:86:b5:90:b5:0a:dc:3b:cf:fd:78:ff:77:
d2:64:11:31:38:bd:0f:54:35:6f:b3:57:70:b5:2e:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5E:0A:29:A2:9C:7D:3C:B7:71:64:5B:BB:86:80:90:0B:43:FB:4E
X509v3 Authority Key Identifier:
keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:85:4c:3b:54:a3:f4:e8:2c:34:46:a7:1b:a6:97:7f:8c:8c:
87:53:23:7d:d1:09:0e:ce:f4:d4:5e:4c:fb:26:b2:e3:e1:84:
df:b1:ba:3a:a1:1c:a8:13:94:a4:3e:83:66:32:ba:e3:4d:22:
54:1e:53:db:cf:91:b2:1a:e5:22:42:02:df:f8:57:a7:c0:e5:
fa:a7:d3:02:a6:b7:71:50:c4:2b:c3:19:fa:45:1e:1b:2e:69:
97:c6:0c:b0:60:f2:06:9a:ae:cb:7f:73:cc:00:26:be:2a:3d:
25:fe:31:7d:77:ad:33:2c:b6:83:03:b3:ae:8f:b3:0e:97:81:
86:73:5f:19:96:bf:3f:43:4b:96:01:99:ca:27:16:1c:3a:9d:
1b:4b:68:4d:e5:12:92:80:60:29:a7:4e:c7:da:01:f7:27:04:
a3:12:18:4f:08:53:1c:06:05:4b:61:83:9b:b0:74:eb:e0:f5:
ae:3f:4c:8e:98:70:1c:72:da:87:f3:43:3e:be:32:2a:a5:5b:
9f:b8:c3:13:5a:53:1e:39:2e:b5:79:7b:da:ba:b3:84:2a:6d:
34:d1:69:26:d7:8f:33:5d:74:7a:10:b8:4f:41:96:f5:2b:cf:
1c:9c:18:12:16:8c:a1:4a:18:23:69:cd:e3:f7:c0:77:c8:32:
4c:1c:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:18 2026 by rpki-client