
$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft
File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json)
Hash identifier: DLv3ienXeosqXynncXZZHlOZt8w3Ay61Sijuro1gxys=
Subject key identifier: 9C:98:82:5C:DC:35:CC:36:4D:8A:5B:39:06:C5:F8:0B:BC:22:56:74
Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15
Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915
Certificate serial: 1DA37F6767D7F44903F8CC325AF7B55737FA9E00
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 14:51:41 +0000
Manifest this update: Sun 01 Mar 2026 14:46:41 +0000
Manifest next update: Wed 04 Mar 2026 23:04:41 +0000
Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: cqdT5H5mnGpQrbg619HMRayHDTPv5Usd0KLojSsfmdA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl
rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a3:7f:67:67:d7:f4:49:03:f8:cc:32:5a:f7:b5:57:37:fa:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915
Validity
Not Before: Mar 1 14:46:41 2026 GMT
Not After : Mar 4 23:04:41 2026 GMT
Subject: CN=9C98825CDC35CC364D8A5B3906C5F80BBC225674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:43:71:aa:6e:18:8b:85:d7:ba:02:be:2e:
75:de:05:af:f0:d4:4a:42:36:5b:cf:a3:7a:11:8b:
30:25:0a:39:1e:08:69:af:b5:19:6c:4d:9b:78:1f:
3c:30:cb:77:8b:ac:4f:3c:2d:19:6f:fb:fb:95:6b:
df:68:5f:56:02:5a:b2:0c:28:bb:71:08:22:e8:ac:
b6:b7:6f:d8:5c:fe:ec:0a:cd:41:2b:2c:6b:16:0e:
0d:10:3f:4d:44:38:16:a0:5a:6e:43:ac:bc:54:ee:
31:cb:96:ae:9a:c6:00:0f:a0:d6:a3:a3:02:b6:f0:
38:23:6b:aa:99:99:c8:87:64:b0:c7:cc:4a:bd:57:
6e:ec:cb:ef:1c:9d:16:cb:c6:3e:75:92:3f:df:77:
ed:d5:60:7f:03:cb:03:64:32:ba:40:2b:75:af:f2:
27:63:5f:5b:93:c7:f1:d9:f8:33:47:bc:62:27:dd:
4f:a3:4c:c3:3a:48:3c:52:99:8e:03:fa:27:eb:7f:
56:69:79:b4:de:10:ef:7d:f8:c6:f6:20:5a:2c:0c:
ed:23:27:c4:a5:08:f2:34:25:8d:51:39:cd:85:cf:
cf:63:e4:40:72:a3:4a:69:1f:ee:d5:72:e9:ce:b3:
2f:d8:fa:51:ef:35:b0:3a:e0:9c:22:39:cb:18:64:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:82:5C:DC:35:CC:36:4D:8A:5B:39:06:C5:F8:0B:BC:22:56:74
X509v3 Authority Key Identifier:
keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:c5:48:f0:f0:5d:b0:80:f6:f9:5a:34:b5:39:af:64:f2:
f5:68:13:3e:01:7f:4c:41:d3:e2:15:7f:ce:6c:a6:f4:78:26:
d7:5c:9b:19:c9:00:dc:a4:15:9f:e5:1f:8d:0f:75:93:89:40:
ed:aa:c9:78:62:7c:9b:1f:00:05:6f:3f:c8:3b:b6:b9:a7:e2:
22:b0:18:2c:69:b2:68:f9:5e:99:60:7f:d3:b4:db:f4:5a:d2:
8c:a4:23:ed:0e:a6:ff:33:ba:23:0b:20:96:38:22:38:22:80:
60:f2:6b:70:a0:4d:71:30:1a:d2:7c:4f:32:b7:9a:40:57:4d:
aa:02:65:6d:e1:79:1c:b6:10:b0:eb:52:cb:9a:67:98:0a:d1:
a5:98:7b:11:a1:64:21:9f:f9:bb:ad:01:7a:d6:1a:bb:cd:85:
db:31:7d:8f:02:cc:aa:5d:97:f9:0e:c1:c9:da:66:75:53:8e:
31:0d:14:a6:a2:ab:74:87:a8:92:cc:9d:77:20:57:cc:6e:8a:
e1:b4:c1:69:ac:8a:4d:06:19:26:e4:86:0e:ca:60:61:ea:73:
ca:50:94:84:f8:58:0f:7a:90:8d:d0:4d:ec:c4:26:82:15:16:
0d:7b:64:35:bb:90:47:be:43:dc:2c:ea:40:f6:47:90:b4:f1:
d9:f2:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:52 2026 by rpki-client