
$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json)
Hash identifier: z9aq0OLwSo63xrOyNpyzZczS0I1XTw5ShaoTSjpGk+4=
Subject key identifier: 25:6B:04:D0:50:49:83:D3:54:94:85:64:5C:51:A2:B1:31:35:FC:DB
Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Certificate serial: 55ED6B1B1BDBE5E2130FB1A59899033986ABA4C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
Manifest number: 0104
Signing time: Thu 16 Apr 2026 17:22:27 +0000
Manifest this update: Thu 16 Apr 2026 17:17:27 +0000
Manifest next update: Sun 19 Apr 2026 23:49:27 +0000
Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=)
2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: R1Y77ZwKoKGAPKFbZlrOMNj+OdD7qurM4s+sLi9IgHA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl
rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ed:6b:1b:1b:db:e5:e2:13:0f:b1:a5:98:99:03:39:86:ab:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Validity
Not Before: Apr 16 17:17:27 2026 GMT
Not After : Apr 19 23:49:27 2026 GMT
Subject: CN=256B04D0504983D3549485645C51A2B13135FCDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:ca:23:d1:43:24:40:e2:dd:42:f3:83:1e:
48:eb:4f:a6:75:4b:96:10:79:e0:8a:1b:37:9d:6d:
70:ce:68:16:6a:22:a1:40:26:6a:54:c7:8e:73:1f:
3b:b1:7e:54:58:12:5a:dd:9c:34:91:01:52:17:53:
c2:ee:9c:79:ec:1f:2e:f8:25:bd:04:da:fb:65:76:
37:86:f5:18:58:ab:cb:b9:14:25:d8:6b:26:53:52:
75:c5:97:d5:5f:fb:3f:5d:94:eb:23:68:12:b3:ad:
b5:34:7e:bf:d0:9b:5a:97:91:09:56:a3:f8:b3:25:
26:67:83:7f:a2:d6:67:04:37:8c:71:33:61:dc:8c:
5e:c4:e0:65:37:b4:95:d9:c0:d0:41:0a:7a:38:d2:
34:d2:47:d9:f0:5f:eb:c0:25:1a:6f:e9:0e:7d:8f:
41:91:84:22:2a:df:07:1a:0e:f6:68:cb:16:e9:72:
4a:93:5b:20:40:b7:e9:4e:97:13:c3:b7:58:66:c4:
27:0a:57:19:3e:71:f7:ad:c0:f6:80:f7:1b:18:82:
68:13:3c:ad:99:5a:53:3a:dc:93:38:84:26:0c:c3:
8b:40:84:08:d1:43:85:49:8f:2e:51:c8:6e:28:88:
74:16:c9:99:92:2d:95:53:17:7b:bb:f2:c7:1a:03:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:04:D0:50:49:83:D3:54:94:85:64:5C:51:A2:B1:31:35:FC:DB
X509v3 Authority Key Identifier:
keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8d:74:82:cd:9c:c5:10:10:48:22:1a:83:b7:81:f6:bf:97:
fb:8e:b8:ce:c7:8f:1a:34:be:a1:b1:8c:10:d5:df:af:66:66:
18:58:af:73:13:48:25:db:2b:6a:ff:d6:3d:cf:ad:bf:23:64:
d7:bc:a8:4f:53:49:fa:0d:93:92:96:d1:4d:07:b6:19:ff:37:
85:47:a0:7b:b7:03:f8:70:50:ef:02:5d:5e:19:6d:e6:f4:a3:
0d:05:bf:e1:bf:02:c7:16:df:74:90:7f:85:10:ba:80:c6:d0:
67:dd:5f:58:48:b4:d6:17:dd:15:76:c0:e1:19:a6:6a:33:e3:
e7:e3:a6:8b:51:64:1d:5f:9c:42:24:5e:a6:13:a2:02:5f:3f:
56:0d:d5:ca:af:0c:61:72:e8:e0:8f:48:24:34:46:6f:33:e6:
3d:57:83:ea:fd:81:01:9e:8a:86:84:02:ec:fb:15:95:34:3b:
4e:68:8c:c0:32:e2:5e:95:82:de:33:41:fe:f9:b2:22:c4:6f:
13:ac:77:d3:e9:5f:3c:c1:d4:5b:b7:19:1d:1d:5d:87:84:ca:
70:63:95:b5:28:98:5e:4b:c9:bb:9a:5a:a1:01:a8:6f:21:4c:
7e:94:c5:8a:85:9e:ee:62:10:51:10:a1:40:a5:bd:20:31:33:
55:ab:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:02 2026 by rpki-client