
$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json)
Hash identifier: QRk1YvgNIbve2zHXqlUO5wnUmzoXcCVCpMOPRlRLImk=
Subject key identifier: 43:13:41:32:F5:38:0F:8A:E2:70:0F:45:EB:E3:A4:2D:E5:28:75:0B
Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21
Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
Certificate serial: 0C8E8C5B55CF95D1F6334213679960052FF416D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
Manifest number: 033A
Signing time: Fri 17 Apr 2026 15:52:36 +0000
Manifest this update: Fri 17 Apr 2026 15:47:36 +0000
Manifest next update: Tue 21 Apr 2026 00:44:36 +0000
Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: XRIxRuwmZRfsHhM5U0cm9H8E/wSvzpSd3dAaXNLlXNI=)
2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=)
3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl
rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 00:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8e:8c:5b:55:cf:95:d1:f6:33:42:13:67:99:60:05:2f:f4:16:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821
Validity
Not Before: Apr 17 15:47:36 2026 GMT
Not After : Apr 21 00:44:36 2026 GMT
Subject: CN=43134132F5380F8AE2700F45EBE3A42DE528750B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:9f:8d:79:84:8a:74:09:ec:ce:a2:c3:6b:
fa:34:ff:e9:a4:c0:a4:8a:31:0a:27:d1:5f:cf:08:
83:60:2a:0e:f0:e8:0a:49:95:24:24:90:80:ec:33:
94:b5:97:9f:c3:7a:3b:ae:0a:0e:c1:b3:91:a4:90:
29:48:a4:09:b9:19:39:e4:ad:13:3a:57:a1:6d:7d:
4c:e3:44:21:be:7f:8a:94:38:3b:6f:e2:97:e9:88:
89:ac:9a:0d:58:9b:4a:0f:d2:c0:3b:14:d1:0d:10:
3e:8a:83:9d:48:5e:34:c3:b0:c3:ae:39:e2:56:4e:
78:dc:1a:a5:db:c3:b6:94:d0:3c:45:f9:63:4a:01:
29:e5:4a:81:fa:90:f3:11:c5:ff:02:6f:b6:6f:e7:
00:00:7d:34:c7:13:53:4f:5a:3e:8d:a3:4d:a2:96:
28:bd:97:85:e4:c4:13:d4:d5:62:37:c2:80:f7:da:
4e:e9:f7:77:57:3c:81:18:5b:91:bb:46:f5:ec:0f:
19:78:61:7d:e5:ad:d8:27:46:6c:71:cc:70:66:6b:
f5:9d:7e:58:04:16:68:4f:45:27:36:50:55:0b:2a:
1d:54:20:91:45:55:23:14:ac:d7:70:89:a1:90:1e:
6b:89:c1:ea:12:94:8c:74:b5:8f:81:f0:f0:49:a6:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:41:32:F5:38:0F:8A:E2:70:0F:45:EB:E3:A4:2D:E5:28:75:0B
X509v3 Authority Key Identifier:
keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:e7:4c:2f:90:1d:4e:51:54:8b:c8:b9:62:69:50:3a:bb:
03:35:3d:80:4e:b1:02:16:48:a0:6d:4b:02:33:17:f3:1b:bb:
44:40:19:92:58:95:b4:ad:e0:b9:69:03:fe:ef:ae:f6:ac:75:
f3:f9:a2:ca:1b:35:c9:a8:2b:12:6f:70:37:35:af:e8:75:17:
04:46:27:d5:52:a3:b6:fb:d3:9f:b5:ba:3d:7d:36:ef:13:9d:
c9:8e:a1:63:e5:6d:b6:f5:ed:9a:db:09:f8:ce:8f:3d:45:39:
65:1b:0b:7e:94:d0:6e:13:9d:a3:74:d8:dd:93:47:4a:7d:ff:
1a:12:dd:60:f2:e8:57:54:9d:40:54:39:db:9c:6f:1b:30:c7:
ab:10:1a:34:63:76:92:ae:f7:35:6d:0f:3a:3e:ab:d3:74:72:
69:d2:ff:44:c9:af:44:e0:d2:6a:ac:e7:52:f7:6f:67:3e:64:
7b:46:a3:c1:c7:8a:63:ac:ea:34:23:39:ee:db:85:79:89:10:
71:9c:ec:ba:1f:d0:fc:3d:b7:4d:e2:49:32:4c:99:46:2f:9c:
f9:2a:ab:ed:10:bb:fc:d0:18:a8:8c:85:42:c6:00:04:10:18:
58:0a:04:3c:73:71:4b:b5:87:93:97:94:05:b4:e7:55:19:3f:
03:72:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:21 2026 by rpki-client