
$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft
File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json)
Hash identifier: T3MvxxMXgf6vtUlkidyCRh6tHWDOSqnplG484t07Gko=
Subject key identifier: 9D:C4:FC:AB:AB:56:F1:CD:0E:65:F8:20:CB:B3:BF:62:41:B7:47:A9
Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA
Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA
Certificate serial: 4930DF615FEA452CD772E774B2B7ECB6C21F9DB1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft
Manifest number: 028A
Signing time: Wed 15 Apr 2026 19:51:27 +0000
Manifest this update: Wed 15 Apr 2026 19:46:27 +0000
Manifest next update: Sat 18 Apr 2026 22:56:27 +0000
Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=)
2: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: AvJn52y9APZUQHx6Q5k3Kl6AeHK+aBVS54x0ZFuP2QY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl
rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 22:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:30:df:61:5f:ea:45:2c:d7:72:e7:74:b2:b7:ec:b6:c2:1f:9d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA
Validity
Not Before: Apr 15 19:46:27 2026 GMT
Not After : Apr 18 22:56:27 2026 GMT
Subject: CN=9DC4FCABAB56F1CD0E65F820CBB3BF6241B747A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:65:f6:26:c8:a7:9e:e4:2b:be:f7:00:f3:
a8:8f:28:35:5d:f0:11:fb:4f:c8:77:31:ef:86:c8:
28:f9:64:4b:b2:5b:16:1c:51:f6:b0:0b:21:93:0a:
74:de:5f:2b:f0:33:c5:8f:fb:f5:4a:ac:76:12:0c:
7a:eb:dc:ab:ff:9b:45:7f:ed:04:00:02:52:d4:29:
58:5d:b5:df:5c:f6:a9:5e:fe:53:e2:36:d7:d1:45:
b5:5d:eb:89:d8:8c:ea:21:92:a7:c6:c5:37:c6:9a:
5d:95:aa:ea:d4:e5:0c:ee:71:26:b6:22:db:f6:76:
a3:ee:65:d2:f8:68:b4:c6:ae:b7:b6:67:a6:0b:85:
eb:d7:26:f7:76:d5:a1:a8:a1:7a:af:ad:06:f2:20:
35:49:be:d7:ff:5e:66:0b:10:a7:58:8a:e2:22:ce:
0a:71:ca:a8:f5:75:09:d5:26:2a:cf:ed:1b:30:c7:
ae:04:64:4d:10:6e:9a:78:39:97:bb:f6:df:ad:75:
ee:f3:d0:24:99:d6:a4:c3:3f:30:a1:a0:4b:94:96:
89:63:b4:6e:5e:f1:46:4b:6a:2e:cf:0a:fb:77:d9:
48:6f:e2:07:17:94:25:31:00:ef:97:92:be:ea:c7:
aa:35:bb:37:1a:74:37:38:25:78:49:b5:ff:34:37:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:FC:AB:AB:56:F1:CD:0E:65:F8:20:CB:B3:BF:62:41:B7:47:A9
X509v3 Authority Key Identifier:
keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:0d:51:9e:fc:45:27:1d:b9:dd:a7:49:0c:46:ce:b8:c2:
ff:75:21:cf:5c:f4:73:b4:48:4e:d6:3f:e1:db:81:0e:9a:be:
5d:c9:f9:e4:ad:54:ea:1a:82:22:ae:f4:41:62:b5:e6:82:3e:
b6:e7:4b:d7:c4:ed:32:ad:1c:80:72:2e:4a:03:6a:eb:20:86:
c0:31:b5:3c:11:8b:06:12:e9:77:91:b0:57:e3:2d:52:9a:52:
85:b6:e7:b0:ed:8b:1b:7a:d3:1c:b9:6c:5c:d5:66:7b:be:e8:
18:2d:7b:72:ce:c1:cd:8d:19:f2:81:61:4f:76:68:93:3a:92:
6e:97:d2:5b:cb:33:c8:f2:26:36:8b:e7:3f:ca:01:c9:75:b2:
43:1d:77:44:cb:08:95:cf:1a:0d:b4:e1:5d:38:18:ca:dc:77:
2f:be:1e:45:44:38:e9:bc:75:fc:c2:54:74:74:24:52:76:6e:
09:da:1d:6a:7e:d6:d0:c1:05:42:e5:3e:eb:a0:70:ee:a1:16:
94:dd:04:fb:f4:38:91:7f:84:02:3a:3d:59:bb:6c:7a:17:4c:
1d:4d:76:5a:bf:37:aa:12:98:b9:f9:8b:c2:37:60:4a:0d:fb:
7a:a3:c6:d1:77:43:1b:1b:f8:87:8d:36:c1:3e:a6:53:f1:28:
57:37:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:43 2026 by rpki-client