
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json)
Hash identifier: 4tqeMwSwxzunN+myFxIL8xyLv13y4WfMCLT4DudpVgA=
Subject key identifier: DA:6D:9E:F6:B8:57:F8:02:49:9F:C1:4B:E4:35:8A:35:62:03:06:3A
Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F
Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F
Certificate serial: 797047F004B03DD4DE60148E0F48B0670AE5FA7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
Manifest number: 013E
Signing time: Sun 01 Mar 2026 11:20:44 +0000
Manifest this update: Sun 01 Mar 2026 11:15:44 +0000
Manifest next update: Wed 04 Mar 2026 16:58:44 +0000
Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: loQPapFJ9Ipctby3IJWb8pURRJ51lj1w1tpGadMLJKw=)
2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 942czowzjJh0U0LSw2/9UwfW1RkF7wxSGzzd06JKS0Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl
rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 16:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:70:47:f0:04:b0:3d:d4:de:60:14:8e:0f:48:b0:67:0a:e5:fa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F
Validity
Not Before: Mar 1 11:15:44 2026 GMT
Not After : Mar 4 16:58:44 2026 GMT
Subject: CN=DA6D9EF6B857F802499FC14BE4358A356203063A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:12:73:7b:46:12:e0:2d:26:05:00:bb:7a:
49:b6:2a:f3:24:13:bb:13:72:6b:eb:b9:e2:37:99:
3d:66:eb:42:85:c2:48:4f:04:08:c8:f8:b3:3f:9a:
a3:80:2f:fc:cb:52:71:1f:0e:11:94:93:73:ca:73:
01:a9:31:20:fa:55:e1:07:56:ca:66:91:ed:c0:e4:
7e:8a:2f:35:a5:e9:b5:e8:de:e9:53:0a:3a:b0:d6:
af:60:3e:bb:82:cb:e5:05:9e:bd:ac:07:14:8d:bb:
c5:77:70:9a:42:97:9c:ef:87:0f:78:be:c5:64:e2:
f5:f6:d6:08:f6:b5:22:95:09:8e:89:8c:33:ef:cb:
4f:ac:e2:ca:d6:df:83:c2:db:05:20:79:de:06:df:
43:5a:c2:54:fb:1b:58:56:80:a5:a1:b5:71:5d:61:
1d:d4:f4:24:82:52:63:55:2b:c7:57:42:6f:59:e4:
c1:6c:e9:29:06:3b:15:69:c0:6c:12:50:2f:c9:b8:
ed:31:57:e8:f9:66:e9:ca:ea:5e:f0:fc:bd:13:6a:
bd:cc:7b:f1:b0:83:06:83:4f:2e:7e:39:3d:6b:4e:
ad:67:7a:9d:2d:81:d6:85:2b:46:bc:e8:6b:35:96:
58:c5:19:4c:ba:89:21:bd:7f:4c:2c:9e:56:ec:b6:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:9E:F6:B8:57:F8:02:49:9F:C1:4B:E4:35:8A:35:62:03:06:3A
X509v3 Authority Key Identifier:
keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:54:75:92:93:f4:d0:13:94:49:07:61:1b:8f:60:3a:90:
7c:c6:94:db:40:2e:35:b0:8e:e1:13:7a:2c:fc:a4:c1:10:cf:
bc:41:24:28:23:e9:ff:fa:7e:6e:14:a0:37:35:0e:8e:5c:d2:
98:4f:dc:67:8a:90:d2:4f:da:cc:ab:4f:ad:d0:39:bf:6e:0a:
7d:c8:2a:ff:d7:63:55:89:04:e6:a9:99:a9:0d:cd:6c:a5:6b:
ce:55:d2:be:0e:9c:19:41:ec:c7:74:b0:d5:10:2e:82:d2:b8:
93:0b:55:14:aa:f8:3d:44:29:26:cf:30:8b:2a:a2:c3:bd:e7:
56:8f:b4:6e:eb:2a:ee:cc:cb:2c:01:70:8f:9e:25:06:15:e2:
dc:d7:e6:69:be:0c:f6:c8:2c:07:71:0e:0d:22:fe:3f:48:10:
3d:bd:a3:cd:2a:e7:58:46:11:c1:30:52:f6:df:6c:20:83:32:
41:76:d8:be:50:11:41:46:57:0d:af:09:b8:11:2f:b2:71:6d:
e5:44:89:10:a9:9d:b2:ee:85:43:c7:49:c6:a3:e7:54:ac:36:
0d:7f:3a:2a:29:82:c6:c9:d1:9d:cf:1e:7c:44:be:2d:40:ea:
3d:5e:8f:2b:67:67:69:90:69:11:da:26:57:ae:05:5c:a2:17:
46:6d:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:25 2026 by rpki-client