
$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft
File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json)
Hash identifier: tOHOm7LddFWvRXx6GcJ1lygC5B88cN4TmrE0xVa88hw=
Subject key identifier: 67:B2:39:A2:8E:E1:13:90:30:7F:B1:D8:CC:46:0B:74:BD:08:BC:F2
Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62
Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662
Certificate serial: 0B33EC220AE683ADA155A68FF3165460AFA89CFA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft
Manifest number: 011A
Signing time: Fri 17 Apr 2026 16:50:59 +0000
Manifest this update: Fri 17 Apr 2026 16:45:59 +0000
Manifest next update: Mon 20 Apr 2026 22:35:59 +0000
Files and hashes: 1: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: N2GViKlM0WeymbIph4vdC5HAZlVVHP5k/pT4df4W4fY=)
2: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=)
3: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl
rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 22:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:33:ec:22:0a:e6:83:ad:a1:55:a6:8f:f3:16:54:60:af:a8:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662
Validity
Not Before: Apr 17 16:45:59 2026 GMT
Not After : Apr 20 22:35:59 2026 GMT
Subject: CN=67B239A28EE11390307FB1D8CC460B74BD08BCF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:b9:ab:97:ae:06:22:cf:90:79:0a:ca:5c:
ad:23:9c:4a:c5:14:c5:36:62:3b:50:02:55:0a:df:
27:4e:22:ae:00:47:b9:7f:42:fc:33:4a:a8:6d:7d:
e0:c8:55:3c:ec:79:47:a3:fc:95:7b:76:96:78:94:
50:0c:4a:b2:1e:5d:59:7d:54:7d:3a:77:05:b1:08:
5b:9d:d8:6c:c7:85:23:9e:96:2b:9b:ea:40:cc:62:
9a:46:6f:fc:0d:14:93:0d:cb:d7:5d:f5:16:a2:f5:
26:84:11:a7:e8:5d:02:b3:0d:fa:bb:4f:f7:02:55:
8b:ff:76:0b:96:6e:dc:28:b9:47:be:0c:2f:f9:2e:
a8:e4:73:1a:2a:80:d9:34:73:f0:57:76:87:10:82:
17:2a:e6:a3:79:5f:e1:d2:b7:3d:81:40:81:4b:f8:
51:8a:b6:b7:ed:58:3c:7b:fb:f8:c7:cc:14:ee:01:
58:6e:b5:83:34:12:91:69:12:96:69:7c:09:76:a6:
a8:4c:69:85:ef:7f:75:4b:42:e8:55:45:fc:a2:de:
a4:ec:47:f2:ba:78:d1:9e:0b:58:f5:96:33:8b:8b:
78:19:cd:2c:52:2f:9b:a8:bf:67:cb:95:a9:5f:f4:
c1:15:04:21:61:65:08:9d:ed:ae:fc:c0:2d:09:1c:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:39:A2:8E:E1:13:90:30:7F:B1:D8:CC:46:0B:74:BD:08:BC:F2
X509v3 Authority Key Identifier:
keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:06:20:2c:b1:69:c9:ef:2c:53:46:8b:53:e5:23:2e:9b:0a:
a1:f0:5d:7e:dc:84:cb:59:99:86:22:3f:0e:a6:32:1f:35:b5:
f6:c4:7c:ce:a4:e5:ca:9b:a4:b0:1e:09:3f:83:33:e5:21:b3:
69:ea:a5:b4:be:06:fe:c3:9b:01:4d:33:47:5b:c1:8f:45:2f:
11:51:75:19:c5:8d:82:0d:6b:37:89:79:84:9f:dd:18:c2:0a:
a2:3b:ab:75:10:58:cd:ff:00:8e:e5:e0:a6:1c:36:9d:d1:5b:
c6:9e:82:40:ce:14:0a:5c:3a:bd:fc:a6:ce:dd:48:87:7b:c1:
34:15:b9:6f:fb:00:74:87:22:dd:c7:eb:89:05:5d:a3:f4:e1:
8b:b1:e0:dc:9d:ef:f9:5e:19:1e:64:6b:fe:90:5c:c1:6d:a1:
6d:36:54:0c:31:b3:ff:21:34:8c:4b:77:d3:dc:82:19:ff:23:
5f:07:dc:a3:44:3e:1f:63:ab:67:65:db:80:21:82:ac:d4:21:
94:5b:3c:ed:38:3b:17:3d:44:60:d0:7c:f8:8c:20:cf:01:e6:
bc:20:31:14:7a:8a:79:69:58:ec:9e:5b:00:f7:14:c5:ff:05:
7e:93:f2:27:aa:df:9f:ae:54:c9:41:01:94:db:e5:bb:a5:bc:
f6:32:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:13 2026 by rpki-client