
$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json)
Hash identifier: nAWQJkpxeFJ4gM8G1Lv5If7vvBaJgSzrLNVfrtTqB9o=
Subject key identifier: 18:E3:6C:06:F5:B8:F9:39:B7:C5:95:A1:68:91:69:20:DA:68:96:36
Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Certificate serial: 36F0E01932BFAD25065608C5A156415EBAB8334A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
Manifest number: 0565
Signing time: Thu 16 Apr 2026 01:32:16 +0000
Manifest this update: Thu 16 Apr 2026 01:27:16 +0000
Manifest next update: Sun 19 Apr 2026 03:35:16 +0000
Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=)
2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=)
3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: Ayms96pBWBE6US+3z4cdq/G1tuM0MvOfgXLH58bi7QM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl
rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 03:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f0:e0:19:32:bf:ad:25:06:56:08:c5:a1:56:41:5e:ba:b8:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Validity
Not Before: Apr 16 01:27:16 2026 GMT
Not After : Apr 19 03:35:16 2026 GMT
Subject: CN=18E36C06F5B8F939B7C595A168916920DA689636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:90:bd:ea:5d:c1:b0:be:0d:5e:fc:ee:e0:
72:36:89:29:fd:bc:61:21:87:16:d5:88:2f:4c:23:
14:08:f8:16:0a:24:37:91:8f:17:31:86:58:09:ed:
95:bd:39:eb:dc:ab:40:18:65:6a:0a:1f:a4:f5:d1:
c2:98:aa:5b:d5:c7:63:c3:ef:25:01:46:34:10:36:
9b:e0:7e:4e:25:73:04:b2:33:d4:84:f4:2c:90:dd:
4c:be:50:cd:7c:49:af:69:56:8d:35:a4:b3:0f:66:
5d:eb:94:e6:fd:7f:a9:59:cf:d2:a7:c0:61:34:e7:
8d:6c:cd:d5:44:66:a0:fd:a3:20:83:ff:e4:3d:fb:
cc:9a:55:68:6a:af:ca:e6:a2:fe:58:c6:5c:3b:60:
df:e0:98:0b:67:27:97:b0:89:97:8f:84:37:63:dd:
18:ef:4a:11:d1:fc:78:cc:dd:0a:79:39:cc:b9:59:
25:f6:a4:cb:bf:cb:9b:0f:84:3f:be:f3:20:60:47:
6d:fb:9a:d2:d7:7a:3c:a9:9a:3e:61:8d:c4:f2:a3:
5b:e2:d8:f5:25:1b:dd:0e:cc:72:3f:6d:db:0f:07:
e1:7d:30:bd:bf:10:4e:a1:d9:45:a3:16:f9:1c:05:
08:17:46:7c:d1:f9:a1:02:31:54:c8:f8:d6:25:48:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:6C:06:F5:B8:F9:39:B7:C5:95:A1:68:91:69:20:DA:68:96:36
X509v3 Authority Key Identifier:
keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:e2:7c:c5:19:7c:2a:e6:3d:ab:cd:d5:76:00:8a:8b:30:
b6:bd:cf:35:3d:0d:df:4a:ab:9d:7c:b9:44:1e:1f:bc:cc:90:
8b:f6:85:73:99:bd:92:21:77:0e:d7:dd:3a:6a:ab:e8:ae:c0:
d9:28:c9:60:a8:3c:34:43:b6:c3:84:c8:cf:8e:78:a6:f0:35:
5b:b6:f6:7c:4c:77:e3:44:e2:0a:64:d8:8c:08:16:ae:b9:9f:
87:a8:2f:97:e1:1c:38:e9:f6:c2:9a:bb:6e:78:1d:6b:0c:cf:
87:0f:28:93:dd:8b:7a:cb:80:3e:27:28:b5:be:e5:06:0d:32:
34:c0:f6:56:97:fe:3b:24:0e:e3:b2:89:f6:0e:91:7f:6c:b2:
7c:00:e0:78:16:a1:27:f2:c1:cc:48:8e:83:94:67:03:1f:26:
2e:a8:c2:8a:e0:cf:02:b8:82:df:a0:55:64:3b:ec:eb:fb:b1:
1d:0f:1e:95:55:0d:50:2b:2b:88:40:60:6c:61:08:d6:84:c6:
85:90:f6:86:be:8e:8a:96:6d:7c:06:7b:87:0a:5b:a5:60:cb:
d3:5f:d9:99:ba:5b:5e:ed:de:27:f4:65:3c:7b:29:17:0f:99:
21:6b:ab:76:fa:24:6f:4d:df:68:19:f9:63:18:eb:11:99:9b:
e0:ab:93:71
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNvDgGTK/rSUGVgjFoVZBXrq4M0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz
OTI1QTg5RjAeFw0yNjA0MTYwMTI3MTZaFw0yNjA0MTkwMzM1MTZaMDMxMTAvBgNV
BAMTKDE4RTM2QzA2RjVCOEY5MzlCN0M1OTVBMTY4OTE2OTIwREE2ODk2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCpC96l3BsL4NXvzu4HI2iSn9
vGEhhxbViC9MIxQI+BYKJDeRjxcxhlgJ7ZW9Oevcq0AYZWoKH6T10cKYqlvVx2PD
7yUBRjQQNpvgfk4lcwSyM9SE9CyQ3Uy+UM18Sa9pVo01pLMPZl3rlOb9f6lZz9Kn
wGE0541szdVEZqD9oyCD/+Q9+8yaVWhqr8rmov5Yxlw7YN/gmAtnJ5ewiZePhDdj
3RjvShHR/HjM3Qp5Ocy5WSX2pMu/y5sPhD++8yBgR237mtLXejypmj5hjcTyo1vi
2PUlG90OzHI/bdsPB+F9ML2/EE6h2UWjFvkcBQgXRnzR+aECMVTI+NYlSLZnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGONsBvW4+Tm3xZWhaJFpINpoljYwHwYDVR0j
BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5
MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1
QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2
ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF
MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA4d4nzFGXwq5j2rzdV2AIqLMLa9zzU9Dd9K
q518uUQeH7zMkIv2hXOZvZIhdw7X3Tpqq+iuwNkoyWCoPDRDtsOEyM+OeKbwNVu2
9nxMd+NE4gpk2IwIFq65n4eoL5fhHDjp9sKau254HWsMz4cPKJPdi3rLgD4nKLW+
5QYNMjTA9laX/jskDuOyifYOkX9ssnwA4HgWoSfywcxIjoOUZwMfJi6oworgzwK4
gt+gVWQ77Ov7sR0PHpVVDVArK4hAYGxhCNaExoWQ9oa+joqWbXwGe4cKW6Vgy9Nf
2Zm6W17t3if0ZTx7KRcPmSFrq3b6JG9N32gZ+WMY6xGZm+Crk3E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:40 2026 by rpki-client