
$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json)
Hash identifier: 7Qc6Vu9jhRLbpWqZ1RCWmlw3CYBrHs0VA3rc5hoDOME=
Subject key identifier: 2B:BD:C3:AB:08:99:D3:95:02:E5:D7:59:D9:9E:20:24:7A:9C:7E:81
Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90
Certificate serial: 635D85812E7A95F0837C68C9FECC0196BF75B46E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
Manifest number: 0179
Signing time: Sat 28 Feb 2026 10:11:15 +0000
Manifest this update: Sat 28 Feb 2026 10:06:15 +0000
Manifest next update: Tue 03 Mar 2026 20:40:15 +0000
Files and hashes: 1: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: yXTkW60GOZZ9N/VIjulkmadt8AvcqAL97NY/DZvxI1Q=)
2: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: x4kcPc/SI/Ao/XOYImBl9ZS8D0hxuUW5vd+IoRMxz5k=)
3: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: NkDaIeWsM/gPXaHtYqNr3YcOAUXw5i1dgIsc199+Uh8=)
4: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: XwTy3von9UfcQqdLvssnHX18UIYiFkJwOgDC3XKu89E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 20:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:5d:85:81:2e:7a:95:f0:83:7c:68:c9:fe:cc:01:96:bf:75:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90
Validity
Not Before: Feb 28 10:06:15 2026 GMT
Not After : Mar 3 20:40:15 2026 GMT
Subject: CN=2BBDC3AB0899D39502E5D759D99E20247A9C7E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:3c:62:ca:f6:ad:95:9d:b7:a4:ee:fe:6d:
a4:59:b5:df:76:1e:f2:df:64:ee:7a:5e:27:5c:20:
b6:25:88:98:16:13:0b:6a:ff:f3:a7:f6:24:52:0e:
84:7e:b3:b6:1e:0e:26:39:c9:4a:a9:60:4f:db:f4:
2c:cb:5d:57:e7:9e:5f:a5:30:64:c4:b3:f9:94:6d:
8d:b6:26:68:60:c4:a7:12:3f:3a:e2:89:92:67:4c:
42:9e:0a:0f:fd:4f:93:63:f0:1b:72:99:d0:83:3c:
3a:03:47:a7:59:86:48:92:e9:8a:dd:db:41:1c:d5:
4d:a8:59:de:59:a2:f6:04:b5:4a:13:2a:36:5e:63:
84:3d:4d:e4:c3:8f:fb:2a:27:59:84:b1:61:fe:bd:
15:4f:5f:7b:5d:f1:a7:e5:47:93:72:be:2b:7f:b0:
fc:1d:f8:87:a5:0d:92:d1:0b:34:0b:e9:c7:a1:a3:
6c:d8:f9:a4:2f:09:3c:ac:c9:5f:9b:73:41:e9:6f:
88:a4:ed:9a:d3:0a:b7:83:81:09:2a:93:11:55:c6:
e3:1c:4d:02:70:6a:96:93:bf:ad:69:d9:79:ac:21:
e0:83:d0:8a:0c:55:01:ed:d6:b5:38:91:ad:11:67:
8d:cc:40:c7:65:66:09:33:d2:4a:c1:97:54:f3:9c:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:C3:AB:08:99:D3:95:02:E5:D7:59:D9:9E:20:24:7A:9C:7E:81
X509v3 Authority Key Identifier:
keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c2:40:51:15:5f:30:23:a7:07:3c:2d:1a:f3:f2:23:82:b5:
60:7e:e2:3b:88:03:13:29:6b:6d:64:80:7f:f1:3b:6c:31:c7:
c3:48:6b:4d:a7:4a:33:3e:76:cc:a9:86:35:86:80:35:f3:b7:
1c:1c:a9:b9:0b:6f:89:77:a6:82:5a:a6:02:e7:ce:d3:e2:a4:
80:59:37:e9:45:02:a0:8d:3c:b0:45:9d:a1:c6:fd:4c:48:d9:
d7:67:bf:6f:e0:f6:ee:ee:5a:34:a5:58:ec:68:81:89:5e:ef:
1c:f8:0d:05:41:bc:1d:84:7b:a1:6f:a6:bf:a0:0a:88:f7:5f:
5d:b9:4c:49:df:d0:b0:15:7e:ef:b9:b1:d5:b8:5a:6a:ec:bd:
53:cb:12:bb:19:4b:af:ea:b1:3f:92:14:ff:80:08:d7:06:d1:
49:69:f6:9e:b8:7e:78:6d:70:f0:3e:84:50:b9:f9:8e:e4:cb:
10:84:5c:10:10:8c:a2:c5:77:f1:87:88:cf:10:77:29:1d:29:
10:3f:9f:3e:4f:fe:dd:fc:37:07:9a:94:8e:51:e3:4b:d1:85:
8b:9d:e0:51:26:e0:a5:57:5d:af:0f:19:83:9e:0f:b8:4d:88:
01:cd:b8:10:ef:64:be:9a:a1:1c:39:0d:bf:99:b8:76:b3:97:
9c:fb:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:39 2026 by rpki-client