
$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json)
Hash identifier: 666ZHS5h6+EQRfdHFgB3+1KJbGVLvxFu/QgI+oPrTIk=
Subject key identifier: 04:A3:D7:07:01:3E:4D:5A:95:0F:80:9E:D9:BD:08:32:A0:5C:4D:A4
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial: 67C991F5F4FA2D362675756545B2568DCAFABBC3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
Manifest number: 0294
Signing time: Thu 16 Apr 2026 01:22:09 +0000
Manifest this update: Thu 16 Apr 2026 01:17:09 +0000
Manifest next update: Sun 19 Apr 2026 09:49:09 +0000
Files and hashes: 1: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: iERNmSw8uaDedb778XoKWKcrluA/0DH/RtLMhd6V2M8=)
2: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: BhcjiBOzkEndpU3BCQBdyWS42pT8Sn5ebga69zofOx4=)
3: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: B1GpwqVmx/ho+gLDfNNDsbyOOI8aLnzd82hh+EFezgY=)
4: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: FB2w9FFq9iyYkttvd+v5WHr2UrftQkkwfLGbohLA45o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 09:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c9:91:f5:f4:fa:2d:36:26:75:75:65:45:b2:56:8d:ca:fa:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
Validity
Not Before: Apr 16 01:17:09 2026 GMT
Not After : Apr 19 09:49:09 2026 GMT
Subject: CN=04A3D707013E4D5A950F809ED9BD0832A05C4DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:b6:46:b9:de:d1:05:07:95:c6:1c:23:30:
7b:12:63:ab:e8:0a:a7:5a:6d:e1:5c:d5:a6:d2:ca:
7e:10:bc:f4:72:e1:95:67:c0:c1:2a:ba:8c:e3:fa:
d1:fc:92:3d:df:30:dc:51:26:a6:58:7d:06:2a:37:
7c:6e:e4:d1:84:82:7f:66:e3:43:02:0e:48:99:6d:
bb:eb:74:b5:4a:9d:da:3b:11:4a:d1:8c:ce:22:96:
74:4c:98:47:7f:55:9b:f7:40:37:a2:20:05:c4:b7:
4c:dd:cc:1d:a0:e8:3f:0a:ce:7c:99:51:30:da:14:
13:7e:b8:05:8c:d0:8d:1b:af:41:77:6a:cb:f7:a6:
51:22:f6:85:58:32:7c:d9:51:c2:26:f8:d0:34:50:
ba:25:79:e6:35:e1:1c:e4:2c:40:78:ae:8f:f4:02:
b0:39:b4:ba:88:eb:60:32:17:16:55:c3:b9:f3:e0:
f7:86:9e:36:dd:52:7a:3d:cf:ed:55:66:05:e7:19:
8c:49:83:f7:ac:1c:b2:ad:64:5b:14:41:bf:24:90:
e9:05:f3:32:7e:c7:70:cc:37:d2:4d:6c:7a:8a:9b:
a1:d3:7d:eb:85:c4:c7:c3:d8:66:fa:63:0d:db:ee:
5b:eb:49:4c:5e:80:60:53:68:f1:5e:9f:8c:f3:de:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:D7:07:01:3E:4D:5A:95:0F:80:9E:D9:BD:08:32:A0:5C:4D:A4
X509v3 Authority Key Identifier:
keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:b5:9c:9a:2f:e6:e8:0a:d5:43:0d:78:3e:d9:d3:5d:32:
a7:f2:90:1a:ec:d6:91:a3:ba:af:15:a0:3d:b5:5b:9f:02:4e:
e2:dd:f4:af:c5:bc:78:8a:79:2b:b7:90:1f:69:d3:eb:d6:b6:
2f:ce:94:1a:2d:84:85:0a:dc:bd:6c:d6:61:6f:00:fd:94:4e:
1b:47:4b:f4:b1:b7:0c:fb:fa:15:5f:1d:6a:27:a4:8a:fc:45:
e1:7c:8e:3a:76:20:a8:15:30:d3:31:9e:57:69:00:d1:21:78:
2a:92:bd:e0:38:fd:b0:4c:52:91:44:b8:a9:a9:ce:9c:9e:df:
6d:4a:ae:70:1d:76:58:50:7a:38:61:9f:78:91:5c:83:ae:2c:
0f:f6:27:5d:31:1a:14:6b:11:9d:48:c3:f8:48:eb:f0:4b:bb:
92:fb:87:c2:b5:ca:b5:32:e9:dc:20:00:2c:73:29:dd:71:c1:
19:33:06:8f:e0:3c:9b:3a:6f:68:a2:47:ee:96:4d:76:1a:df:
20:ba:58:1f:09:c4:22:8f:51:e5:62:ca:c6:e4:26:f1:96:04:
4c:41:38:6a:fc:ab:38:aa:90:86:97:9e:68:df:e2:a3:08:20:
5c:a2:86:48:93:a0:19:c7:01:33:63:79:1e:2b:5e:90:a4:a2:
77:7e:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:01 2026 by rpki-client