
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json)
Hash identifier: UmlKBu27izldhe3R6pKho1NfpPFQ5+ZHw9bfnEm4FLI=
Subject key identifier: DD:1E:99:94:1B:97:32:DA:C4:9E:84:F6:E1:32:03:8E:DF:F0:86:9E
Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65
Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165
Certificate serial: 2AF2A57708DB9762DDAFE147D8A81E9158F2D32F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
Manifest number: 0244
Signing time: Wed 15 Apr 2026 15:11:29 +0000
Manifest this update: Wed 15 Apr 2026 15:06:29 +0000
Manifest next update: Sat 18 Apr 2026 19:23:29 +0000
Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: JhntTcIiSh65M+aX+VQq2PU6GecgmKFD+Kk1legT3R8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl
rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 19:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f2:a5:77:08:db:97:62:dd:af:e1:47:d8:a8:1e:91:58:f2:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165
Validity
Not Before: Apr 15 15:06:29 2026 GMT
Not After : Apr 18 19:23:29 2026 GMT
Subject: CN=DD1E99941B9732DAC49E84F6E132038EDFF0869E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:78:af:e2:1f:b8:18:96:f4:8f:3b:56:f2:
b7:b7:ba:5f:f8:e8:a3:5a:d3:43:fb:7d:52:e5:51:
33:ae:50:97:dd:45:fb:32:1d:a9:47:9d:51:8f:80:
2c:a5:15:08:52:86:f0:31:c8:ba:a6:1c:d2:88:5a:
e4:0e:f3:ff:c1:da:56:bc:1e:b0:df:1f:21:9a:1d:
cd:89:76:6f:db:df:8f:ee:9c:95:11:04:b8:52:d1:
92:f0:26:d9:6c:a7:6e:f9:9a:3f:9f:4d:96:5f:c2:
18:35:84:22:8c:7b:98:f1:53:42:a3:83:4e:2b:f8:
40:a2:33:12:42:32:50:48:02:a6:54:f7:d3:e8:f7:
91:ea:41:5a:3c:1f:67:be:a4:34:26:a7:0a:3f:6e:
67:8c:58:97:ae:66:79:28:7a:60:e4:0e:ec:c9:88:
e9:27:43:2d:1e:11:98:31:f2:4c:b8:3e:ca:f5:91:
13:0a:5a:52:3a:44:43:32:bf:f0:be:6d:df:73:7c:
87:38:4d:ee:c4:01:fe:3b:ed:0b:e4:18:a4:9f:80:
66:b9:38:8c:de:79:c8:bf:76:d5:16:36:84:95:54:
ee:59:ff:fc:9e:e2:36:7e:de:be:92:44:d1:26:e3:
a2:55:72:41:37:f7:19:5b:ca:30:82:da:4e:3b:6c:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:99:94:1B:97:32:DA:C4:9E:84:F6:E1:32:03:8E:DF:F0:86:9E
X509v3 Authority Key Identifier:
keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:e2:fc:ee:03:2c:6d:04:9a:3a:75:b9:b0:ce:28:7d:e6:
1e:82:6f:ba:bd:03:ae:00:92:d9:e1:0e:b3:19:18:82:7c:74:
78:80:16:c3:69:5d:72:4a:c7:34:b9:f2:ed:fb:61:71:5c:6d:
f6:4c:09:1f:22:5f:d3:6f:c1:4a:e2:41:fc:74:25:5c:c1:a2:
07:83:a2:f6:c2:77:34:6a:a8:00:71:51:82:69:7e:10:ca:18:
d3:a9:30:a8:ed:b6:eb:19:7e:5a:fd:cc:64:f9:b6:e4:eb:1a:
49:5a:90:a9:2c:5b:7d:7a:8d:5f:a6:c5:95:77:d2:6e:e8:ab:
10:6c:a9:43:79:cb:2c:7d:03:05:f4:d3:5f:b3:ff:37:18:3a:
2b:84:b8:dc:64:50:cc:4b:9b:e5:17:54:ec:91:5e:f8:84:0e:
1b:45:8d:39:d6:ba:2c:d9:50:f9:0b:22:da:26:9d:c7:c2:ad:
39:67:28:0c:49:ea:36:b0:28:52:df:15:e7:8e:66:d0:c3:49:
f6:c9:b0:81:fd:e9:8d:c9:16:d5:d9:94:aa:3e:ec:30:46:54:
6d:fc:62:0c:93:d1:fc:31:67:5a:58:d5:e1:06:80:0f:e0:91:
7c:d5:54:cf:ba:1d:06:3c:e1:de:ff:89:1f:48:6c:dd:3f:d6:
64:4d:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:00 2026 by rpki-client