
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json)
Hash identifier: TITe6FcQDL7aQ9GzGLDjaE5jdWQXccR9TvdPGx84Uhc=
Subject key identifier: 65:91:80:C1:A2:16:F1:26:07:C7:97:2B:73:5A:C5:2F:37:8B:C7:4E
Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65
Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165
Certificate serial: 764C89646B8CF4937354808C4510D8A32BB121B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
Manifest number: 0230
Signing time: Sun 01 Mar 2026 16:41:27 +0000
Manifest this update: Sun 01 Mar 2026 16:36:27 +0000
Manifest next update: Wed 04 Mar 2026 18:47:27 +0000
Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: vy6G36l+bsuFLmG0XLZnceStTcxmWES5zPhyagzDoQE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl
rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 18:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4c:89:64:6b:8c:f4:93:73:54:80:8c:45:10:d8:a3:2b:b1:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165
Validity
Not Before: Mar 1 16:36:27 2026 GMT
Not After : Mar 4 18:47:27 2026 GMT
Subject: CN=659180C1A216F12607C7972B735AC52F378BC74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:62:0e:4a:0b:92:5c:65:dd:cb:d2:7a:73:
66:61:40:89:d4:49:ec:7b:87:f2:e2:5f:97:17:4a:
28:1b:de:8e:b0:13:f2:f5:46:ab:99:1e:94:19:6a:
92:f8:54:b6:ac:81:86:6b:d0:57:eb:39:b0:2b:ef:
a2:c5:db:8f:05:e3:a0:bc:ce:bd:54:a3:48:10:c8:
5c:6e:33:77:45:28:b8:a1:f2:26:ae:0e:51:fe:e9:
b3:37:38:5b:14:76:6e:34:62:2e:6e:23:36:1c:35:
08:99:b9:05:e8:63:14:8e:95:6a:5c:08:dc:55:c0:
85:ba:e3:b6:13:a1:8e:eb:ef:10:3b:03:a1:b7:43:
f7:17:d2:31:aa:79:71:1f:49:a3:d6:97:9d:ab:2e:
f5:3e:fc:4b:0d:3c:fd:e1:a9:a0:ea:2a:0a:de:72:
d3:55:df:51:48:e9:69:31:ac:94:c3:dd:05:34:fc:
0d:e5:14:37:c3:43:d8:95:e0:b3:9c:be:b6:ea:34:
d7:1b:ab:d6:cf:04:ca:fe:85:ea:2b:2b:f8:0d:85:
91:a7:22:d9:90:36:63:54:a7:fe:02:ff:8b:00:89:
52:84:17:eb:ba:86:04:28:6e:16:b9:33:a7:d0:18:
6a:bc:51:82:58:b1:4c:8d:17:ec:b9:92:a9:f4:12:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:80:C1:A2:16:F1:26:07:C7:97:2B:73:5A:C5:2F:37:8B:C7:4E
X509v3 Authority Key Identifier:
keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5e:61:34:47:98:c8:81:8f:54:ec:b6:3b:59:5a:89:b0:8a:
25:ea:79:7c:51:6c:cc:4a:a5:af:9b:75:9c:db:42:88:94:31:
8e:9a:7c:51:d2:19:85:9e:7a:59:54:e9:9d:16:01:e8:2e:1d:
f8:cb:53:97:aa:57:c4:3b:26:8f:29:e4:54:5b:a5:ac:0c:be:
42:8e:87:c4:c9:7f:5f:f3:84:da:f5:e4:22:98:b3:f7:49:71:
99:0c:ac:bb:b5:0c:79:c5:f2:d9:1c:2a:6e:83:89:67:47:9f:
57:54:b7:5f:14:77:cf:5d:71:22:af:c4:eb:05:8e:02:27:ba:
99:7e:6f:60:4e:76:c7:20:ee:f0:24:5f:7a:5f:e3:6b:fc:9f:
0c:f2:bf:8b:78:1c:bf:33:9e:69:ee:da:87:cd:5f:93:b9:ed:
94:88:81:20:8e:20:55:da:08:ad:33:00:14:95:67:3f:60:ff:
17:96:94:c8:a8:c6:6a:0c:09:cd:b8:d4:99:30:78:e1:0f:bc:
60:81:89:8e:42:90:0a:e4:60:51:76:a5:8f:30:f9:37:41:8f:
75:8b:87:19:a3:9e:dd:d2:86:5f:06:1b:af:0f:1a:12:a0:af:
2b:48:79:f3:23:37:c2:98:47:d8:fc:52:81:df:50:d6:90:e7:
71:db:d5:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdkyJZGuM9JNzVICMRRDYoyuxIbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3
OTdDNDE2NTAeFw0yNjAzMDExNjM2MjdaFw0yNjAzMDQxODQ3MjdaMDMxMTAvBgNV
BAMTKDY1OTE4MEMxQTIxNkYxMjYwN0M3OTcyQjczNUFDNTJGMzc4QkM3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllmIOSguSXGXdy9J6c2ZhQInU
Sex7h/LiX5cXSigb3o6wE/L1RquZHpQZapL4VLasgYZr0FfrObAr76LF248F46C8
zr1Uo0gQyFxuM3dFKLih8iauDlH+6bM3OFsUdm40Yi5uIzYcNQiZuQXoYxSOlWpc
CNxVwIW647YToY7r7xA7A6G3Q/cX0jGqeXEfSaPWl52rLvU+/EsNPP3hqaDqKgre
ctNV31FI6WkxrJTD3QU0/A3lFDfDQ9iV4LOcvrbqNNcbq9bPBMr+heorK/gNhZGn
ItmQNmNUp/4C/4sAiVKEF+u6hgQobha5M6fQGGq8UYJYsUyNF+y5kqn0Er37AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZZGAwaIW8SYHx5crc1rFLzeLx04wHwYDVR0j
BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4
OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD
NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl
OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx
NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADpeYTRHmMiBj1TstjtZWomwiiXqeXxRbMxK
pa+bdZzbQoiUMY6afFHSGYWeellU6Z0WAeguHfjLU5eqV8Q7Jo8p5FRbpawMvkKO
h8TJf1/zhNr15CKYs/dJcZkMrLu1DHnF8tkcKm6DiWdHn1dUt18Ud89dcSKvxOsF
jgInupl+b2BOdscg7vAkX3pf42v8nwzyv4t4HL8znmnu2ofNX5O57ZSIgSCOIFXa
CK0zABSVZz9g/xeWlMioxmoMCc241JkweOEPvGCBiY5CkArkYFF2pY8w+TdBj3WL
hxmjnt3Shl8GG68PGhKgrytIefMjN8KYR9j8UoHfUNaQ53Hb1TA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:42 2026 by rpki-client