
$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json)
Hash identifier: S9HEJT82mdzql7wNOBN7kUgfAZ9dapTCPI9NPVnShXg=
Subject key identifier: 0A:A2:0E:BC:91:DB:43:D0:67:EC:F4:16:27:C3:43:B7:71:CC:CC:26
Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Certificate serial: 345DDB9EF0C06B69F77CE305A4A9B820DA7C62E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
Manifest number: 016A
Signing time: Wed 15 Apr 2026 22:51:28 +0000
Manifest this update: Wed 15 Apr 2026 22:46:28 +0000
Manifest next update: Sun 19 Apr 2026 07:20:28 +0000
Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 1Of4tRYWdIQC2abiMWql8ohMmXxvsI3dRCsINQg4dzM=)
2: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: qaNO9+m5rbkk+C64X1ARX3Zd5QMQYhgih+ubMDQvFV4=)
3: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: q6suRM1GDEk3DquWvwoiY8k1pPAMhJCE1PAKEv9TivM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5d:db:9e:f0:c0:6b:69:f7:7c:e3:05:a4:a9:b8:20:da:7c:62:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Validity
Not Before: Apr 15 22:46:28 2026 GMT
Not After : Apr 19 07:20:28 2026 GMT
Subject: CN=0AA20EBC91DB43D067ECF41627C343B771CCCC26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:a6:6b:80:25:7b:f3:77:52:3f:14:83:7a:
da:f9:12:2b:34:bb:21:89:25:91:1f:96:90:1c:72:
87:80:30:fe:b6:b5:84:51:69:39:a8:50:b7:52:25:
46:5d:8a:03:ab:4b:4d:67:63:98:38:b3:e5:20:da:
60:23:fd:3f:ce:3d:2a:18:59:04:c2:89:35:87:64:
22:c7:0a:e2:82:d9:57:a9:dc:26:3c:13:4e:ce:05:
da:56:92:0e:25:60:55:66:64:e8:dc:6b:97:d5:19:
75:8f:9b:83:1d:85:cd:6c:5e:ad:d4:6e:6a:0e:c4:
f5:26:23:0c:75:2d:58:18:4d:d7:a4:77:f9:b1:cd:
53:02:eb:3c:26:27:44:32:70:10:ea:fa:07:62:57:
bc:ba:8a:8e:56:13:95:85:26:fd:e6:17:e5:a7:a0:
ba:41:73:a8:4e:a4:da:88:18:95:a7:b2:0b:0c:18:
24:70:f9:5c:06:9a:5c:50:52:b5:49:68:e6:3e:b3:
d7:86:f5:8e:5b:df:87:9a:a4:30:61:5c:25:68:27:
08:32:15:57:81:f0:df:c6:0f:ec:9b:cb:16:87:16:
28:2d:6d:47:6f:4b:b7:e0:2f:1b:8b:2d:af:4a:23:
c3:b5:b1:d3:4c:5d:b1:13:da:bd:1f:e2:3a:98:d6:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:0E:BC:91:DB:43:D0:67:EC:F4:16:27:C3:43:B7:71:CC:CC:26
X509v3 Authority Key Identifier:
keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:9f:64:dd:57:c1:15:d3:63:2c:db:ca:92:a5:5c:e9:1e:
d5:b0:e2:2d:7a:74:3a:cf:83:83:ad:5f:84:7b:9a:30:92:c1:
7f:6a:f5:97:42:0e:c3:11:5f:de:a3:b9:16:d2:4a:a6:37:e6:
36:4f:e9:f4:a9:67:0d:aa:5b:e0:87:2a:38:c8:50:2f:d4:8b:
dc:23:7a:e7:2e:c3:8b:5d:28:22:9f:ef:93:b0:90:cb:14:3c:
0d:3c:e4:6b:da:97:42:4e:89:90:4a:60:89:5c:a4:d8:28:b0:
f2:98:88:83:82:5e:91:d3:d1:38:13:61:48:6a:8a:7e:f3:1c:
7c:8b:ab:11:a1:bd:b0:46:1b:fb:0f:2b:75:77:ec:7e:ae:fd:
7a:97:a2:21:bb:72:b3:4f:33:08:73:31:0c:91:47:00:f6:62:
ea:7d:25:3b:cb:52:37:9f:14:f6:3b:1f:43:e6:20:37:38:d3:
94:b9:d9:2e:05:ad:21:51:07:38:61:46:54:c2:8f:d7:e2:cb:
9c:ad:b0:26:9a:f0:10:35:fe:68:04:56:ce:2b:6e:e5:23:50:
68:00:c0:5a:95:55:2b:27:b6:ea:e2:fe:2d:8f:dd:26:3b:0c:
6d:9e:b3:c6:b4:3a:e8:a6:21:f2:da:db:a8:3c:39:1f:f3:8e:
d6:b3:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:34:13 2026 by rpki-client