
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json)
Hash identifier: M4efXX9j6z0YgBGUhKxw1F4MdZOjLKqjOXTjBaoR4xM=
Subject key identifier: 76:22:C5:86:20:DE:2C:03:45:32:A1:50:F7:44:C1:92:EE:01:28:83
Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B
Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B
Certificate serial: 7026EC16A5DEFA50C07E07CA9BD6A19F43F075EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
Manifest number: 0193
Signing time: Thu 16 Apr 2026 15:52:44 +0000
Manifest this update: Thu 16 Apr 2026 15:47:44 +0000
Manifest next update: Sun 19 Apr 2026 21:26:44 +0000
Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: rPSThzT7Cqt8JnibJJYhv4JuVLXQzxgzLllENbtZ8GE=)
2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=)
3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl
rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 21:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:26:ec:16:a5:de:fa:50:c0:7e:07:ca:9b:d6:a1:9f:43:f0:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B
Validity
Not Before: Apr 16 15:47:44 2026 GMT
Not After : Apr 19 21:26:44 2026 GMT
Subject: CN=7622C58620DE2C034532A150F744C192EE012883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:e2:ff:d0:21:b7:ae:00:07:6b:96:9f:fb:
37:a9:23:42:e8:30:7c:ba:c5:de:92:bb:df:66:e3:
a4:9c:12:6e:8a:e2:13:53:a1:47:76:08:bc:d5:c3:
a4:91:33:70:4f:2e:3f:da:fb:5a:de:24:d4:17:d4:
da:53:10:9f:52:ff:d3:8e:d8:7d:cf:e9:9e:3c:9d:
e3:e9:73:2e:cf:38:02:1f:7c:0d:b2:6b:6a:ae:b4:
76:cc:9d:67:37:d4:4f:25:72:d0:99:1b:c5:ff:0e:
3e:14:df:91:8a:89:1d:b2:e8:e4:8b:03:b1:09:11:
ad:71:d7:ed:48:e1:04:23:47:97:4e:2a:25:69:f8:
a6:7b:cc:62:0d:61:1c:02:73:92:cf:8f:8d:88:ea:
a0:29:a5:dd:a7:86:5b:2c:6e:62:43:67:36:93:61:
5e:98:e3:16:ca:6a:25:3c:79:60:fb:ef:8b:f7:8b:
80:6c:89:a0:ea:04:a0:25:3e:a8:36:fb:49:75:6b:
0b:4c:c8:67:f9:84:58:35:74:6a:2c:21:6c:ba:22:
8f:1b:0f:49:51:b3:f9:d5:f6:92:31:c7:3e:e9:9e:
86:7c:b8:68:1c:31:94:3a:6e:19:0e:0b:89:db:ac:
f4:4d:de:04:f0:7a:b8:28:73:ab:41:c2:c8:24:79:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:C5:86:20:DE:2C:03:45:32:A1:50:F7:44:C1:92:EE:01:28:83
X509v3 Authority Key Identifier:
keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:b5:21:ec:99:2b:6b:da:e6:e7:6b:63:76:25:10:28:0f:
5e:5d:40:c5:2a:8c:c7:46:1a:20:48:82:e8:bd:6d:5d:a6:4d:
c7:e7:fa:bc:f5:e3:47:77:5c:32:e1:e1:e2:20:5d:b9:84:85:
5e:32:7f:03:83:08:39:3a:25:8c:d1:69:73:2b:34:84:0d:43:
47:c3:d6:33:23:fe:50:63:ba:8f:c8:44:c4:fd:9e:82:9f:68:
7c:3e:55:ec:9d:33:b1:c1:6c:27:b7:47:10:b3:36:34:c1:96:
3e:1c:59:b6:a9:81:ac:ec:01:13:29:2c:4a:4d:ee:2d:ef:e6:
4b:29:df:40:17:f3:2a:a0:9d:dc:8d:ec:5b:e2:85:34:e1:bc:
31:50:7a:30:dc:d5:13:9c:d6:d7:a5:1a:08:4d:44:ef:48:1a:
44:9a:52:5d:4b:c1:88:9a:69:e8:18:99:b7:d4:f9:dd:e0:b3:
ed:2a:a1:34:0a:73:60:fc:e7:ff:e6:6b:e4:3b:6a:95:1e:d2:
12:c2:67:7d:60:da:01:69:a8:82:1e:0c:58:0f:31:81:f0:12:
14:bd:28:64:2e:70:dc:37:91:1b:fa:b6:9c:5e:74:94:04:dc:
f0:3e:f3:ff:ac:4c:51:28:cf:db:54:2b:83:03:b2:1e:06:31:
3e:5e:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:44 2026 by rpki-client