
$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json)
Hash identifier: LRK6C9KyNXnK/79lBxfdbJToHjDGbqwS+HZuX/YPm6U=
Subject key identifier: 30:0F:31:9A:CD:9E:3A:66:59:AB:A5:02:56:41:18:45:17:AF:A9:F3
Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Certificate serial: 3484BD77FB982B91D61BCBD4996FA0F16B940A29
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
Manifest number: 93
Signing time: Mon 03 Nov 2025 23:10:55 +0000
Manifest this update: Mon 03 Nov 2025 23:05:55 +0000
Manifest next update: Fri 07 Nov 2025 10:14:55 +0000
Files and hashes: 1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: fY5F0deZT0l+MXU2BONYTZar4gdW00dXgFRwhNWKnfo=)
2: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: LRv3KOgPyv08Lxs5U2q+nlMy3WOPG6XP8MGVHCqSbSY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:84:bd:77:fb:98:2b:91:d6:1b:cb:d4:99:6f:a0:f1:6b:94:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Validity
Not Before: Nov 3 23:05:55 2025 GMT
Not After : Nov 7 10:14:55 2025 GMT
Subject: CN=300F319ACD9E3A6659ABA5025641184517AFA9F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:f8:18:df:a5:a1:a3:a7:7e:7a:dc:47:f1:
cd:94:6f:0c:33:20:bf:a6:49:01:3e:e0:65:4d:f4:
ad:aa:3e:2e:ec:a4:a1:32:3b:32:ae:bd:12:6f:12:
66:f8:a5:96:ab:3a:8c:c8:75:33:56:9c:2c:6f:84:
b9:b1:cf:35:f9:4d:3f:46:81:cc:44:ee:d9:52:e7:
9a:86:a0:5a:b3:b2:dd:90:57:a1:af:37:43:b1:1c:
35:96:2b:fb:08:5c:ce:57:a3:18:3a:09:9b:7f:dd:
09:3a:60:f6:0d:1a:99:19:a0:12:43:0a:43:64:31:
07:e9:10:47:8d:9b:88:2e:fa:ff:c4:fb:ec:95:cd:
f6:65:40:c4:fb:e7:5c:33:15:79:e6:fa:e0:9e:2b:
2c:4f:9d:68:83:04:1b:86:cc:5d:35:cf:35:69:29:
d7:d2:ea:46:4c:3a:df:9b:d1:35:d8:78:44:2a:3d:
ad:ba:16:42:ef:11:99:bd:98:8c:80:c5:14:45:d0:
7f:42:0f:e1:f1:40:f1:57:25:3e:d5:39:c0:2f:6a:
08:39:59:38:ab:4d:41:f8:24:d8:81:c9:79:77:2d:
60:0f:15:12:66:ba:d1:7d:26:a7:87:7f:9d:a5:57:
df:16:51:89:99:3f:17:17:7d:b9:46:b6:c2:2f:b5:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0F:31:9A:CD:9E:3A:66:59:AB:A5:02:56:41:18:45:17:AF:A9:F3
X509v3 Authority Key Identifier:
keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:c6:2c:e4:b9:11:98:94:7c:17:13:47:f2:d2:41:7e:c2:
38:32:5a:15:29:35:01:da:50:ee:f2:e5:92:42:ff:ba:cc:e2:
7f:ee:b5:b7:1e:75:c6:f2:b9:fb:df:a9:6a:71:8a:aa:ee:1b:
e8:59:23:09:93:c7:7e:f2:12:59:9f:36:8a:94:fe:e9:67:f8:
df:50:71:aa:3d:95:83:1f:35:fd:5c:54:4e:40:63:8a:c4:da:
bb:12:60:9f:63:ef:0c:45:8c:b4:fb:00:09:6a:d3:d4:f2:ca:
dd:22:7c:9f:95:42:21:bf:7b:08:75:af:4b:a4:6f:eb:bc:dc:
51:54:a4:e7:f4:ec:13:a0:44:38:02:5f:fc:9a:22:f8:11:1b:
6a:77:57:04:2d:18:fe:02:a1:28:c2:d3:a0:99:de:1a:c7:da:
fb:20:51:71:6a:7f:29:42:2c:63:2a:9f:14:f4:60:b1:b8:ea:
e3:bb:fd:73:f7:33:df:47:d9:ec:53:a0:cc:f0:09:48:d8:95:
27:a5:bf:fc:4c:b6:21:8c:61:e5:d6:a8:83:ae:89:14:03:f1:
a4:5f:dd:94:e2:3c:22:a9:f0:ac:d8:24:35:9b:ee:00:62:6c:
79:cf:ba:5e:9b:46:96:fe:ff:53:17:f6:f8:11:77:bd:c5:3d:
52:e2:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:16:02 2025 by rpki-client