
$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json)
Hash identifier: 2UIFZS+xzR1SHvpneuq7kaU61i1HszfpWo74MqtdBaM=
Subject key identifier: 84:BE:44:FB:66:20:72:9B:88:4E:D5:59:DC:15:93:19:07:A5:20:9F
Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Certificate serial: 3B745D6E2E5F0910B3C6231DA1B3A7C56DC14836
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
Manifest number: DC
Signing time: Wed 15 Apr 2026 21:11:03 +0000
Manifest this update: Wed 15 Apr 2026 21:06:03 +0000
Manifest next update: Sun 19 Apr 2026 02:24:03 +0000
Files and hashes: 1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=)
2: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: UW/flzpSgeEL+FdAI9abFV081Ix8S7OvtzTFER9jrtU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 02:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:74:5d:6e:2e:5f:09:10:b3:c6:23:1d:a1:b3:a7:c5:6d:c1:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Validity
Not Before: Apr 15 21:06:03 2026 GMT
Not After : Apr 19 02:24:03 2026 GMT
Subject: CN=84BE44FB6620729B884ED559DC15931907A5209F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:e3:9a:b6:ce:9b:e8:78:19:0e:11:c7:92:
7b:cb:a1:96:09:07:86:72:03:53:2f:46:dd:7b:6b:
e4:22:4b:40:71:95:ab:48:83:dd:d3:f5:2b:04:22:
a4:f8:cf:78:1c:c4:c3:ba:09:9d:a0:00:5d:1f:4e:
dc:c7:de:93:7f:0f:52:ab:64:86:3d:13:51:2c:7e:
12:5c:06:eb:ef:f0:8e:96:a2:fd:c8:6d:43:04:96:
1c:88:11:f5:d7:0d:36:5a:7b:48:df:fc:fa:11:e0:
db:ac:7f:9d:ae:35:b0:df:c1:ce:0b:8a:3c:94:72:
76:72:74:6c:0a:94:2c:f1:49:96:8b:70:c6:ff:63:
c7:23:4d:3f:5c:46:dc:98:b5:60:51:1a:8f:0f:b0:
a2:bd:fe:24:ba:77:05:5e:5d:c2:99:f7:63:8a:cf:
bf:24:ff:c3:a8:b9:67:67:0d:64:89:22:4f:3a:38:
89:76:64:6e:ff:bb:2a:d4:97:c0:57:c4:2c:87:32:
d6:6a:c3:f8:5a:d2:e6:98:0b:74:10:22:ce:7d:19:
a5:37:6d:08:67:94:ac:33:42:87:b7:3a:22:92:76:
fe:7d:b8:25:23:72:ec:78:90:cf:ac:90:aa:4b:d1:
ea:f1:a8:bd:3e:cd:8d:25:e3:46:bd:82:dd:72:c2:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:44:FB:66:20:72:9B:88:4E:D5:59:DC:15:93:19:07:A5:20:9F
X509v3 Authority Key Identifier:
keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fa:fc:6d:b7:ee:a5:af:a2:34:49:1a:12:c8:52:99:7e:a4:
50:f4:fa:f8:f1:69:3f:0f:a6:59:a9:66:20:9c:a8:43:dc:28:
1d:a5:6c:05:80:ad:54:47:b1:2f:ac:70:03:67:5d:e4:85:e9:
6b:e6:e4:26:8e:eb:f0:58:88:98:22:a8:59:0c:7c:23:91:27:
eb:43:53:09:de:2e:5c:f1:3a:7e:16:44:0c:3d:65:a2:9f:2c:
58:5c:10:98:9c:61:9a:5a:11:e1:a7:48:c9:f8:3d:4d:9e:10:
3a:fd:6b:47:fc:c8:70:9a:95:c0:09:0b:af:b9:f1:7b:5b:91:
37:ce:f8:cb:7f:f0:38:ab:9f:d5:6d:40:b6:ec:85:1e:02:67:
70:ae:59:72:1e:6c:2a:2c:6d:e7:f2:93:16:ad:10:e2:7f:ee:
e8:87:09:90:c7:c1:c7:0f:b2:a8:0a:5b:d3:82:13:63:ec:35:
89:99:55:98:b9:dd:80:05:47:24:94:fa:cb:ec:b7:8d:f5:8f:
b7:49:f0:a4:39:4a:e0:d7:8c:99:41:e2:22:56:b9:6f:a3:c0:
03:c2:05:b4:0c:a8:87:a5:83:0f:f5:8f:70:a7:f9:81:e9:61:
64:45:6c:13:f1:ef:85:d1:13:24:ac:ed:c1:24:d8:fe:e8:a9:
4e:85:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:47 2026 by rpki-client