
$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json)
Hash identifier: W3XonTX0+eLfLE0B4bM75tRi6yXmeCUkkz+ok60CHz0=
Subject key identifier: F4:A6:AE:16:CA:B2:07:EA:B7:38:C2:99:6D:22:33:AE:C9:46:61:E9
Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Certificate serial: 52148D835FDF863516B37D04FB83EF6687BEC973
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
Manifest number: 0260
Signing time: Mon 02 Mar 2026 07:40:44 +0000
Manifest this update: Mon 02 Mar 2026 07:35:44 +0000
Manifest next update: Thu 05 Mar 2026 10:02:44 +0000
Files and hashes: 1: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=)
2: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: 6ZZOi/NLsdYlcDMq5fHME9uypMIkGu7+T3bOaF751wQ=)
3: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=)
4: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: Rc2DErsyjigrY0WguoKyWlWN27lUZbqBBcHG2nvqvJ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:14:8d:83:5f:df:86:35:16:b3:7d:04:fb:83:ef:66:87:be:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Validity
Not Before: Mar 2 07:35:44 2026 GMT
Not After : Mar 5 10:02:44 2026 GMT
Subject: CN=F4A6AE16CAB207EAB738C2996D2233AEC94661E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:2c:c0:6c:a7:05:9d:ea:6a:3e:09:89:6f:
b3:54:d6:55:a5:49:f4:a5:be:7b:b7:19:cf:be:14:
b3:cb:ea:bd:ba:63:21:6b:a8:46:df:d7:64:8a:ae:
ef:ff:fc:ad:86:12:5a:1a:24:cf:1b:90:9d:5f:53:
a6:27:9d:72:29:8e:04:ca:0f:85:cc:ef:ff:63:64:
fc:c1:09:dc:61:e2:d1:b6:95:70:54:8b:4d:af:85:
c0:67:20:11:dd:c7:6c:eb:0d:d8:3f:89:94:88:66:
56:33:a9:39:0b:c8:c2:ba:52:5c:03:6a:1c:12:56:
d8:fc:4b:02:20:95:4c:78:e2:9a:52:8b:24:07:d5:
f9:ac:8d:9c:54:26:e4:b5:99:c5:82:56:9d:20:b4:
86:03:ef:6e:18:d6:0a:8c:19:f3:5e:07:87:61:f3:
84:a5:05:6b:46:10:a1:5a:88:7f:bc:e9:9f:cc:47:
4f:ca:a2:63:37:7f:d8:67:5e:07:bc:90:0d:05:22:
7c:be:bb:8b:ed:db:d4:4f:7a:53:03:78:bd:23:d6:
09:ce:db:ec:1d:3f:95:da:88:7e:1f:19:33:74:3e:
c7:0e:95:1e:4f:d6:51:ba:42:47:84:32:81:b0:58:
2e:e6:3d:f3:e4:74:0f:ad:19:c6:42:72:a1:a2:26:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:AE:16:CA:B2:07:EA:B7:38:C2:99:6D:22:33:AE:C9:46:61:E9
X509v3 Authority Key Identifier:
keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:63:bc:22:55:d7:73:1e:82:85:4a:eb:17:a5:b1:3c:c4:95:
8b:c2:0c:9c:c6:e2:e6:89:15:13:d1:a1:fa:22:29:0e:e2:6d:
16:a7:04:58:93:ae:83:99:af:23:dc:d8:d0:08:2b:ce:9b:ea:
c4:05:e9:48:34:db:96:42:44:8c:97:70:64:d0:41:78:77:c4:
fa:49:f3:d0:48:cb:63:b8:ed:86:2c:0e:d5:72:0d:19:de:9b:
9a:91:b7:99:9d:02:cf:aa:bb:ce:38:2a:10:86:9b:c7:52:ec:
6f:9c:fa:b7:6b:40:d8:78:ab:aa:2b:4d:1e:a3:15:47:9e:cb:
da:5b:2a:04:ea:a8:06:1e:82:86:e2:82:41:ec:11:83:c4:ef:
b8:47:fa:1b:c5:07:1e:b0:fe:1b:53:95:b1:9a:bb:a6:53:74:
63:b9:c8:b8:ef:a5:49:ea:9b:db:38:8d:0d:af:b3:1a:ef:92:
3b:b7:cb:0c:75:cb:9f:22:70:0e:3e:26:47:45:ef:9f:a0:f2:
d1:3b:c8:f2:c7:4d:cf:2d:c7:d9:70:12:54:12:55:7a:eb:17:
b2:41:b6:73:8c:2c:bf:56:fd:40:30:57:17:d4:50:5f:b8:e2:
30:b9:f5:7c:ed:56:e0:04:5a:90:05:98:ea:54:d0:3f:dd:62:
9d:44:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:09 2026 by rpki-client