
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
File: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft (raw, json)
Hash identifier: 4x9WN3cJXRHzgrJM7j+Bigw7xf8EQvlcDCu2P3FF2f0=
Subject key identifier: 01:67:4A:BE:AD:9A:77:A5:30:C5:B5:2E:C2:16:80:A5:E0:DE:C9:43
Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Certificate serial: 2396DCE3BDB9EEC7879EE66859CBA720A4A03D36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
Manifest number: F7
Signing time: Fri 17 Apr 2026 08:03:51 +0000
Manifest this update: Fri 17 Apr 2026 07:58:51 +0000
Manifest next update: Mon 20 Apr 2026 18:00:51 +0000
Files and hashes: 1: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: jCMcTRKT9AZJevifSXh6jid95wyd/fIpOWD7LnrfE5Y=)
2: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: Lj0hcqeyTQssBrCkzs3hGKwcyyQ8e4rZksVRkWRzAgo=)
3: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl (hash: qiV0sN9kD7/Vlto5AyPKV7WIXWQKtk/kayW0jNdCiQk=)
4: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: d7SZXhA3MtIvsZoPKAEFGlIFwwbXCkHUGIXlm7+3ws0=)
5: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: RRjpYe+sCryGtP2L5KYhg6i9BBg+veNKIMjpWUEXvlQ=)
6: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: qv3evecT8eZzX3bUVJHE05QFEmJ8YwvyFd0dQ0gXUtc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl
rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:96:dc:e3:bd:b9:ee:c7:87:9e:e6:68:59:cb:a7:20:a4:a0:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Validity
Not Before: Apr 17 07:58:51 2026 GMT
Not After : Apr 20 18:00:51 2026 GMT
Subject: CN=01674ABEAD9A77A530C5B52EC21680A5E0DEC943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:d0:06:bd:f4:ec:ad:a2:48:31:1c:05:53:
ca:b2:8d:4f:c3:2d:87:27:18:71:cd:8f:27:70:68:
eb:87:2f:fb:b0:04:45:a5:1f:87:8d:f8:e2:78:2c:
eb:2c:9f:5d:d4:c0:2c:a3:28:a4:bc:5a:62:6e:47:
8e:49:1b:dd:ea:d4:05:04:ca:88:95:4d:74:ee:77:
ed:25:5d:e9:27:21:ed:68:bd:94:43:c4:01:11:38:
e9:44:8f:3e:63:d8:e2:60:69:d9:64:87:0d:6d:f6:
53:36:c6:da:3a:ba:93:4c:30:a8:a2:09:29:5a:51:
19:3b:db:ff:b4:42:68:bb:94:62:2e:5e:69:74:dc:
d6:af:76:50:42:b9:bc:d6:29:42:50:b8:92:c0:31:
c4:56:f3:f4:3d:91:f1:2d:ac:d4:17:c7:2e:ff:23:
bc:58:fa:ac:31:10:3a:68:fb:70:fd:27:11:8b:41:
88:02:a3:70:cb:98:2a:07:e2:10:d3:9e:88:1f:39:
a2:98:7d:2a:01:cd:5a:fa:21:20:7a:64:de:97:23:
83:26:d5:9e:88:90:5e:1a:3b:7d:31:35:f1:b7:42:
68:a9:fd:da:6d:fe:3c:d4:2a:67:ba:f9:23:a7:4b:
48:21:1a:74:46:62:74:7e:8e:d8:0d:d9:b6:77:bf:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:4A:BE:AD:9A:77:A5:30:C5:B5:2E:C2:16:80:A5:E0:DE:C9:43
X509v3 Authority Key Identifier:
keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:80:7a:0a:be:a9:56:8c:fc:16:64:da:17:b0:d7:80:0e:e0:
ee:a3:81:40:c7:98:e1:16:10:2f:09:87:7d:84:6a:c7:73:f1:
b8:a7:89:11:11:5c:d5:78:e0:f4:b2:95:ac:02:e2:08:66:f1:
1a:32:ad:c1:da:1e:a4:d0:b7:db:14:fa:67:e2:b0:01:d4:7f:
59:c4:97:38:ce:8b:4a:cf:46:77:3f:0d:93:54:e1:3b:c6:c1:
b6:b8:5c:ec:5a:e4:e2:49:cd:c4:4b:91:dc:f6:0a:00:f1:fb:
53:22:a4:89:98:2c:4d:53:32:36:b8:5e:f7:e0:42:f5:8e:be:
aa:bb:e7:10:02:f2:46:d7:58:33:e8:68:ba:04:13:ae:a1:6d:
df:0a:9e:1c:26:4c:86:37:c8:ea:04:81:f5:de:4e:f6:bb:ba:
16:48:f9:0c:21:01:fb:0e:a5:4f:4f:e8:39:b4:a6:ec:ad:62:
49:5e:b9:5f:6b:54:a3:8e:9c:32:07:04:d7:5a:e8:be:d4:f8:
f0:f4:56:43:ab:ef:34:42:0b:64:39:a7:0e:07:82:dd:8a:0d:
2f:dc:be:92:7c:1e:7e:74:21:dc:18:e9:26:ea:3b:ac:38:d6:
14:80:26:4a:10:f6:e7:f5:19:84:ee:2e:95:4b:f5:ce:22:0b:
8e:67:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:05 2026 by rpki-client