
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json)
Hash identifier: eultRPu3ibWEZTf12C0dT5SKztcmRaGW4976g16c+D0=
Subject key identifier: F6:99:A0:B0:30:31:CD:F9:0C:88:97:16:3E:E2:B6:43:DE:65:AC:60
Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49
Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249
Certificate serial: 1E98C1611ADE09CBA53BD1FED5722CDE80E472B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
Manifest number: 020E
Signing time: Sat 18 Apr 2026 13:32:32 +0000
Manifest this update: Sat 18 Apr 2026 13:27:32 +0000
Manifest next update: Tue 21 Apr 2026 22:52:32 +0000
Files and hashes: 1: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: nY1utATK4lQjvJL8LwjVNmOvIhR0usGF69ygmhq9Ag8=)
2: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: jdLnjPaWdTHZ2AH4DtpLU9Lr5H/sMTNt+97MSzTQyBs=)
3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=)
4: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: Q+IkVv0Bjm3jRiBICSBWGderVAB472l//8aV0DSoflc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl
rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 22:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:98:c1:61:1a:de:09:cb:a5:3b:d1:fe:d5:72:2c:de:80:e4:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F022459BA46CF30700E070671C752B44729E249
Validity
Not Before: Apr 18 13:27:32 2026 GMT
Not After : Apr 21 22:52:32 2026 GMT
Subject: CN=F699A0B03031CDF90C8897163EE2B643DE65AC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:c0:a7:97:db:86:85:3f:b0:e5:ae:dc:22:
ab:c6:c4:eb:d6:39:ba:85:ac:2d:bf:58:99:14:e6:
07:92:ba:dd:36:8e:2d:2a:24:87:c2:05:f3:a3:e5:
b9:83:ca:69:f0:78:25:a1:fd:23:c4:1c:eb:7d:92:
c5:f7:3d:70:78:c4:ba:7d:1c:fd:dc:e9:e3:ae:7b:
c5:a7:99:64:3f:db:2c:de:0a:74:1d:72:4b:0f:49:
6f:a6:43:8e:ee:6c:c8:3c:98:c6:39:f4:b9:d0:03:
30:eb:21:a1:ef:1f:61:8b:58:98:c5:2f:2c:c4:30:
a1:f0:d7:32:f5:b3:9f:48:29:ff:50:86:28:77:02:
40:bd:11:18:73:0b:ce:33:cc:89:53:58:6a:16:1e:
02:d9:b6:ac:19:89:be:2b:96:f3:e2:2b:cc:69:fa:
97:c5:47:39:27:28:2a:a0:e5:54:ae:5e:cd:d5:6e:
10:96:7a:7d:83:db:1d:b3:36:55:dc:b7:1d:a2:6f:
56:cf:53:90:8b:aa:05:ee:7c:8e:e7:a4:35:bc:99:
e9:bb:f3:58:03:ca:8b:1f:66:00:bf:53:b0:8a:cc:
72:16:77:0c:04:e1:6a:59:5e:b4:dd:82:89:7d:8e:
57:09:72:de:6c:ef:e3:42:44:90:03:a2:58:f6:34:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:A0:B0:30:31:CD:F9:0C:88:97:16:3E:E2:B6:43:DE:65:AC:60
X509v3 Authority Key Identifier:
keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d2:31:72:05:f4:f3:8a:68:c4:ab:8b:c7:b0:bb:4a:84:fd:
be:b4:b6:4b:47:7e:12:51:e7:31:91:47:ca:e2:1f:16:ba:f1:
55:cd:1d:e5:d5:fd:cb:ba:e2:a4:43:61:ea:a1:d4:4e:2d:49:
19:db:b2:b5:82:43:f4:66:53:4f:50:f4:e8:32:5e:b1:2e:93:
ae:62:df:0d:b9:8e:32:86:47:22:a9:22:4f:6b:ae:5f:c9:29:
99:14:90:96:9d:fd:af:38:27:9f:5e:c2:6d:47:4b:2a:c3:99:
de:58:27:ec:96:c0:f0:9d:7e:4a:28:e9:97:7b:38:0b:c4:41:
97:48:2b:26:79:cc:90:bb:b1:2a:b9:1f:64:76:dd:aa:2e:8f:
51:1d:75:1a:e0:1e:6f:03:5d:43:1e:59:88:11:6a:a0:83:40:
6f:74:fa:67:28:03:76:21:4f:20:bf:ad:15:2e:48:57:40:2f:
c2:87:53:16:bf:c0:70:05:9c:d4:63:55:34:c0:f0:d8:5c:28:
fc:73:2c:68:84:c3:1b:e5:2d:0c:31:66:45:7d:14:aa:1d:5a:
c2:6b:4d:02:6e:52:ad:e6:23:80:92:f7:4d:5b:67:c6:83:0c:
b9:7f:52:ea:16:af:b4:5d:65:d8:20:69:fb:9a:6a:6c:6f:69:
7e:3a:55:1a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHpjBYRreCculO9H+1XIs3oDkcrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0
NzI5RTI0OTAeFw0yNjA0MTgxMzI3MzJaFw0yNjA0MjEyMjUyMzJaMDMxMTAvBgNV
BAMTKEY2OTlBMEIwMzAzMUNERjkwQzg4OTcxNjNFRTJCNjQzREU2NUFDNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0sCnl9uGhT+w5a7cIqvGxOvW
ObqFrC2/WJkU5geSut02ji0qJIfCBfOj5bmDymnweCWh/SPEHOt9ksX3PXB4xLp9
HP3c6eOue8WnmWQ/2yzeCnQdcksPSW+mQ47ubMg8mMY59LnQAzDrIaHvH2GLWJjF
LyzEMKHw1zL1s59IKf9Qhih3AkC9ERhzC84zzIlTWGoWHgLZtqwZib4rlvPiK8xp
+pfFRzknKCqg5VSuXs3VbhCWen2D2x2zNlXctx2ib1bPU5CLqgXufI7npDW8mem7
81gDyosfZgC/U7CKzHIWdwwE4WpZXrTdgol9jlcJct5s7+NCRJADolj2NKpXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9pmgsDAxzfkMiJcWPuK2Q95lrGAwHwYDVR0j
BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB
NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5
RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3
YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy
QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEfSMXIF9POKaMSri8ewu0qE/b60tktHfhJR
5zGRR8riHxa68VXNHeXV/cu64qRDYeqh1E4tSRnbsrWCQ/RmU09Q9OgyXrEuk65i
3w25jjKGRyKpIk9rrl/JKZkUkJad/a84J59ewm1HSyrDmd5YJ+yWwPCdfkoo6Zd7
OAvEQZdIKyZ5zJC7sSq5H2R23aouj1EddRrgHm8DXUMeWYgRaqCDQG90+mcoA3Yh
TyC/rRUuSFdAL8KHUxa/wHAFnNRjVTTA8NhcKPxzLGiEwxvlLQwxZkV9FKodWsJr
TQJuUq3mI4CS901bZ8aDDLl/UuoWr7RdZdggafuaamxvaX46VRo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:07 2026 by rpki-client