
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
File: 4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json)
Hash identifier: GWyXH/vxlwWDUqLcq6U724qS3yAGBIbiAjIflfbWRDg=
Subject key identifier: 59:8C:3F:96:2C:BD:ED:C3:B4:69:F8:36:26:61:4C:AF:9B:65:38:27
Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13
Certificate issuer: /CN=4ED16B9231905A1C7A353DF749BF99487E69E313
Certificate serial: 0149381355F42BBBDAE678CC0BDA5FA3510069A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
Manifest number: 0139
Signing time: Mon 02 Mar 2026 10:01:37 +0000
Manifest this update: Mon 02 Mar 2026 09:56:37 +0000
Manifest next update: Thu 05 Mar 2026 17:32:37 +0000
Files and hashes: 1: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: a93KpEax0fPdkTafT340SpmLyRzmfqJD4jyNN28SwI4=)
2: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: 7VTB88vseP1qaXg78jeUQOCaADrxTcbc/a9UTrZD8c0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl
rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:49:38:13:55:f4:2b:bb:da:e6:78:cc:0b:da:5f:a3:51:00:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313
Validity
Not Before: Mar 2 09:56:37 2026 GMT
Not After : Mar 5 17:32:37 2026 GMT
Subject: CN=598C3F962CBDEDC3B469F83626614CAF9B653827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:16:bd:9e:69:17:a9:f8:a0:1c:1a:25:9a:7b:
14:39:34:f6:4f:02:2e:c8:d9:3f:3f:dd:4d:80:b0:
80:88:cc:c1:7b:90:83:27:81:d0:99:11:47:93:a3:
d6:28:ad:d1:fa:10:6a:16:a4:39:1b:b4:e9:b5:1b:
40:c1:42:a3:e6:36:5b:15:52:7f:7b:eb:4e:84:f7:
1a:bc:c5:45:a2:d5:d7:05:c1:61:01:d0:68:63:20:
fa:ef:ab:cd:9f:8c:bd:55:80:3d:5e:47:1e:8c:fa:
02:e2:fe:cb:f7:d7:fe:11:fd:f8:89:2b:89:fa:d5:
36:00:82:e8:f0:12:87:8d:79:72:d8:fa:ee:c0:02:
ba:da:38:ff:7a:03:69:1d:05:e5:bd:6e:f2:c6:fc:
10:5e:a4:79:e8:2b:31:cb:d9:f4:c0:a4:02:c7:41:
c9:29:08:e1:7c:51:a6:bc:2f:f9:95:7f:12:8c:2d:
cb:c7:72:38:1e:fd:06:22:21:b5:be:be:d2:f0:64:
2a:be:d5:a3:ee:0d:c6:c4:30:74:dc:f9:aa:c4:d7:
e0:f9:7a:63:18:ac:a9:d3:c6:ef:54:cb:42:d9:32:
78:91:e5:fa:4f:39:3c:f5:d3:13:2c:5f:47:fc:e8:
58:56:d9:6a:06:70:4a:b2:b2:a3:e5:41:50:77:70:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8C:3F:96:2C:BD:ED:C3:B4:69:F8:36:26:61:4C:AF:9B:65:38:27
X509v3 Authority Key Identifier:
keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:40:95:04:6a:9f:24:42:d0:9d:cd:7e:e7:b5:f6:9f:0c:
63:1c:ea:79:ee:a6:93:84:5f:97:34:a8:e9:a3:39:88:81:b3:
bc:b3:2f:d7:6e:bc:cb:47:71:c6:86:51:c5:08:60:bf:e2:bb:
72:9f:81:7e:f5:d2:e3:6d:25:b0:6d:12:0a:85:92:2c:72:97:
67:9a:d2:95:61:48:62:96:18:84:ab:b5:16:75:4b:db:a4:bd:
eb:a8:ab:5c:81:dc:b1:c1:f8:f4:25:18:38:fe:ae:ab:e3:27:
3b:fd:93:a1:b6:c6:1a:e7:1d:bb:0f:ad:0a:16:e6:e6:59:55:
98:58:fe:54:68:12:27:c7:8f:51:07:df:75:31:14:fe:55:b0:
4d:2f:40:86:9e:2f:b7:1b:b3:6b:c7:24:da:34:f7:81:a8:10:
3d:8d:f6:a3:56:1b:9e:c0:da:eb:d3:ca:fd:77:66:0c:4a:2b:
7e:31:f8:2f:30:1a:d5:e3:6a:e9:cb:67:86:ef:29:05:db:f9:
fe:1c:a7:07:1e:ed:6c:1f:45:31:88:30:51:48:57:f0:b9:05:
ff:5a:63:a9:40:22:f4:59:cc:7b:df:01:05:dc:d3:fc:2a:80:
bf:5b:a1:3d:4c:b4:e7:a1:4f:ad:d0:75:48:65:88:64:71:56:
0b:f8:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:08 2026 by rpki-client