
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft
File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json)
Hash identifier: n4iBt3HEdJDIfXiTWiVFHuffX4NmS4tgV55+IPcQ++A=
Subject key identifier: E5:B7:10:4E:E5:57:1A:FB:ED:2D:25:8D:1F:31:B9:2A:CF:95:73:89
Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44
Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44
Certificate serial: 7F30007AC61641BB4B52739C7810A7F1407E1B41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft
Manifest number: 0115
Signing time: Fri 27 Feb 2026 23:51:15 +0000
Manifest this update: Fri 27 Feb 2026 23:46:15 +0000
Manifest next update: Tue 03 Mar 2026 09:09:15 +0000
Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: 3kcNUnYgxVKVBoXER28kbrZmQhsBPZdxoxQfEXns+3M=)
2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl
rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 09:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:30:00:7a:c6:16:41:bb:4b:52:73:9c:78:10:a7:f1:40:7e:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44
Validity
Not Before: Feb 27 23:46:15 2026 GMT
Not After : Mar 3 09:09:15 2026 GMT
Subject: CN=E5B7104EE5571AFBED2D258D1F31B92ACF957389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:f7:f4:c9:5e:80:1d:31:c0:90:19:80:b0:
e6:59:d3:6b:71:bf:0c:fa:5b:f1:44:0c:33:e1:29:
62:5b:9a:6d:8f:99:6f:4e:3b:1b:0b:62:b0:d1:b2:
33:14:61:49:5f:12:76:25:7f:e5:58:1e:8a:68:72:
2e:b0:6c:2f:e5:5e:dd:5f:f3:a0:98:fd:75:66:b2:
ae:28:80:75:92:e4:49:0d:95:9d:48:f7:18:2e:8a:
54:06:3a:34:6a:f3:83:54:8e:ed:35:1e:a3:4a:41:
47:91:84:00:c6:50:0c:32:65:75:32:d6:65:f4:4c:
3d:54:d4:8e:fe:4b:a3:d8:05:12:44:04:a9:7b:80:
df:4c:c0:57:38:33:cb:e8:7d:6a:b5:13:32:c3:8e:
a1:d4:6a:3c:76:c3:54:ba:bb:60:d5:a6:66:ac:6a:
a8:c5:8b:f5:c7:c5:52:1b:b9:94:95:6c:15:c9:3c:
85:31:03:04:1e:18:c9:79:8d:a1:11:f7:f3:26:49:
2a:7d:5e:93:b4:90:e5:33:fc:20:6b:7e:4f:8d:08:
1d:e0:1f:08:d3:61:8b:a2:5d:a5:ba:9b:a2:57:a6:
25:36:1b:dc:32:d5:9a:f0:aa:bc:2b:3e:f5:f1:3b:
76:bd:00:5a:75:8f:b1:90:92:bd:1a:e7:0b:58:a8:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:10:4E:E5:57:1A:FB:ED:2D:25:8D:1F:31:B9:2A:CF:95:73:89
X509v3 Authority Key Identifier:
keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:00:b9:39:71:9e:cb:c4:ff:f7:20:ef:f7:45:bc:40:11:
72:d0:37:8e:6c:b3:08:7b:81:20:5a:4c:b9:3b:61:cc:58:28:
cb:1d:5f:58:49:1c:9b:74:46:6e:e4:32:eb:bf:9e:8b:88:8f:
52:9f:d7:d6:ba:c7:92:48:8d:76:55:7b:20:0a:d0:12:7b:f1:
bf:90:46:8a:a2:da:66:03:0e:be:7c:40:fb:6b:11:71:a3:f5:
a7:43:80:08:bd:74:6a:d5:81:24:46:ee:05:45:85:87:08:a3:
94:00:d8:b9:25:f4:13:79:89:e0:1d:43:d0:c9:66:14:ae:cf:
2b:1d:c5:b0:14:73:ae:20:5e:09:9e:2f:29:4e:1b:a7:2f:4c:
d6:f8:ae:bb:22:90:54:7f:ce:97:9e:18:60:f3:96:d7:8b:31:
dc:ff:31:aa:a8:ae:ff:0e:e1:45:0b:45:fc:d8:2e:2d:ac:c5:
8a:e0:84:21:ba:17:12:f0:36:9b:4e:c9:d6:ec:53:8e:2b:b9:
5e:35:9a:d8:f9:c9:b4:b7:e0:d6:a1:15:b9:bb:3f:04:71:9f:
a0:51:47:f4:5a:e1:67:7e:2b:01:d1:27:6b:c0:81:c1:a9:6e:
c5:b5:7c:a0:d0:f7:b5:7b:72:9c:46:9d:81:d8:77:fb:d1:10:
58:b9:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:27 2026 by rpki-client