
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json)
Hash identifier: zNCC8Y/kS1ZwrONKb6b/Wr69c11KsqqM04AbT6kdYjs=
Subject key identifier: 1F:83:FC:BE:7E:A4:DD:D5:C5:99:D2:A5:9E:4A:23:73:14:BE:37:D8
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial: 4C9541568371A5B56C2DFC9EE5E81E640CC366F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
Manifest number: 0219
Signing time: Wed 05 Nov 2025 00:31:09 +0000
Manifest this update: Wed 05 Nov 2025 00:26:09 +0000
Manifest next update: Sat 08 Nov 2025 01:58:09 +0000
Files and hashes: 1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: t39Sz6ygn/4NWbft2lWQ4+ZQfz2dWpDMaY1tcwi/YOk=)
2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 00:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:95:41:56:83:71:a5:b5:6c:2d:fc:9e:e5:e8:1e:64:0c:c3:66:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
Validity
Not Before: Nov 5 00:26:09 2025 GMT
Not After : Nov 8 01:58:09 2025 GMT
Subject: CN=1F83FCBE7EA4DDD5C599D2A59E4A237314BE37D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:56:18:f1:dd:f9:a7:0d:cd:f8:71:30:74:
44:ee:f2:14:eb:96:1d:54:47:5c:fc:02:ef:e0:c8:
3a:86:24:6a:7b:52:93:a2:2b:aa:39:93:0d:c6:18:
cb:9d:b6:3e:a4:36:fe:ea:2f:a1:4a:6f:5b:9d:d1:
77:8a:7b:b5:e4:ed:88:0f:41:69:27:29:57:e9:e3:
bf:ac:95:b3:e7:89:5b:25:66:cf:81:ff:70:42:7f:
c5:28:c4:83:49:54:94:53:a4:7f:20:ae:0f:eb:4b:
0e:3c:f1:93:83:7a:3e:8b:53:30:ec:91:de:1d:0b:
04:57:70:6f:6e:78:92:d1:ce:00:86:bc:9a:e2:13:
a0:02:0b:c0:a2:73:ae:fc:2a:c4:1b:b9:f4:1b:f7:
29:1a:02:d7:f3:dc:3e:64:01:82:dd:f1:28:da:c5:
6f:7d:5b:d9:a4:6b:2e:58:80:e2:ae:d5:b3:c1:76:
96:34:2c:6b:72:dc:09:27:6b:09:3a:01:28:96:2a:
4b:fb:46:1a:ed:f0:7d:34:78:1f:76:dc:5d:66:4c:
6b:4c:62:94:20:b5:cc:98:65:77:65:17:66:48:fd:
12:aa:52:ba:1c:af:4f:f2:a6:74:20:62:84:fd:d1:
05:6c:c3:35:b2:ff:5d:8f:26:20:a4:d6:f0:8b:5e:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:FC:BE:7E:A4:DD:D5:C5:99:D2:A5:9E:4A:23:73:14:BE:37:D8
X509v3 Authority Key Identifier:
keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:39:de:c1:e4:40:f1:2a:2d:70:95:a6:39:b6:88:4c:db:17:
f0:80:e7:f6:cd:a0:97:7c:e3:9e:ea:fc:6f:60:99:81:6c:c5:
65:7c:e4:6d:fd:ea:af:6c:aa:48:f5:07:6a:8a:a6:e3:13:87:
c0:87:c6:b2:f0:54:b1:89:4b:6f:90:4c:d8:e1:a2:4f:dd:d7:
a4:ce:80:28:66:d6:96:b3:1e:1e:f7:d7:73:be:ac:e4:36:53:
1a:40:a2:1d:fb:9a:d9:38:4e:cb:7d:13:73:c6:81:22:05:ea:
7a:5a:b6:3a:7d:1f:e4:13:92:33:a9:e9:28:d7:4a:a2:25:c5:
6e:e3:af:bf:07:5b:d6:26:e4:d4:db:59:31:3f:4e:d1:8b:bd:
62:0b:4b:6b:0c:28:9a:2b:bd:aa:66:ea:f2:12:00:74:3c:3a:
d5:e4:12:e5:d2:df:2e:80:8f:94:32:a2:4f:42:b1:14:52:d1:
8e:47:85:8d:ab:c2:65:1f:b4:ab:ed:f2:13:fb:94:fa:0c:22:
ff:2c:e7:b2:73:c8:44:e0:17:e0:30:52:ea:3a:5b:19:c8:e7:
24:b9:13:d3:08:b7:29:85:64:e3:ac:d7:ea:05:0c:56:f1:04:
0e:e3:a0:3f:c0:6a:6c:f2:62:eb:3c:8a:57:46:d4:18:e4:36:
39:5e:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:01 2025 by rpki-client