
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json)
Hash identifier: pxFepsNN1hJVanE1HEw+DaNTcxmd5Fz5ifKWdsFvbls=
Subject key identifier: D7:6B:42:A0:3D:36:E8:C0:7B:DD:D6:D0:0F:CE:61:B6:44:15:C0:A1
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial: 74EDA26B3AA1469467D8AA68FA2098D1F47F99EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
Manifest number: 024D
Signing time: Mon 02 Mar 2026 02:41:17 +0000
Manifest this update: Mon 02 Mar 2026 02:36:17 +0000
Manifest next update: Thu 05 Mar 2026 04:39:17 +0000
Files and hashes: 1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: 8ciWUdwZZ/8M2piCY61g2VCQC+AxguE+QPO/5Yg67As=)
2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 04:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ed:a2:6b:3a:a1:46:94:67:d8:aa:68:fa:20:98:d1:f4:7f:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
Validity
Not Before: Mar 2 02:36:17 2026 GMT
Not After : Mar 5 04:39:17 2026 GMT
Subject: CN=D76B42A03D36E8C07BDDD6D00FCE61B64415C0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:af:00:0f:4f:9b:aa:7e:56:a8:38:bc:14:
05:a5:d1:c2:16:48:1d:c3:53:e6:78:bb:3f:b9:c3:
1c:47:85:8c:dc:bb:30:47:2d:92:23:f6:55:b3:ef:
7b:05:64:9b:3c:d4:69:cb:74:e4:c8:24:a0:f7:5b:
33:06:fd:e9:f8:88:8a:14:a2:54:9d:14:72:21:3c:
b4:1a:22:f9:9e:41:b6:e1:98:f2:36:b0:ef:bf:8e:
3a:07:c1:7f:0f:e1:6c:07:8d:55:86:8c:7d:f8:dd:
be:bf:6e:b8:7f:02:e8:7d:69:6d:b6:5e:28:ff:6c:
e9:b8:c1:47:e3:56:d5:01:0b:e7:5e:e5:df:6e:36:
eb:66:ad:e9:b0:6d:1c:37:83:c1:00:c1:dd:5d:2a:
df:65:e0:3e:02:60:57:63:b3:c1:1d:4e:cd:7a:ef:
73:c8:77:9b:16:dc:bc:95:52:41:fa:da:a9:ab:05:
cd:ec:51:ec:94:17:3d:cd:67:1d:2d:8b:8e:a5:c1:
95:a9:d7:96:f7:2f:2e:0b:79:fb:7a:4a:03:34:e9:
a2:93:a6:14:25:a9:58:a8:db:d9:d6:c6:0d:d1:76:
bd:2a:34:e3:ab:db:0d:64:1b:ad:01:20:89:91:af:
66:8b:ed:a9:34:48:6c:b9:9a:72:5d:8c:b4:31:cc:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:42:A0:3D:36:E8:C0:7B:DD:D6:D0:0F:CE:61:B6:44:15:C0:A1
X509v3 Authority Key Identifier:
keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f7:51:1c:3e:58:85:bb:60:1f:96:94:47:46:88:87:8f:55:
e8:8e:8b:ec:44:62:e1:fa:d7:7e:52:f5:15:f8:4e:2b:da:f4:
fc:6c:d1:7e:ee:ad:4e:15:67:9b:f1:00:9e:b8:92:01:9c:f1:
31:f5:29:b7:9f:99:45:dd:0c:59:c1:ff:b2:91:a3:9c:68:75:
83:c6:91:db:a9:82:be:37:33:8c:35:30:72:12:db:4a:9f:92:
b9:7b:c1:4e:8f:62:2e:10:3e:bd:e8:44:88:10:4d:15:ef:76:
73:af:0b:b5:b4:87:e1:99:13:83:79:02:87:49:fd:4a:b8:7e:
2f:ce:99:9d:0a:06:ea:51:a9:50:7f:68:0c:1a:ec:dd:5c:12:
f2:78:f2:94:fa:e2:7b:12:da:72:0e:88:a4:82:3e:29:1b:f0:
4b:1c:07:f8:d8:73:6a:a1:09:69:5c:0a:05:f8:87:34:ff:6c:
1c:34:04:d1:56:9f:03:d2:73:9b:3b:08:f4:7b:42:27:df:c5:
49:4f:04:de:f7:65:0c:fe:97:b5:43:29:74:85:dc:fb:6b:f9:
2d:71:50:fe:d0:5f:e8:d7:fb:ba:45:d6:80:d8:7a:bd:a7:4d:
34:e7:ab:aa:30:c0:5d:ab:dd:98:79:13:3b:fb:d9:6f:fe:21:
9c:d0:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:48 2026 by rpki-client