
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
File: 4F50242149BE32942675690F53BF8FE81E99F74D.mft (raw, json)
Hash identifier: 1xCSp8d3Z6mmkJK29g/Wr6IJZ5kyDSHWYTbIZKFufVk=
Subject key identifier: D2:6B:89:2C:0B:D9:CE:22:29:5D:CC:F5:07:6D:21:65:96:06:C0:6A
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Certificate issuer: /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial: 125C6BEC0DDB6BF58108AC73EC62ABBF8EEC719E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
Manifest number: 03C6
Signing time: Sun 01 Mar 2026 10:01:06 +0000
Manifest this update: Sun 01 Mar 2026 09:56:06 +0000
Manifest next update: Wed 04 Mar 2026 10:56:06 +0000
Files and hashes: 1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=)
2: 4F50242149BE32942675690F53BF8FE81E99F74D.crl (hash: C4bAvuGlQHFroBgLf3LfmZincsPcLSPJdmIl2+VzDMI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 10:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5c:6b:ec:0d:db:6b:f5:81:08:ac:73:ec:62:ab:bf:8e:ec:71:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
Validity
Not Before: Mar 1 09:56:06 2026 GMT
Not After : Mar 4 10:56:06 2026 GMT
Subject: CN=D26B892C0BD9CE22295DCCF5076D21659606C06A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:13:a9:c8:d0:a7:27:84:cb:73:be:5d:9d:
95:3b:13:a1:03:66:59:91:d3:6b:53:c0:e9:1c:75:
88:a5:9b:8f:7e:4a:c4:db:15:6a:27:b1:3a:2a:dd:
d2:5e:96:6a:9e:5c:3f:5a:15:b9:54:bf:5c:1b:72:
fb:49:77:60:da:97:b9:a3:5e:01:d4:ca:4d:95:d0:
db:f2:fe:27:f8:72:47:9a:1b:6e:f4:ee:09:3a:8f:
6f:c8:a2:ad:c0:4d:1d:d3:e1:65:2c:e5:1d:75:fc:
4b:bb:59:3c:22:98:0a:cf:43:5a:40:27:37:61:74:
de:98:be:4b:dd:f6:96:c6:79:ee:7f:37:03:5e:8c:
3d:33:15:f1:2e:05:02:10:18:15:6f:b8:c2:55:4c:
8b:7c:f9:96:dd:a4:23:03:90:98:3b:25:b5:b0:18:
bb:51:97:0c:f2:86:ea:0b:37:a7:5a:2f:67:1b:65:
fb:a6:2e:0a:69:e0:5b:26:0b:e4:93:78:3b:53:ab:
4b:c5:18:90:e1:dd:76:f6:e3:0b:22:3f:8c:77:b8:
12:f7:e9:8d:26:ec:c0:b3:8b:2c:12:b9:7f:2a:76:
19:88:70:13:d7:ef:d5:7e:85:4b:f8:ab:50:ab:29:
19:4a:d3:f9:bf:8a:2f:02:7e:a3:7e:a9:82:24:e8:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:89:2C:0B:D9:CE:22:29:5D:CC:F5:07:6D:21:65:96:06:C0:6A
X509v3 Authority Key Identifier:
keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1d:ce:39:60:49:14:7b:0d:59:22:55:77:ea:e8:6c:06:7d:
28:1e:02:25:85:19:24:25:69:c1:f5:5c:9c:76:6a:b6:b8:f3:
a8:86:4e:60:c3:2a:a0:e5:19:ff:50:5b:c9:b5:0d:16:27:73:
0d:de:cc:16:28:32:dc:39:7e:c4:cc:5d:d7:24:f3:fe:90:44:
04:2a:bd:f9:f6:87:e2:d2:b7:81:de:ec:be:9b:44:af:05:63:
96:45:da:8a:ee:75:1f:c0:eb:61:14:44:cd:5a:e2:e6:a3:1e:
e5:a3:64:31:53:99:73:d5:39:01:a1:92:ed:ed:a9:12:ea:db:
58:7c:01:49:ce:39:8a:05:3e:6a:e3:c6:84:79:de:33:90:0a:
28:f5:f4:91:8c:2c:15:17:58:d8:26:1c:2f:40:5f:68:a3:50:
dd:85:7a:57:71:79:50:75:86:15:ec:25:0c:e1:a3:fe:c6:9e:
fb:f5:2b:4d:a0:67:99:05:06:d9:08:90:c6:c5:e7:93:a8:60:
6c:02:d6:f8:ee:76:0b:a2:01:ab:bc:29:64:73:74:24:5e:18:
75:03:23:aa:1b:ad:95:42:be:e8:26:f9:67:1c:a6:0d:79:21:
61:a7:37:14:27:6a:e5:54:3e:ab:69:23:93:19:e2:d5:d5:12:
93:da:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:41 2026 by rpki-client