
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
File: 4F50242149BE32942675690F53BF8FE81E99F74D.mft (raw, json)
Hash identifier: I/KVT0BONDiBaGhgxVnRoYT17UkB4dGddd+RKORx17U=
Subject key identifier: 3B:46:5B:46:2F:E9:7F:60:A0:22:37:AE:F6:25:28:40:4C:4A:58:66
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Certificate issuer: /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial: 0488935917A41B436F7BA4E7445E66385955A6F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
Manifest number: 03DC
Signing time: Fri 17 Apr 2026 21:01:08 +0000
Manifest this update: Fri 17 Apr 2026 20:56:08 +0000
Manifest next update: Tue 21 Apr 2026 08:19:08 +0000
Files and hashes: 1: 4F50242149BE32942675690F53BF8FE81E99F74D.crl (hash: flSWbNiWwylWQa/bOcOjaFEQa6iOGAohXF7gwsXX5yI=)
2: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: GQfq9Jgh4YCNVXzNyqjJq4E3X1BoA8BlDAILDcTNZFw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 08:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:88:93:59:17:a4:1b:43:6f:7b:a4:e7:44:5e:66:38:59:55:a6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
Validity
Not Before: Apr 17 20:56:08 2026 GMT
Not After : Apr 21 08:19:08 2026 GMT
Subject: CN=3B465B462FE97F60A02237AEF62528404C4A5866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:eb:5f:f2:76:c2:43:1e:43:c1:e6:77:6b:62:
33:cb:35:5d:b7:6f:ce:a5:b3:d2:23:79:e2:e7:d8:
ae:d5:89:fc:f9:fb:8f:7b:d3:ce:ee:0c:44:97:f5:
c6:5e:a6:dc:24:bd:5f:c2:5d:95:37:4e:90:be:9c:
bb:2d:23:09:c5:ee:65:c3:71:fb:35:9f:9c:cc:e3:
1a:59:6c:c7:b2:4b:8e:6d:a3:7b:4e:a6:04:6a:c7:
a0:9a:1d:30:f4:66:ca:e1:15:f2:ac:6c:5c:bd:06:
ac:55:5b:d1:89:7c:b8:7c:da:01:88:2d:ba:10:3a:
f5:75:d4:d4:4a:55:89:2e:22:17:79:dd:32:74:1c:
96:0e:ae:45:e6:94:59:bb:b4:34:d5:b8:9a:57:ee:
89:1c:bb:6a:7e:ae:08:36:19:01:0a:9e:39:d9:78:
c2:ec:75:82:90:dc:36:33:87:ca:62:bf:61:62:a6:
62:9c:a9:74:3d:d9:c2:68:79:97:81:4d:15:72:da:
37:3b:b6:a6:e7:87:21:cc:7d:26:c7:3a:fc:31:69:
0f:43:e8:b8:91:38:cd:b2:85:5e:e6:ae:2a:0f:2d:
28:85:e6:22:c4:d0:b1:a5:5f:d2:6b:65:e8:fd:72:
7f:47:fe:6e:e2:91:1f:45:8a:37:78:c4:84:df:1a:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:5B:46:2F:E9:7F:60:A0:22:37:AE:F6:25:28:40:4C:4A:58:66
X509v3 Authority Key Identifier:
keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3b:2b:55:a1:65:fa:98:53:89:7d:cf:2f:4a:17:7a:a5:40:
dc:da:c2:26:c3:e9:f1:9b:ac:7a:02:67:bd:0d:64:1d:9c:97:
a1:45:26:f5:6a:62:21:79:4e:7e:a6:b6:66:36:e5:a8:fe:38:
9d:06:3b:f5:74:ea:30:4f:15:20:a1:4f:57:f7:bc:eb:b2:1a:
ec:7c:c3:d4:f9:92:0e:8a:93:84:13:6b:70:b3:ac:61:58:1e:
8b:1a:08:4b:a2:bc:42:53:c1:75:24:cf:82:2b:d5:55:c3:7a:
3a:cd:fd:c7:4d:32:8f:42:e1:41:05:ad:66:d1:91:58:c6:35:
bc:98:2f:02:d7:f0:5a:b2:73:aa:19:11:66:62:f3:9d:26:43:
9f:fa:af:d1:81:2f:d1:85:59:dc:d1:53:f5:a5:2e:62:10:bf:
87:86:73:61:57:9f:d3:43:fe:ef:8a:74:7e:04:51:01:05:49:
78:cb:e8:92:9c:e6:db:15:44:30:40:35:82:63:62:40:a3:87:
d4:ea:68:57:6c:30:a6:4d:ff:70:bf:bd:62:af:46:e7:e3:b5:
e0:e0:16:c9:fe:a5:5d:28:b2:9d:77:60:35:cb:93:39:be:67:
b9:58:c8:6a:1f:06:cd:1c:d0:92:a3:5f:df:61:1f:10:31:c1:
9e:7b:5f:9c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBIiTWRekG0Nve6TnRF5mOFlVpvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgx
RTk5Rjc0RDAeFw0yNjA0MTcyMDU2MDhaFw0yNjA0MjEwODE5MDhaMDMxMTAvBgNV
BAMTKDNCNDY1QjQ2MkZFOTdGNjBBMDIyMzdBRUY2MjUyODQwNEM0QTU4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD461/ydsJDHkPB5ndrYjPLNV23
b86ls9IjeeLn2K7Vifz5+497087uDESX9cZeptwkvV/CXZU3TpC+nLstIwnF7mXD
cfs1n5zM4xpZbMeyS45to3tOpgRqx6CaHTD0ZsrhFfKsbFy9BqxVW9GJfLh82gGI
LboQOvV11NRKVYkuIhd53TJ0HJYOrkXmlFm7tDTVuJpX7okcu2p+rgg2GQEKnjnZ
eMLsdYKQ3DYzh8piv2FipmKcqXQ92cJoeZeBTRVy2jc7tqbnhyHMfSbHOvwxaQ9D
6LiROM2yhV7mrioPLSiF5iLE0LGlX9JrZej9cn9H/m7ikR9Fijd4xITfGoC1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUO0ZbRi/pf2CgIjeu9iUoQExKWGYwHwYDVR0j
BBgwFoAUT1AkIUm+MpQmdWkPU7+P6B6Z900wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTA5M2FkNi1iMTE1LTRmMTAtODhkNy02ZTU3ZGNmZDMyMjMvMC80RjUwMjQyMTQ5
QkUzMjk0MjY3NTY5MEY1M0JGOEZFODFFOTlGNzRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgxRTk5
Rjc0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4
ZDctNmU1N2RjZmQzMjIzLzAvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhG
RTgxRTk5Rjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE87K1WhZfqYU4l9zy9KF3qlQNzawibD6fGb
rHoCZ70NZB2cl6FFJvVqYiF5Tn6mtmY25aj+OJ0GO/V06jBPFSChT1f3vOuyGux8
w9T5kg6Kk4QTa3CzrGFYHosaCEuivEJTwXUkz4Ir1VXDejrN/cdNMo9C4UEFrWbR
kVjGNbyYLwLX8Fqyc6oZEWZi850mQ5/6r9GBL9GFWdzRU/WlLmIQv4eGc2FXn9ND
/u+KdH4EUQEFSXjL6JKc5tsVRDBANYJjYkCjh9TqaFdsMKZN/3C/vWKvRufjteDg
Fsn+pV0osp13YDXLkzm+Z7lYyGofBs0c0JKjX99hHxAxwZ57X5w=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:38 2026 by rpki-client