
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json)
Hash identifier: Z08hD2Q2pbPfnhZYJv6s5DoUni38TPgLcaqh6k84NRs=
Subject key identifier: 31:B2:A4:04:BF:EB:17:1A:06:70:4F:82:A5:39:97:00:C1:6B:59:6B
Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Certificate serial: 7F7DE17E998BD5E8C5460AED04AF618BD6672C1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
Manifest number: 0111
Signing time: Thu 16 Apr 2026 06:50:47 +0000
Manifest this update: Thu 16 Apr 2026 06:45:47 +0000
Manifest next update: Sun 19 Apr 2026 16:32:47 +0000
Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: SQE5QNdrjsfLdqdDabY5DFqSDlBKclHJrJh8EuywHDU=)
2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 16:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7d:e1:7e:99:8b:d5:e8:c5:46:0a:ed:04:af:61:8b:d6:67:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Validity
Not Before: Apr 16 06:45:47 2026 GMT
Not After : Apr 19 16:32:47 2026 GMT
Subject: CN=31B2A404BFEB171A06704F82A5399700C16B596B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:31:22:5c:06:79:9d:af:d4:8b:18:d6:4b:
42:cb:06:a9:7f:c4:52:6c:7e:2e:2a:f1:17:f1:ec:
b4:70:98:80:80:05:c7:9d:2d:59:06:28:9b:ac:21:
e8:87:b3:17:e1:91:c3:23:12:ee:b5:8a:48:f0:b8:
8f:eb:8c:a5:4a:5e:56:5b:d2:c9:2d:0b:25:78:80:
81:bd:6f:62:b0:c1:c0:b7:23:b9:da:37:a8:38:b3:
87:7a:d2:07:1a:de:7e:66:86:a1:95:07:bf:01:0c:
91:24:6f:30:98:55:b2:45:31:b6:bf:a0:44:15:ec:
a2:9c:dd:a6:e7:39:a3:48:0f:1c:01:61:4f:a4:65:
91:e9:24:fb:5c:3f:1e:a5:dd:b8:8d:b1:ed:53:f0:
e5:59:b2:59:6e:5b:b7:19:8f:1c:b5:3e:7d:a1:7e:
89:19:82:ea:07:db:8d:ff:25:cb:a6:17:74:23:63:
a7:f1:4f:3e:d6:db:51:1e:36:ff:dd:7a:4b:24:cb:
57:ea:37:05:dd:3a:da:25:b9:ed:9b:05:f0:00:12:
24:ff:7b:ef:d3:57:b6:b5:96:75:28:03:61:f6:12:
5e:a3:57:a4:81:7d:c6:9a:db:c4:51:87:16:90:50:
8b:6e:bc:b5:16:3c:18:b5:72:98:85:b6:4c:8e:86:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:A4:04:BF:EB:17:1A:06:70:4F:82:A5:39:97:00:C1:6B:59:6B
X509v3 Authority Key Identifier:
keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a1:97:97:d9:59:93:df:a0:b3:33:9c:06:37:a4:73:40:b8:
e9:41:68:4f:e0:ca:b5:a1:87:bf:50:65:29:92:ea:1e:ff:38:
60:dc:1f:2a:83:46:45:e2:c5:7b:58:26:54:03:52:3d:0d:7a:
7e:40:0b:b0:e4:20:40:0e:51:5f:d8:27:79:28:de:97:cf:de:
16:7e:b2:d7:80:b9:6a:fa:a1:f6:fc:d4:50:c5:46:c7:fa:12:
ab:6c:5d:f0:34:b9:18:28:7a:26:5b:41:9d:2b:4b:33:40:17:
16:f2:db:d5:cc:e0:8e:35:57:96:cb:66:5b:06:2c:88:c2:b7:
0f:46:f2:fb:1f:70:8a:10:57:7f:87:bd:5c:07:78:0e:e8:ea:
a8:da:94:c5:de:42:ae:22:91:4b:30:2e:80:a9:70:00:8f:35:
44:97:42:bb:7b:af:01:64:26:81:a5:ad:c6:75:88:c0:37:77:
95:31:1c:73:36:de:94:67:8b:5f:2c:10:26:4c:cf:f9:31:8f:
ed:0a:9d:d7:d6:6c:f9:4a:a1:7b:b5:7c:18:e8:cb:12:75:d7:
33:9d:d0:09:f6:c5:42:f8:ba:ea:5c:46:2f:f5:c4:5e:fe:ba:
72:b6:a4:89:02:9f:04:1c:41:01:9d:a7:f0:4e:fa:f3:6b:04:
4e:4f:64:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf33hfpmL1ejFRgrtBK9hi9ZnLB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy
REMxRTg3NjAeFw0yNjA0MTYwNjQ1NDdaFw0yNjA0MTkxNjMyNDdaMDMxMTAvBgNV
BAMTKDMxQjJBNDA0QkZFQjE3MUEwNjcwNEY4MkE1Mzk5NzAwQzE2QjU5NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPjEiXAZ5na/UixjWS0LLBql/
xFJsfi4q8Rfx7LRwmICABcedLVkGKJusIeiHsxfhkcMjEu61ikjwuI/rjKVKXlZb
0sktCyV4gIG9b2KwwcC3I7naN6g4s4d60gca3n5mhqGVB78BDJEkbzCYVbJFMba/
oEQV7KKc3abnOaNIDxwBYU+kZZHpJPtcPx6l3biNse1T8OVZslluW7cZjxy1Pn2h
fokZguoH243/JcumF3QjY6fxTz7W21EeNv/deksky1fqNwXdOtolue2bBfAAEiT/
e+/TV7a1lnUoA2H2El6jV6SBfcaa28RRhxaQUItuvLUWPBi1cpiFtkyOhiCzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMbKkBL/rFxoGcE+CpTmXAMFrWWswHwYDVR0j
BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5
MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx
RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk
YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw
RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJKhl5fZWZPfoLMznAY3pHNAuOlBaE/gyrWh
h79QZSmS6h7/OGDcHyqDRkXixXtYJlQDUj0Nen5AC7DkIEAOUV/YJ3ko3pfP3hZ+
steAuWr6ofb81FDFRsf6EqtsXfA0uRgoeiZbQZ0rSzNAFxby29XM4I41V5bLZlsG
LIjCtw9G8vsfcIoQV3+HvVwHeA7o6qjalMXeQq4ikUswLoCpcACPNUSXQrt7rwFk
JoGlrcZ1iMA3d5UxHHM23pRni18sECZMz/kxj+0KndfWbPlKoXu1fBjoyxJ11zOd
0An2xUL4uupcRi/1xF7+unK2pIkCnwQcQQGdp/BO+vNrBE5PZDg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:20 2026 by rpki-client