
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json)
Hash identifier: bp9CTvBkZAqHE2ytDpRGUJIxIjRS9xEk7G6OfXw7PiM=
Subject key identifier: A1:C8:A6:86:B4:89:DF:CA:1D:3A:18:2A:8B:E3:72:0A:3E:2F:8C:E2
Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Certificate serial: 140D435FAA7FF3A3D3C78665A5688816B4B444E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
Manifest number: FD
Signing time: Mon 02 Mar 2026 03:50:48 +0000
Manifest this update: Mon 02 Mar 2026 03:45:48 +0000
Manifest next update: Thu 05 Mar 2026 13:34:48 +0000
Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: /NI1wuvseu9tMjHsL2rgl8PpkvNkJR548xzS0IlcXEU=)
2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0d:43:5f:aa:7f:f3:a3:d3:c7:86:65:a5:68:88:16:b4:b4:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Validity
Not Before: Mar 2 03:45:48 2026 GMT
Not After : Mar 5 13:34:48 2026 GMT
Subject: CN=A1C8A686B489DFCA1D3A182A8BE3720A3E2F8CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:8b:e9:ca:12:99:d6:7e:e8:8c:e4:e6:c0:
4d:8f:8d:25:56:f4:8b:9f:d1:df:30:c1:89:12:02:
97:a4:88:97:f3:34:68:c5:06:1e:ac:3f:f3:55:c4:
99:f8:10:64:1b:90:98:9b:1d:4c:9e:a3:a7:ff:cf:
8a:9b:75:2e:df:0e:c1:ba:50:82:86:78:2e:a3:dc:
26:7f:57:86:98:4c:8c:c1:f2:5f:4d:ee:ce:83:19:
5a:e2:d3:1b:10:5f:84:29:82:c7:5c:1d:df:8f:b5:
b6:a8:6b:38:00:b6:86:98:f4:4d:2e:73:0d:c6:5a:
0d:8a:99:d6:91:d7:d7:72:0e:36:a6:40:3b:f4:f5:
98:6a:a5:49:7c:9b:ba:e8:52:51:ce:73:ed:38:05:
08:8e:a7:61:04:c0:50:d2:ff:3c:d8:40:77:d4:0e:
bb:74:c2:c4:4f:5c:dd:39:47:1d:6e:7c:a1:5e:36:
6d:16:10:fb:e5:2e:d8:f0:9a:54:43:a2:56:7e:ce:
dc:61:1a:b9:4f:7f:b6:39:9c:5a:54:90:6a:bf:ae:
d7:38:f9:d6:d8:d7:7e:37:51:09:a8:a4:a4:c2:61:
84:8c:da:6c:f9:e2:f8:5b:70:da:c7:31:d0:a0:08:
43:62:a5:97:a8:c5:26:2d:3d:a4:82:4d:b3:d8:93:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C8:A6:86:B4:89:DF:CA:1D:3A:18:2A:8B:E3:72:0A:3E:2F:8C:E2
X509v3 Authority Key Identifier:
keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5e:03:5d:7d:d4:ad:6c:8c:d5:12:c0:45:81:fc:38:98:17:
d4:2c:a5:de:e3:d8:93:12:08:21:73:41:ba:a6:83:89:f3:c8:
67:c7:50:78:24:ba:ee:01:af:39:14:ed:b3:00:4f:92:28:e2:
c4:f3:f9:dd:0a:2d:70:ed:a0:73:52:f6:c8:00:30:d9:04:1f:
bc:cd:c3:aa:5d:35:42:44:3d:0a:bb:a8:26:d8:be:78:5f:bc:
2d:25:3f:14:b7:64:b8:a7:54:75:59:f4:f7:3a:9d:71:9e:04:
f3:25:2f:71:ca:3a:dc:0d:e6:29:7e:a3:34:25:87:2e:87:b6:
5d:99:95:c7:c9:fa:55:06:11:23:57:8b:f8:2a:da:f8:83:23:
6e:40:76:b6:73:41:31:70:d0:e7:0e:e9:db:3c:c5:41:15:5d:
9f:f1:7a:79:f1:25:02:19:a6:5c:9e:86:14:3d:28:8a:20:1d:
3c:34:89:63:39:f2:77:c5:e6:5b:9a:72:c1:e5:4f:7a:46:f4:
3c:86:47:0b:c5:e8:e5:cc:67:5c:df:cb:88:93:35:b7:8c:25:
d8:ac:7e:09:80:f7:19:0f:e4:93:7a:3b:45:af:dc:c3:d8:2f:
77:d6:22:dd:55:15:30:e2:1f:54:45:72:a3:ad:2e:07:80:7c:
8d:d0:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:51 2026 by rpki-client