
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
File: A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json)
Hash identifier: sbY3LWEd9aIgQz1XdPcJFQXp1H5sCaVsrxJsRYAsNFg=
Subject key identifier: DB:B1:FF:C9:D6:04:D9:4C:38:47:E5:6D:56:7B:5C:41:79:88:34:A0
Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C
Certificate issuer: /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
Certificate serial: 14778C42FDAC2573FDA36B1905EE4AE8245C671F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
Manifest number: 0154
Signing time: Mon 02 Mar 2026 04:51:43 +0000
Manifest this update: Mon 02 Mar 2026 04:46:43 +0000
Manifest next update: Thu 05 Mar 2026 09:25:43 +0000
Files and hashes: 1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: vsvF4k5zpYR/YAtx3WAzYq1WV9h2JUnncmNBA57EuUM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl
rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:77:8c:42:fd:ac:25:73:fd:a3:6b:19:05:ee:4a:e8:24:5c:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
Validity
Not Before: Mar 2 04:46:43 2026 GMT
Not After : Mar 5 09:25:43 2026 GMT
Subject: CN=DBB1FFC9D604D94C3847E56D567B5C41798834A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:c9:50:c6:ac:2e:f1:b7:d7:45:90:27:0f:
f6:80:41:a5:21:db:10:87:4b:8a:a8:fe:59:db:b5:
f2:8c:89:92:3f:2c:d6:65:04:14:6b:b3:65:3a:92:
82:94:b8:4b:d4:9c:a1:4b:b1:0e:12:8c:e3:ca:1d:
6a:c9:d4:d5:8e:50:22:c4:0d:82:68:3f:08:00:b1:
6a:cb:fc:4f:25:6a:0e:ce:bc:2b:71:11:8e:06:c7:
a2:e7:5d:c0:9f:71:d9:44:0f:23:4a:2f:8e:c0:67:
8f:8e:5b:b1:94:2f:f2:5e:42:e9:ec:ae:31:19:7a:
37:cb:24:82:f3:24:0d:78:9d:07:c3:e0:4f:7c:60:
d3:ea:23:d2:1e:f0:be:58:97:39:ac:c6:67:e5:bb:
1a:85:51:d4:07:db:6c:b6:27:ba:1b:21:60:b1:9d:
bf:8f:45:90:10:99:e7:f4:a8:0e:0c:16:22:22:d4:
ab:a7:2f:56:6f:bd:33:b5:96:ad:ce:fa:4a:c6:e4:
58:a5:65:ac:d1:f9:75:7d:c2:f8:4a:7e:38:2f:7e:
f1:54:07:40:97:0e:9a:af:14:66:1d:11:d7:5d:16:
7e:50:9f:38:e9:fd:34:c6:23:fb:06:3c:16:98:46:
17:ff:11:ec:97:0a:d0:16:f0:7c:dd:95:2e:00:8c:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:FF:C9:D6:04:D9:4C:38:47:E5:6D:56:7B:5C:41:79:88:34:A0
X509v3 Authority Key Identifier:
keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ab:78:db:ff:b9:09:7e:4d:11:1c:4f:56:b0:68:cd:e5:26:
54:5c:b0:bb:8b:a1:9c:9e:22:b3:65:e4:59:e4:4e:4e:8f:48:
e3:b9:8a:53:9b:ec:94:80:19:b6:ce:08:5c:e3:86:20:13:72:
2c:39:2a:55:ee:87:f4:3f:9f:08:a8:a2:aa:a1:ad:ab:fb:8b:
48:62:dc:62:8c:8c:f1:30:02:63:47:34:4a:4f:69:a7:1d:ab:
3a:f9:c8:95:d8:b4:eb:5b:cc:6c:3e:2b:9e:1e:d9:f8:4d:80:
de:1e:f9:17:8f:00:ee:fe:7c:39:ff:0a:58:04:50:42:51:ef:
05:9f:1e:8d:31:ca:77:12:42:d3:2c:45:30:44:f6:27:cb:9f:
e0:ce:be:a5:20:3e:97:08:2b:52:30:31:f0:46:e5:dd:43:ed:
d4:b5:c8:a2:b3:5b:0e:2c:6d:5c:89:62:3e:13:74:f7:63:29:
26:77:e9:ca:9d:64:ce:41:f9:2d:96:66:4f:ee:b4:7e:63:7d:
87:f0:65:f6:46:4b:02:ae:13:ea:43:d3:5d:d5:47:e6:fb:5f:
69:9e:b9:49:5c:04:c2:3f:fd:c5:15:74:d4:42:0b:57:26:b2:
1b:08:31:68:2b:55:13:c2:07:51:2e:13:9d:e0:be:ea:61:4e:
40:a6:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:03 2026 by rpki-client