
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json)
Hash identifier: AOKAInnF3ghT8q9XcBh2c5OGRAs0ajER8KKfDDFJAL0=
Subject key identifier: 28:2A:CE:CC:CE:55:B6:3A:88:32:F9:ED:0D:01:25:0A:BB:99:FD:FF
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 1064120D83EBFF808207B95CF9B301CED2514ACF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
Manifest number: 055A
Signing time: Wed 18 Mar 2026 01:11:23 +0000
Manifest this update: Wed 18 Mar 2026 01:06:23 +0000
Manifest next update: Sat 21 Mar 2026 06:58:23 +0000
Files and hashes: 1: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: qLREs+77OWFG1DpBfgi2u65PpEb0jc6ZceSIJKMqHDk=)
2: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=)
3: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=)
4: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=)
5: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=)
6: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=)
7: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 06:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:64:12:0d:83:eb:ff:80:82:07:b9:5c:f9:b3:01:ce:d2:51:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Mar 18 01:06:23 2026 GMT
Not After : Mar 21 06:58:23 2026 GMT
Subject: CN=282ACECCCE55B63A8832F9ED0D01250ABB99FDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:51:cd:2e:eb:a3:ec:86:69:ff:e5:fe:16:da:
98:f2:d9:8a:2d:76:48:2e:78:0b:e4:b5:f3:04:5e:
16:05:85:6a:9a:cc:6e:70:28:e4:d0:a5:31:ae:47:
03:61:6e:fd:7e:b9:62:68:0a:49:cb:02:65:91:7d:
e0:d7:a8:9f:8f:9b:72:41:00:d9:c2:0a:61:25:81:
cc:da:b3:7a:a0:f5:b9:20:17:f1:ac:9f:46:67:ac:
dd:1b:07:31:ec:73:f1:36:8b:ea:fb:93:42:74:0b:
59:16:9f:11:c3:db:f1:c1:75:02:c7:62:22:d5:9e:
a4:41:8e:96:1d:34:f3:69:3f:f4:cc:fd:42:c7:ef:
08:88:5b:5e:a0:bc:40:6d:51:3b:ad:83:c8:05:ac:
be:c5:ad:09:c3:eb:75:74:ef:43:3c:71:5a:21:bf:
9e:9c:dd:2d:0d:bf:ee:8c:26:6f:a2:90:e4:c9:98:
d6:d5:81:b1:a7:07:04:08:9a:33:47:8b:89:32:b9:
13:ab:61:d4:3f:7f:6c:dc:d6:e7:b0:bd:91:12:02:
d3:28:83:dc:a8:b3:e6:69:97:69:ed:a2:e9:1e:aa:
0c:01:0e:88:d7:6f:96:45:d4:68:30:dd:b0:6a:cb:
b2:20:d9:9f:fd:99:0c:1d:e5:39:d9:c6:19:5e:bf:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:CE:CC:CE:55:B6:3A:88:32:F9:ED:0D:01:25:0A:BB:99:FD:FF
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:57:9d:4a:56:a0:23:ec:6a:6d:28:c9:35:64:38:c3:fd:
5b:e8:bb:2c:d4:24:31:00:48:c0:ff:c1:80:4c:25:be:6a:aa:
1e:69:bc:58:5e:34:b5:b1:ae:77:ba:90:07:da:25:a6:0a:70:
f2:f2:13:36:0a:a9:28:ce:8b:60:0f:91:a9:82:3c:71:45:17:
89:1a:e2:cc:08:54:d2:8c:9c:ea:f6:8e:68:10:9b:c3:01:28:
10:5f:18:73:3f:fb:76:3f:e6:00:4a:e9:fb:f8:32:db:79:75:
f3:11:4b:05:18:03:29:24:b7:75:26:d1:15:e9:b0:2c:f0:29:
ec:88:0f:10:8b:53:83:d2:64:fc:8c:19:a2:85:ac:19:75:64:
46:50:be:61:ad:a4:59:ab:e4:1a:4b:60:c2:02:e5:50:c2:c6:
38:3e:be:70:92:a5:5c:e9:6a:28:19:8b:dc:df:8b:10:41:5c:
7f:8c:40:86:aa:8d:8a:31:b5:63:0d:46:c5:d6:5d:b7:3d:4c:
b2:80:07:cf:f0:3a:2b:14:1f:c0:30:75:9a:5e:c2:da:4c:00:
93:40:cd:8b:37:25:34:3f:19:73:a7:96:dc:06:4a:3d:56:ec:
69:d1:4a:3b:72:a8:92:99:88:83:3f:0a:49:76:cc:2b:a6:dd:
85:b3:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:53 2026 by rpki-client