
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json)
Hash identifier: EmqVb5FKxSDHJoO3klSvOVRmh+yOCObN5BjJmUby7Zw=
Subject key identifier: 15:71:A5:3D:53:6A:5D:E7:D5:D0:37:46:52:BB:0F:D3:F7:D6:F9:D5
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial: 34876201ADF2D7C6786FB81415EA0D61103EACD6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
Manifest number: 030E
Signing time: Thu 19 Mar 2026 17:31:50 +0000
Manifest this update: Thu 19 Mar 2026 17:26:50 +0000
Manifest next update: Mon 23 Mar 2026 04:12:50 +0000
Files and hashes: 1: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: Wfy8788i5fY/ej9a3YM/+k7wfb0vlK99rdw4A0vlE+o=)
2: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: GqBNlUasP3BBKs1HKiCmKonJkN/x7ynhSUEn/yP8W34=)
3: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: eFtycN+JT8tU5jGgNYSVj/q/av7ifXOzPsUFY3TiJd8=)
4: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: ahnCiv18V5GeXxMI0LejNqc98spO9iOvG6GpMfgYowY=)
5: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: t0tvOedwZBmqoSfphz50ZVpo28lYeqE5SYlSQlUDw04=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 04:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:87:62:01:ad:f2:d7:c6:78:6f:b8:14:15:ea:0d:61:10:3e:ac:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Validity
Not Before: Mar 19 17:26:50 2026 GMT
Not After : Mar 23 04:12:50 2026 GMT
Subject: CN=1571A53D536A5DE7D5D0374652BB0FD3F7D6F9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:62:29:83:5d:b9:9e:9a:10:12:70:3e:e7:
ae:f0:29:93:e0:aa:c2:62:d5:a2:04:36:cb:75:69:
ab:78:01:7d:31:2c:89:65:67:5e:66:e5:d8:b6:75:
36:99:a0:5f:69:58:69:5e:f1:ee:ef:d2:7b:1a:eb:
ce:fc:f4:a6:38:e6:a2:dc:3b:fc:8f:52:02:7c:96:
a0:f1:ec:96:d6:0b:41:00:3a:46:dc:4b:a4:69:8c:
b6:54:6d:63:aa:64:ad:09:e4:61:2c:9e:ce:15:5a:
f2:65:54:91:5c:79:54:cd:82:e9:20:97:3e:d7:01:
08:26:4e:40:cb:2a:af:ec:5c:d6:12:7f:c9:4b:5a:
6f:4e:8a:9a:48:03:c3:e2:6c:85:e2:58:53:64:6f:
6c:d3:3a:0c:4e:26:ed:7e:79:ba:67:d5:49:dc:81:
5b:ba:42:21:5e:4f:28:92:49:43:92:71:33:de:da:
c4:f9:e8:5f:10:2a:b8:c5:3d:91:c3:87:12:1b:24:
3b:80:9c:7a:f1:2f:06:af:3e:1f:cd:55:c5:a0:4e:
b6:9d:80:eb:a0:30:0b:43:71:a3:37:67:c6:08:30:
5b:82:b9:1e:27:06:09:14:7f:43:e8:6c:f7:32:50:
70:f6:35:23:c4:c9:a5:db:df:2b:26:73:92:1c:9d:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:A5:3D:53:6A:5D:E7:D5:D0:37:46:52:BB:0F:D3:F7:D6:F9:D5
X509v3 Authority Key Identifier:
keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:12:84:d3:3f:8e:34:60:a9:ee:9a:8b:54:87:8c:ab:e7:
d1:3c:1f:cf:30:9d:ae:ab:d7:19:37:05:fb:83:15:f9:36:85:
28:1f:3d:31:6a:03:10:7e:14:49:2d:1b:1a:04:11:2d:36:12:
9b:5f:5a:bd:13:91:42:cc:30:31:8e:54:2f:b2:b9:a3:4a:7e:
32:f2:3b:e7:3a:a0:42:20:1c:52:c7:f7:e8:eb:ee:81:20:dd:
31:c6:ec:b8:d6:d6:8d:6c:d2:e9:50:8b:9a:00:67:54:52:5b:
49:1f:14:04:3f:b1:42:c2:6e:74:76:e2:0d:80:ca:21:6b:40:
dc:67:fc:55:44:27:1a:a1:2f:58:41:f6:d7:a9:62:18:12:4f:
1b:02:8a:f0:e1:f7:5b:8d:d9:0a:06:d1:80:16:76:a3:64:3b:
98:88:66:d0:6f:08:c8:66:dc:e4:81:b8:fb:d3:0d:bf:52:63:
82:f4:2f:a6:7b:1c:c6:c3:9b:2a:f8:c8:8c:85:ba:18:f4:e1:
4f:d9:58:7e:43:c1:49:9f:cd:68:e8:e0:5e:b6:e1:ce:17:1e:
ce:24:65:eb:8a:5c:93:2c:5c:e4:4f:eb:00:f5:d0:23:c9:d2:
eb:d7:39:a6:37:11:e4:4d:0d:c2:d3:f5:40:59:ff:55:e4:95:
09:d0:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:40:28 2026 by rpki-client