
$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json)
Hash identifier: KurdQeXiLnm5VnZ/jWQPVthQ3V5RCSbiEn8uogOGznc=
Subject key identifier: 45:C3:67:FA:A4:C7:36:4D:73:E5:51:9E:BC:17:A5:23:87:2D:DE:84
Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85
Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
Certificate serial: 24ACED929DD467890DE20C5A88BA46D778C41BE4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
Manifest number: 0217
Signing time: Thu 12 Mar 2026 11:01:49 +0000
Manifest this update: Thu 12 Mar 2026 10:56:49 +0000
Manifest next update: Sun 15 Mar 2026 20:46:49 +0000
Files and hashes: 1: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: nDliXxAdWeXgM2VZEMxrz8ilfKivzxbmnjyWygjX7oM=)
2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl
rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 20:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ac:ed:92:9d:d4:67:89:0d:e2:0c:5a:88:ba:46:d7:78:c4:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
Validity
Not Before: Mar 12 10:56:49 2026 GMT
Not After : Mar 15 20:46:49 2026 GMT
Subject: CN=45C367FAA4C7364D73E5519EBC17A523872DDE84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:c4:cc:e6:44:0b:40:76:81:f1:2b:5b:ff:
65:3d:9f:be:dc:73:44:4f:bb:e0:06:32:dd:fa:4f:
ea:85:14:c2:3b:22:34:07:50:89:0f:97:b2:49:cc:
ff:07:f9:45:56:65:c1:0f:40:31:8b:af:46:0e:d2:
3e:2f:76:42:ea:be:21:8e:cc:23:2d:72:82:1e:ab:
b5:86:e8:3b:7f:67:4d:70:e5:3e:4c:38:f9:6e:ba:
fe:43:34:49:f9:d0:32:7a:39:86:58:cf:2c:70:9c:
32:ba:df:a9:4b:3c:9f:34:11:21:b3:c9:35:cb:93:
de:39:80:b4:53:b6:54:7b:fd:2d:ac:df:ea:ad:c1:
35:ba:03:0c:3f:55:a7:33:9e:cb:bb:dd:63:25:68:
78:d1:f8:8e:73:da:36:af:07:ab:ee:97:93:1c:f4:
9a:52:68:4a:93:c4:3e:b8:7f:ec:d3:c9:39:80:c0:
b0:e0:b0:4d:9e:1d:8e:a8:f9:71:bd:b4:df:0a:57:
be:b4:98:2a:f4:e2:bf:61:5f:95:a7:bc:fa:d8:e5:
0f:03:e2:bb:bd:b8:ca:c2:7e:56:b1:1a:43:1a:2e:
0e:a6:f5:d4:d8:9d:41:33:b8:69:1f:ab:62:50:6d:
2f:20:e1:c5:75:a2:6e:6a:38:44:2b:24:7e:67:7c:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:67:FA:A4:C7:36:4D:73:E5:51:9E:BC:17:A5:23:87:2D:DE:84
X509v3 Authority Key Identifier:
keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:44:ab:dd:1c:b4:9d:4a:60:43:86:31:5e:de:ce:e7:cb:
3a:a0:25:78:ac:b4:c2:1d:82:6e:81:42:4d:85:85:ef:93:01:
ab:54:0f:b3:ff:9b:6d:f5:0f:fc:c7:fe:01:31:60:ef:c8:e3:
0d:43:29:51:b6:07:63:b8:96:e6:51:36:70:ac:2f:19:7c:de:
52:29:51:1a:c9:2b:d3:27:09:0b:de:9d:64:bf:83:8e:fc:23:
9d:b8:01:e3:08:a8:97:9c:9c:41:c8:dd:90:f0:a3:67:8c:fe:
9d:ef:ff:18:95:53:1c:82:4c:b9:71:0a:ce:e9:75:9f:57:89:
13:da:82:ab:b6:55:1f:c2:8b:75:6c:b1:b7:d2:42:ef:17:b1:
7d:e1:5a:87:19:22:9e:5b:91:67:a3:55:ed:eb:fb:a2:ad:18:
d6:46:28:bb:b0:11:30:74:04:c7:1d:81:79:41:d8:b5:98:fd:
7b:5a:f2:4b:46:b5:5a:41:ee:de:62:f7:f2:f2:b7:a5:07:8b:
5e:ff:f6:80:44:a1:25:40:7f:ff:00:96:0a:b9:3b:43:04:b8:
79:4a:ae:24:cb:4c:2e:53:21:88:e9:9e:25:26:16:f7:c1:8c:
94:74:e0:64:da:a4:f2:81:db:63:97:f2:9c:e3:9a:d4:32:cc:
12:a6:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:31:53 2026 by rpki-client