
$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json)
Hash identifier: j5ec3g8Ct18Y7m0xVMMv+htCAF7Xe+/F9d6kdfz1WgU=
Subject key identifier: 55:16:B5:B2:D7:58:B0:35:16:89:07:70:3F:0F:1A:A9:C0:B5:A7:9C
Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3
Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3
Certificate serial: 472DBA15FF29F0395ECEAE250A948D33BAB25F67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
Manifest number: 017C
Signing time: Wed 18 Mar 2026 03:42:09 +0000
Manifest this update: Wed 18 Mar 2026 03:37:09 +0000
Manifest next update: Sat 21 Mar 2026 15:17:09 +0000
Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: w1eHlczzWAhmz9P8A8nkz0yMpgychxrMUf+3eUgIBKk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl
rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 15:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2d:ba:15:ff:29:f0:39:5e:ce:ae:25:0a:94:8d:33:ba:b2:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3
Validity
Not Before: Mar 18 03:37:09 2026 GMT
Not After : Mar 21 15:17:09 2026 GMT
Subject: CN=5516B5B2D758B035168907703F0F1AA9C0B5A79C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:df:5c:25:bd:1b:df:0b:c6:3d:33:ea:52:
97:c5:53:88:bb:e6:25:5d:4b:13:18:f3:02:2c:9e:
f0:7c:b9:cc:82:7f:92:75:bc:57:5b:48:7b:ed:43:
44:fc:4b:d5:f8:bb:af:26:aa:23:93:dc:f9:1e:a4:
c2:95:66:a7:ec:60:d0:05:0b:b4:77:a9:ae:53:db:
dd:93:f3:45:ac:c5:75:62:12:5a:ab:8f:ae:d4:01:
12:b2:18:9c:5d:5d:c0:6d:c9:0e:1a:ac:f3:3b:50:
d1:60:39:00:cb:ea:2d:7d:d0:1f:0e:63:90:9c:9a:
dc:f3:bd:8f:0c:ca:a6:10:42:a5:1f:1a:ae:d4:5e:
e3:bd:e0:69:57:b2:84:b7:30:89:e2:1a:ca:98:d4:
ad:4c:f4:51:d7:b5:6d:0d:cc:f4:1e:72:a4:62:b1:
6b:51:84:d9:11:62:fc:71:d8:58:7e:c2:0c:f0:f4:
36:8a:53:dc:66:f8:78:93:a5:0a:5a:5e:f4:4e:50:
ea:a5:42:e4:ad:61:2c:a5:33:5e:47:50:31:54:99:
31:4d:56:bd:61:5c:d2:d1:a2:a0:ef:e6:4d:68:a6:
03:92:fa:9c:5a:51:65:4b:26:3f:d7:2f:a6:cd:ad:
8e:ec:65:1e:d1:39:de:57:f0:1c:5b:36:5f:62:e7:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:B5:B2:D7:58:B0:35:16:89:07:70:3F:0F:1A:A9:C0:B5:A7:9C
X509v3 Authority Key Identifier:
keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:3a:cf:fd:ee:b3:8e:c3:0e:05:20:cd:d1:cf:5b:72:16:
74:6c:f3:7f:be:64:b0:31:7d:9d:c0:c5:b5:84:9f:ed:0c:9c:
ce:a9:1c:5e:c7:c3:c0:54:2e:c9:a3:d1:41:a3:02:75:f8:03:
e4:ae:49:22:d8:38:51:38:e2:bf:5d:f7:43:60:78:48:38:18:
cc:f9:5c:01:cc:1a:b0:2b:2e:e5:28:41:38:34:9a:bc:07:e5:
f8:8e:e5:7d:bb:b7:ca:65:22:8f:ff:d8:81:5e:27:64:0f:9d:
ab:71:50:66:dc:b2:33:2e:41:fe:9b:e4:42:0e:8f:56:c0:63:
80:c7:6a:5d:9e:ec:c3:18:c6:4b:02:83:cd:2c:45:e5:07:20:
05:fd:db:32:89:4a:a8:3f:fe:0d:a5:d5:21:0c:e2:a9:bf:d0:
57:62:09:91:51:45:2f:bd:29:5e:d8:74:a8:4c:c9:f2:20:c5:
30:ad:e1:98:b7:d9:e0:b5:4b:7c:f2:09:c9:1b:ae:84:c9:d1:
ff:40:7c:8b:55:8e:0d:aa:5e:de:8e:49:cd:1d:16:a3:1f:5a:
ef:c3:40:d3:3c:a6:93:3b:30:39:03:0a:fd:5c:68:0f:ba:02:
6c:52:27:5f:19:8e:ed:f7:8b:8e:e0:6e:35:45:63:89:e6:f2:
95:b7:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:31 2026 by rpki-client