
$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft (raw, json)
Hash identifier: 2aZ9yV0ghtJMJezwJDKXfQ6EIvEmVsK6H/rLvPxqpLc=
Subject key identifier: 24:AC:F3:C3:6A:6A:A2:03:18:FC:78:82:0B:F4:2F:17:73:5B:F0:5E
Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Certificate serial: 1A34F69816B04AAD02693ABF9EF8B42ADDF30FC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
Manifest number: 018B
Signing time: Sat 21 Mar 2026 03:42:06 +0000
Manifest this update: Sat 21 Mar 2026 03:37:06 +0000
Manifest next update: Tue 24 Mar 2026 10:32:06 +0000
Files and hashes: 1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: s9YO6rgovPFygVKDvxvdCQqCqWD4vEgIZoUoDmMCbHA=)
2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: fDXMTAj/S8oQs6LhTEcvx+m4yd6GabWyid1nJ3v2IOc=)
3: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl (hash: rGyqWgXu0b95+G8EWtgdDAoqsluEYwr/Gb+3vqvb0hs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Mar 2026 10:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:34:f6:98:16:b0:4a:ad:02:69:3a:bf:9e:f8:b4:2a:dd:f3:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Validity
Not Before: Mar 21 03:37:06 2026 GMT
Not After : Mar 24 10:32:06 2026 GMT
Subject: CN=24ACF3C36A6AA20318FC78820BF42F17735BF05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:0c:5d:f0:25:c2:23:cd:5b:bf:96:f2:12:
b2:88:05:b6:39:0a:b5:0e:d1:54:fc:d6:4b:06:96:
00:e1:21:de:69:91:24:32:08:8c:1e:9a:2a:dd:23:
b5:29:21:3f:74:a1:b9:57:47:6d:77:e0:f4:0f:e4:
2e:19:87:53:4f:f7:a3:1f:6b:3f:d8:25:4c:5a:b4:
06:5f:c8:ec:71:80:9f:e3:1e:0d:31:ad:ea:54:57:
60:2d:82:fe:6a:c5:0e:7a:41:44:bb:fd:40:68:da:
bb:83:8c:65:1b:f4:4a:d1:6a:fb:26:47:0a:7f:e7:
75:6d:fd:92:b9:4f:9a:b1:b7:39:b8:fd:72:41:ed:
6a:56:9d:ca:2d:d1:de:2f:65:e1:30:0b:85:fb:4a:
32:e7:a9:0f:26:43:cc:34:31:82:38:9a:ad:05:60:
96:1b:83:c6:21:2c:63:c1:aa:a7:58:73:3f:ba:f6:
71:94:46:dd:a3:91:84:1b:32:d9:18:81:44:67:e5:
bb:3e:90:d8:86:7c:bb:47:79:b6:db:39:06:e2:4b:
20:01:4b:6a:cb:dc:84:01:4b:9c:7f:b1:9a:d0:80:
59:da:4b:62:81:60:44:c2:fe:99:23:cc:be:2f:94:
d3:95:72:60:d2:04:ff:52:22:ab:e5:5a:1c:da:f6:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:F3:C3:6A:6A:A2:03:18:FC:78:82:0B:F4:2F:17:73:5B:F0:5E
X509v3 Authority Key Identifier:
keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:21:ad:cf:c6:0f:e2:fc:0f:b9:b7:a1:82:74:55:a3:e7:
03:a6:99:a6:29:47:d8:34:f7:f9:3c:f2:3f:96:da:92:fa:28:
88:82:28:6d:0d:02:d0:5d:57:f2:24:b7:9e:02:6a:4a:99:bb:
99:10:0c:7a:21:fd:05:e0:d2:c0:fe:c4:f7:5b:30:fa:14:30:
17:70:6e:75:99:e6:59:9e:8f:7e:17:3d:d5:aa:0a:2b:61:52:
c4:85:2d:57:e4:8c:cb:23:b2:9e:bd:bc:ca:60:08:f9:b0:73:
b8:97:4e:a8:14:27:fe:86:18:17:4b:f2:96:3f:cb:98:ef:f9:
84:d5:b6:09:58:f1:e3:50:0e:ad:1f:eb:30:ec:9d:24:85:df:
97:e4:80:dc:38:8a:bf:a0:a7:c3:b2:2f:70:33:4d:b6:97:58:
9a:34:04:1b:0a:9a:62:18:05:92:13:62:18:21:d7:f5:30:a6:
62:c9:1c:6a:3c:1d:d9:a4:7b:18:b3:5e:6a:2a:aa:26:63:02:
c3:25:8a:a7:a8:db:0d:4e:7e:2b:e3:f1:35:b4:43:d7:75:75:
6d:59:c5:8e:e6:79:45:b5:6d:d0:19:a0:46:e7:48:03:d5:a0:
7b:56:0f:42:b8:62:f9:9e:dd:a2:d4:53:5f:8b:af:f3:b9:fd:
cd:16:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:56:20 2026 by rpki-client