
$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json)
Hash identifier: GjvCIOsh8v+b4Y96baCU5IbRJcV0eXhPLfnIZEdIQ3I=
Subject key identifier: 7A:01:E9:3D:C9:B6:15:5D:C3:9F:CF:E3:8A:82:72:92:08:FC:08:51
Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Certificate serial: 5FDC416421DAEBED8BBE5FA1D039547BFAF4C8E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
Manifest number: 0378
Signing time: Sun 08 Mar 2026 01:32:24 +0000
Manifest this update: Sun 08 Mar 2026 01:27:24 +0000
Manifest next update: Wed 11 Mar 2026 04:27:24 +0000
Files and hashes: 1: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=)
2: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: MC3nkdDhTOcTyRq4yMRj5iPbtvXaps81XKh3/l2wOtQ=)
3: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=)
4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl
rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:dc:41:64:21:da:eb:ed:8b:be:5f:a1:d0:39:54:7b:fa:f4:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55
Validity
Not Before: Mar 8 01:27:24 2026 GMT
Not After : Mar 11 04:27:24 2026 GMT
Subject: CN=7A01E93DC9B6155DC39FCFE38A82729208FC0851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:d2:af:25:c4:44:c4:2b:6e:8f:43:4e:42:
da:3c:4a:44:5b:48:87:81:e0:20:89:4d:5a:bc:14:
0c:de:96:fc:d6:42:67:31:9a:4c:a9:2e:57:e2:a8:
a5:a6:c8:01:56:35:c8:71:fa:79:ac:28:a3:74:27:
e5:00:9e:9f:42:46:bb:37:4e:11:11:fc:a2:6f:e6:
fc:27:fd:d9:62:4d:9a:06:f5:62:f5:24:98:bd:42:
ce:7f:2e:e2:97:b9:3a:00:c3:50:ee:fc:43:9b:fb:
8d:63:88:6e:0d:19:17:d2:3b:b7:b0:9e:7f:55:dc:
52:13:8c:87:c7:f5:97:29:33:90:57:86:37:10:2d:
8c:26:18:c6:61:0d:9e:dd:e3:6b:01:1f:96:66:f2:
68:a0:17:98:4a:c2:11:04:3c:3d:fc:48:1e:12:9d:
02:34:6c:08:68:49:00:c2:3d:fb:4a:4f:44:6a:74:
3a:7a:a6:c8:7f:2f:a1:b1:4b:32:9a:18:d6:34:c4:
f0:71:f8:1b:ec:4c:2a:dc:50:3f:c0:23:34:06:9c:
3c:81:f0:68:c3:f0:91:60:3a:67:5b:b3:fd:a5:b2:
90:af:35:ad:39:7d:bf:9f:8d:b1:13:22:a4:26:ae:
94:38:5e:02:00:d9:b6:21:5c:d3:62:f0:e1:e4:bf:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:E9:3D:C9:B6:15:5D:C3:9F:CF:E3:8A:82:72:92:08:FC:08:51
X509v3 Authority Key Identifier:
keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:b2:0a:19:97:ff:c2:b4:30:35:c4:85:8d:92:bd:2b:b7:
49:66:89:48:2c:55:4d:9b:f9:c2:3d:24:b5:32:e0:6b:b0:9b:
eb:99:25:e0:68:b5:11:40:e2:f6:03:ab:e4:02:6c:69:ba:ce:
4a:bc:d8:52:30:ce:5f:fa:09:6c:c1:0c:c5:a2:d4:b2:73:46:
43:e2:d2:ae:2d:27:a2:4e:ac:1d:f1:fb:5a:44:b5:87:4f:1b:
ca:47:9c:d7:35:bf:e7:65:5c:7c:69:88:ea:5a:9f:71:d3:0e:
67:4a:17:fa:42:52:66:be:0d:53:03:97:64:8f:d9:73:93:a0:
bf:ef:4b:a1:b4:70:b1:9b:87:28:c1:23:76:a1:6e:c8:a0:a0:
63:d1:5a:5f:b3:60:6b:a9:15:fe:e7:06:eb:2f:92:f1:61:cd:
6d:c9:84:16:9d:a9:a7:6c:93:16:20:f3:6c:3b:50:db:d2:57:
92:03:51:1a:ba:50:69:f7:53:bd:f3:88:d5:b7:13:c5:eb:ec:
99:21:72:17:87:92:bf:19:bf:1c:90:55:67:58:ca:d6:67:ea:
9a:2e:37:e8:63:7b:bf:f3:91:3f:37:54:b8:db:8b:dd:df:80:
7b:34:82:5d:50:bb:28:8b:eb:52:89:0e:5e:c6:c7:a7:c0:0d:
34:7c:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:12:14 2026 by rpki-client