
$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json)
Hash identifier: GECgCwTnijvLNuRCU+HWeB+7gNQ1sZc5SBkeLONys4w=
Subject key identifier: 49:44:6A:2B:37:E9:7C:79:A6:36:C1:F3:08:40:7D:5B:C7:8E:03:E8
Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Certificate serial: 595543D4E76F48028D56E6622E37C652F91C68AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
Manifest number: 054C
Signing time: Thu 19 Feb 2026 10:52:08 +0000
Manifest this update: Thu 19 Feb 2026 10:47:08 +0000
Manifest next update: Sun 22 Feb 2026 11:31:08 +0000
Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: BZ5bGgPRqFb6JVMSVYFSg7lMRL9VCCoPzPloIPY0XEM=)
2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=)
3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl
rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Feb 2026 11:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:55:43:d4:e7:6f:48:02:8d:56:e6:62:2e:37:c6:52:f9:1c:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Validity
Not Before: Feb 19 10:47:08 2026 GMT
Not After : Feb 22 11:31:08 2026 GMT
Subject: CN=49446A2B37E97C79A636C1F308407D5BC78E03E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:8b:7f:86:5a:73:99:cb:8f:bc:39:d1:16:
85:44:75:b4:30:a0:e4:11:09:0b:59:ef:0a:98:f7:
a0:5a:ab:30:eb:0b:db:66:e9:98:d9:f3:62:e0:b5:
87:a7:f8:14:6d:fe:f4:28:56:82:65:b3:26:ef:08:
c0:59:f2:2a:01:74:50:07:a2:70:94:a7:01:cf:4d:
c2:0a:d3:7a:79:17:d8:24:dc:45:54:5a:04:ef:53:
3f:3d:0c:af:2a:e3:c8:1a:a4:be:02:01:74:4b:59:
84:1d:72:86:d6:f6:96:89:d9:f3:2c:86:86:91:db:
9e:d1:4d:59:e1:6b:09:26:96:39:29:da:7e:be:e0:
cc:f3:76:75:45:fb:c4:87:6a:bc:75:83:d0:54:71:
5b:2e:08:00:88:a4:7c:1f:46:8e:c5:c6:4b:83:8e:
17:ca:29:8b:b6:a2:44:11:d1:3d:4d:c6:a9:52:9a:
8f:45:ff:d1:63:93:6d:a0:d2:c5:f0:78:df:4b:31:
2a:c6:b4:b4:f9:10:a6:88:66:03:5e:fb:3b:b2:45:
8c:78:de:5b:3f:bc:a3:74:1f:49:14:13:d2:90:30:
92:37:08:02:bf:05:99:55:1c:9a:cf:b2:4e:69:36:
88:ab:00:a5:8a:fc:ff:ca:ca:15:2c:21:34:01:4f:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:6A:2B:37:E9:7C:79:A6:36:C1:F3:08:40:7D:5B:C7:8E:03:E8
X509v3 Authority Key Identifier:
keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e3:c8:f9:ec:dc:5e:38:a8:b0:15:81:c0:b3:81:b4:60:42:
a4:a6:4e:8d:1d:54:e7:09:a8:70:0d:b1:ac:08:ae:17:7b:37:
50:e2:d7:24:fb:e1:25:d7:84:5e:c5:0d:27:f8:4f:65:44:22:
60:ac:6d:fb:9f:95:99:87:c8:f5:41:7a:49:12:94:e2:ad:71:
d9:f4:1d:7f:b2:7a:5c:f1:2e:6a:9f:4d:0f:5a:c5:cd:32:38:
95:aa:a1:91:34:1f:1f:e8:b2:b0:ff:6c:33:65:ef:63:10:ea:
72:de:72:0e:33:f8:0c:04:55:47:f2:d5:7e:c1:94:d6:05:d3:
9a:f8:f8:2a:04:55:36:4f:ca:83:f8:63:07:35:da:7f:71:90:
55:06:aa:56:19:a8:a9:4e:55:9d:74:e4:a1:8a:e2:49:da:54:
e7:b3:82:f5:c1:d2:d4:a4:a9:3c:68:37:2f:20:7c:97:0d:cc:
00:21:22:00:c3:c4:4f:c9:5e:b8:ea:d6:40:bd:47:3c:11:a1:
33:08:a1:54:f2:52:58:a3:49:b4:51:61:26:16:5d:ad:72:c4:
c8:b7:06:2e:ea:2b:1b:34:67:e5:bd:33:e9:7c:13:43:88:b6:
f8:0c:bc:0a:d6:eb:8e:2f:7b:cf:08:1b:a5:a6:7b:c3:7d:c8:
40:40:2f:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWVVD1OdvSAKNVuZiLjfGUvkcaKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz
OTI1QTg5RjAeFw0yNjAyMTkxMDQ3MDhaFw0yNjAyMjIxMTMxMDhaMDMxMTAvBgNV
BAMTKDQ5NDQ2QTJCMzdFOTdDNzlBNjM2QzFGMzA4NDA3RDVCQzc4RTAzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1Yt/hlpzmcuPvDnRFoVEdbQw
oOQRCQtZ7wqY96BaqzDrC9tm6ZjZ82LgtYen+BRt/vQoVoJlsybvCMBZ8ioBdFAH
onCUpwHPTcIK03p5F9gk3EVUWgTvUz89DK8q48gapL4CAXRLWYQdcobW9paJ2fMs
hoaR257RTVnhawkmljkp2n6+4MzzdnVF+8SHarx1g9BUcVsuCACIpHwfRo7FxkuD
jhfKKYu2okQR0T1NxqlSmo9F/9Fjk22g0sXweN9LMSrGtLT5EKaIZgNe+zuyRYx4
3ls/vKN0H0kUE9KQMJI3CAK/BZlVHJrPsk5pNoirAKWK/P/KyhUsITQBT7XFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSURqKzfpfHmmNsHzCEB9W8eOA+gwHwYDVR0j
BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5
MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1
QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2
ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF
MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADjjyPns3F44qLAVgcCzgbRgQqSmTo0dVOcJ
qHANsawIrhd7N1Di1yT74SXXhF7FDSf4T2VEImCsbfuflZmHyPVBekkSlOKtcdn0
HX+yelzxLmqfTQ9axc0yOJWqoZE0Hx/osrD/bDNl72MQ6nLecg4z+AwEVUfy1X7B
lNYF05r4+CoEVTZPyoP4Ywc12n9xkFUGqlYZqKlOVZ105KGK4knaVOezgvXB0tSk
qTxoNy8gfJcNzAAhIgDDxE/JXrjq1kC9RzwRoTMIoVTyUlijSbRRYSYWXa1yxMi3
Bi7qKxs0Z+W9M+l8E0OItvgMvArW644ve88IG6Wme8N9yEBAL6s=
-----END CERTIFICATE-----
Generated at Fri Feb 20 04:02:12 2026 by rpki-client