
$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json)
Hash identifier: L9jDePY8Kc+rVhOCGHaj8sbTIsq3STq1d5FbBx9iSrY=
Subject key identifier: D5:C0:EA:B3:C9:6C:CA:B3:2F:67:7E:87:5F:26:43:DC:7D:76:1F:48
Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Certificate serial: 410B980F8F4E443AB114F73EEC62AB97D04146C5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
Manifest number: C8
Signing time: Mon 02 Mar 2026 13:01:02 +0000
Manifest this update: Mon 02 Mar 2026 12:56:02 +0000
Manifest next update: Thu 05 Mar 2026 17:32:02 +0000
Files and hashes: 1: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: Bbdwc9t92OqxiIxjhYIk1qXW/unMQBuHuhOUzxl9pCk=)
2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 17:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0b:98:0f:8f:4e:44:3a:b1:14:f7:3e:ec:62:ab:97:d0:41:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Validity
Not Before: Mar 2 12:56:02 2026 GMT
Not After : Mar 5 17:32:02 2026 GMT
Subject: CN=D5C0EAB3C96CCAB32F677E875F2643DC7D761F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:9c:18:cc:75:84:69:5f:cf:73:ef:12:5c:
59:d1:8c:99:38:0a:bb:67:45:a3:78:11:56:9b:59:
d4:f1:b7:5c:a4:04:fd:fd:72:1b:42:35:09:91:bf:
08:0e:cf:65:ae:9c:a4:5d:cf:0f:b2:95:37:f5:e5:
92:b1:6f:a9:4e:7f:ad:cc:d4:ad:1f:b3:5e:93:d6:
15:24:0c:80:6b:24:ad:ce:20:f2:89:ac:f6:9e:fb:
99:58:03:ea:69:56:b3:ce:7a:78:7e:a9:e9:0e:e5:
23:9b:24:ec:14:b0:2e:e6:f7:db:db:fa:d0:54:70:
a9:b9:a7:3f:e7:77:92:fd:30:b8:71:77:d0:b8:5b:
ba:01:34:25:e1:66:07:76:a1:7e:e8:cd:be:0b:51:
12:b2:46:aa:49:81:54:68:3a:50:f8:dd:47:a1:b4:
51:f0:b9:a3:36:54:8c:dd:49:8e:6e:26:18:c2:c3:
f1:30:7a:e7:75:20:a1:7d:59:9f:b7:a3:6a:34:97:
4c:68:fd:47:ba:e8:6e:e0:f5:37:fc:2f:38:e8:b8:
20:4c:96:84:7f:80:0b:f3:0d:57:b4:ae:ec:7b:45:
b7:92:10:3c:6b:e5:5b:e3:6a:59:40:29:75:ac:d0:
1e:29:57:1e:04:d0:13:df:94:6c:99:45:dd:43:02:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:EA:B3:C9:6C:CA:B3:2F:67:7E:87:5F:26:43:DC:7D:76:1F:48
X509v3 Authority Key Identifier:
keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:43:91:b8:2f:60:a7:d2:ff:c9:8b:10:be:d9:66:5b:df:
12:8e:47:4f:7c:e1:ef:5d:3f:18:97:21:7d:ae:ea:b2:63:32:
8f:b1:5d:d1:dd:21:d9:78:37:31:36:53:43:bb:1d:10:06:10:
d9:f9:1e:0c:42:a0:52:39:3a:f9:10:15:8d:83:fd:46:96:1b:
a8:4b:21:30:3d:19:6e:1c:d5:1a:07:6a:77:38:9a:d2:06:ab:
1a:ef:35:12:e1:b3:4d:97:36:6f:a5:23:dc:f3:6e:69:73:15:
61:53:31:2a:b9:5f:30:43:07:cb:36:34:7e:6e:a8:78:71:83:
7c:13:de:09:84:10:5a:28:93:4a:0f:26:64:ae:9e:f4:96:4e:
11:f1:48:00:24:7b:66:d2:c4:1f:68:21:42:93:76:c9:2a:68:
5e:e5:e8:8f:0a:1a:ff:5e:1b:6e:37:75:2c:18:88:20:30:2c:
09:0f:73:fb:ef:c0:fd:e3:1f:0c:f8:ad:59:2b:a7:bd:75:84:
3d:72:73:c3:b8:67:cd:fb:55:b7:cc:66:9d:ac:bc:8c:d4:85:
9b:a0:5c:e0:7a:45:64:cc:fa:82:7e:c0:61:09:80:31:1a:0e:
55:00:0b:90:08:1c:cf:a6:f6:37:d4:86:8d:56:d2:05:d2:f2:
9f:bd:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:52:02 2026 by rpki-client