
$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json)
Hash identifier: 3LXtxZN8mYEWi6TlxAt9fu7dlkxLkPWkN1pcn3I7sS0=
Subject key identifier: 28:7D:B7:C9:38:6A:5A:CA:47:B3:96:FC:00:8D:F3:EC:EC:46:94:20
Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Certificate serial: 56B55D798293A3E8F7D02DBD0BE82996CC2313AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
Manifest number: 0262
Signing time: Fri 06 Mar 2026 16:20:46 +0000
Manifest this update: Fri 06 Mar 2026 16:15:46 +0000
Manifest next update: Mon 09 Mar 2026 22:10:46 +0000
Files and hashes: 1: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: DDbsSONj3Dy+2DUtaEqJ5RL9wdAwjeyovyxhKSAk/y4=)
2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=)
3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=)
4: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: Rc2DErsyjigrY0WguoKyWlWN27lUZbqBBcHG2nvqvJ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b5:5d:79:82:93:a3:e8:f7:d0:2d:bd:0b:e8:29:96:cc:23:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Validity
Not Before: Mar 6 16:15:46 2026 GMT
Not After : Mar 9 22:10:46 2026 GMT
Subject: CN=287DB7C9386A5ACA47B396FC008DF3ECEC469420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:00:af:95:cb:87:2a:e6:bc:03:82:72:ef:
c4:d8:e1:c0:fb:52:3c:5e:6d:7a:b4:d7:3b:47:32:
e5:a4:ba:db:f5:de:40:02:19:06:85:18:5c:5c:ed:
24:6c:72:d3:55:14:29:03:7e:ba:16:5a:5c:fb:ef:
98:7f:60:24:45:e6:94:81:76:24:f4:5f:92:0f:77:
a2:9e:1c:04:fa:9b:75:05:7d:47:8e:a1:1c:72:06:
cf:ed:06:c6:27:70:76:5f:11:53:48:7f:55:eb:52:
cd:70:0a:6c:c9:fd:47:b3:15:88:c5:8d:41:40:90:
12:f2:ad:e7:3b:dd:2f:bc:f7:80:42:13:01:0a:96:
75:20:95:05:7e:9f:7f:60:7b:16:01:cf:47:e8:97:
ae:99:68:de:d8:4d:b5:c4:de:9f:67:51:75:0d:9c:
f0:89:84:ce:96:46:26:99:67:44:7f:d5:b9:0a:c6:
f4:df:f4:00:fb:56:5a:74:7a:63:62:c5:85:b8:a8:
8e:7d:88:7f:00:32:ea:ce:53:df:5b:a1:4e:cf:9a:
7a:11:b3:ff:39:20:96:af:f1:f4:3a:95:fb:ce:82:
a2:ae:31:df:7f:6a:b3:a9:9a:8f:52:9d:cf:8f:d6:
1c:b0:25:57:84:8d:08:2b:bc:95:e5:4c:69:3a:b7:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:B7:C9:38:6A:5A:CA:47:B3:96:FC:00:8D:F3:EC:EC:46:94:20
X509v3 Authority Key Identifier:
keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8c:de:9a:43:4a:7a:96:e8:99:36:55:9d:ff:83:3c:6c:f8:
9b:24:a7:13:76:e0:4c:f7:20:fd:e9:4a:52:8b:9f:48:f2:97:
a4:7c:4d:71:60:76:57:28:79:09:dc:00:ef:79:d2:bb:c5:97:
4b:1b:c9:3c:aa:11:cc:3b:27:ce:6c:51:01:7b:47:96:ec:83:
37:97:89:b7:0e:f2:e3:b3:ab:f4:f1:4c:8d:05:67:0b:21:bd:
fd:76:f0:24:8a:b7:6e:54:15:5e:90:0a:67:b5:64:68:46:5c:
9a:bb:53:91:5f:c6:3e:43:04:02:20:3b:75:3b:be:03:ef:7a:
a0:25:33:53:ee:be:69:71:f6:a5:fe:85:f6:d4:f6:8d:50:70:
91:5f:a2:1e:9a:36:ce:61:4d:29:66:ea:f4:90:ac:47:9d:1f:
77:c0:e4:d0:b8:31:e0:0d:2c:f4:54:02:c8:6e:a3:4d:d2:79:
33:74:17:0c:16:44:7a:7f:c8:24:95:ac:3f:97:63:05:06:5f:
e4:58:6c:57:3e:26:cc:fb:e9:bb:05:47:0e:8f:19:00:da:ca:
b2:46:47:a8:6e:85:a9:8b:48:33:91:89:0e:96:5b:9a:4f:3a:
0a:80:44:04:bd:15:e3:be:1b:5f:63:1e:1b:92:be:dc:1a:70:
a3:c9:a2:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVrVdeYKTo+j30C29C+gplswjE68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw
OEYzRTk5RTAeFw0yNjAzMDYxNjE1NDZaFw0yNjAzMDkyMjEwNDZaMDMxMTAvBgNV
BAMTKDI4N0RCN0M5Mzg2QTVBQ0E0N0IzOTZGQzAwOERGM0VDRUM0Njk0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrRwCvlcuHKua8A4Jy78TY4cD7
UjxebXq01ztHMuWkutv13kACGQaFGFxc7SRsctNVFCkDfroWWlz775h/YCRF5pSB
diT0X5IPd6KeHAT6m3UFfUeOoRxyBs/tBsYncHZfEVNIf1XrUs1wCmzJ/UezFYjF
jUFAkBLyrec73S+894BCEwEKlnUglQV+n39gexYBz0fol66ZaN7YTbXE3p9nUXUN
nPCJhM6WRiaZZ0R/1bkKxvTf9AD7Vlp0emNixYW4qI59iH8AMurOU99boU7PmnoR
s/85IJav8fQ6lfvOgqKuMd9/arOpmo9Snc+P1hywJVeEjQgrvJXlTGk6t14tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKH23yThqWspHs5b8AI3z7OxGlCAwHwYDVR0j
BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3
OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz
RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5
YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw
NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALqM3ppDSnqW6Jk2VZ3/gzxs+JskpxN24Ez3
IP3pSlKLn0jyl6R8TXFgdlcoeQncAO950rvFl0sbyTyqEcw7J85sUQF7R5bsgzeX
ibcO8uOzq/TxTI0FZwshvf128CSKt25UFV6QCme1ZGhGXJq7U5Ffxj5DBAIgO3U7
vgPveqAlM1Puvmlx9qX+hfbU9o1QcJFfoh6aNs5hTSlm6vSQrEedH3fA5NC4MeAN
LPRUAshuo03SeTN0FwwWRHp/yCSVrD+XYwUGX+RYbFc+Jsz76bsFRw6PGQDayrJG
R6huhamLSDORiQ6WW5pPOgqARAS9FeO+G19jHhuSvtwacKPJoqk=
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:06:36 2026 by rpki-client