
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json)
Hash identifier: /SucDu2CmWv8oWKoLCf4ug1s2q/DlR9ZZp8GyFcpihc=
Subject key identifier: C3:56:AA:D9:7F:2F:65:B9:21:B4:FA:A6:7E:65:F3:86:B3:5B:FB:3D
Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Certificate serial: 3A99E2D146EDFF79C281919A3BF652BB8B39AC7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
Manifest number: 0113
Signing time: Tue 21 Apr 2026 02:10:47 +0000
Manifest this update: Tue 21 Apr 2026 02:05:47 +0000
Manifest next update: Fri 24 Apr 2026 08:53:47 +0000
Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=)
2: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: sn6AeSbXmSwpKuFjAgrrY3Ff5Aim51QjB4vjSZkSeBE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:99:e2:d1:46:ed:ff:79:c2:81:91:9a:3b:f6:52:bb:8b:39:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Validity
Not Before: Apr 21 02:05:47 2026 GMT
Not After : Apr 24 08:53:47 2026 GMT
Subject: CN=C356AAD97F2F65B921B4FAA67E65F386B35BFB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:cc:d0:a2:29:8c:4a:7c:5d:a7:c7:ac:66:
64:a9:d3:f3:d7:93:b7:dd:04:c9:d5:d7:6b:48:a6:
1d:de:ea:57:63:cd:3b:ba:73:47:21:9b:a9:50:5d:
4f:fd:b1:a8:04:58:a9:b2:0c:31:aa:95:40:35:5a:
ab:ea:c2:14:4c:68:ae:8b:44:a4:02:5a:76:b5:f7:
0f:ab:40:2f:54:cd:3a:bc:e1:a3:45:d9:08:29:15:
84:5f:27:89:9a:94:90:ec:7d:1e:4f:0f:c3:3e:63:
0f:51:43:4b:0e:c4:d6:77:c2:7f:8c:be:44:fb:bd:
39:aa:2b:d0:53:b8:8f:1e:e9:10:b1:0b:42:fa:59:
ee:36:9b:77:40:d3:06:49:25:fc:6a:f9:50:50:13:
9e:88:21:3f:f2:53:7a:83:db:76:54:7b:50:06:3b:
22:25:4c:5d:43:55:f1:8d:1d:32:66:65:97:99:57:
2d:d7:6c:9a:3a:3c:29:29:d9:e3:55:0b:20:fe:3d:
65:ff:01:e1:4d:89:c8:6e:fc:53:c1:fd:c0:22:23:
75:24:76:79:6f:e5:de:ce:b8:97:1e:13:a2:83:97:
0d:20:53:ee:cd:d2:31:39:0f:b2:f5:d3:e0:d3:ef:
da:d4:78:b3:6e:aa:1c:28:e9:ea:b1:b8:b6:50:54:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:AA:D9:7F:2F:65:B9:21:B4:FA:A6:7E:65:F3:86:B3:5B:FB:3D
X509v3 Authority Key Identifier:
keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:14:38:a4:14:7a:9e:06:10:79:e6:af:b0:bd:78:da:42:b0:
7a:95:87:cf:c0:79:23:4a:df:1d:65:7c:99:21:02:e4:fb:89:
89:19:b4:17:5b:33:86:0c:72:cd:bd:b0:5e:de:56:58:19:7a:
3c:a2:14:19:ef:c1:f9:2c:8e:7c:78:7d:24:69:ac:97:11:89:
83:49:9f:48:fb:ec:7d:84:98:0e:a3:e9:33:63:a7:5a:4f:f7:
3a:f4:be:7e:92:f8:9d:04:61:3b:1d:a9:d7:57:19:a5:1e:06:
c1:a4:0e:86:0a:2d:8c:0c:59:09:fb:12:91:68:bb:ec:dd:5b:
14:06:dc:ad:b2:2f:dd:27:29:57:1d:b1:8b:72:26:51:12:91:
34:f4:71:33:8c:4e:ad:22:0c:2e:ec:ff:ae:a4:72:66:f2:e7:
b4:94:e4:67:23:e9:b1:21:5d:e4:2e:b8:0c:1d:e8:5a:2f:f8:
3b:f1:d8:8e:4f:dc:26:24:21:3b:2a:19:28:fa:61:f8:d3:36:
0b:c0:a5:86:92:4e:1a:5c:21:1a:4f:1b:2b:e0:d3:37:0a:1b:
85:5b:a2:4e:a3:36:df:63:00:72:fa:e7:d3:a4:6a:b9:11:0e:
28:be:68:5b:59:34:f9:91:be:46:52:0f:04:51:1b:d9:98:f4:
52:c8:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:52:37 2026 by rpki-client