
$ rpki-client -vvf repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft
File: 1446915299D8F05DBFAD863E0D230435A96FB12A.mft (raw, json)
Hash identifier: PxcpYDYYZKGCYdjIb1GFVQBhkJmgA6lLII09tX0Kplk=
Subject key identifier: DF:D1:37:4B:D8:65:60:69:3D:AA:16:0D:63:1F:95:03:17:2B:2F:8C
Authority key identifier: 14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A
Certificate issuer: /CN=1446915299D8F05DBFAD863E0D230435A96FB12A
Certificate serial: 09E8DBECCA00E932136B52882AB86DEEC81F89CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft
Manifest number: 027F
Signing time: Tue 24 Mar 2026 19:30:52 +0000
Manifest this update: Tue 24 Mar 2026 19:25:52 +0000
Manifest next update: Sat 28 Mar 2026 04:04:52 +0000
Files and hashes: 1: 1446915299D8F05DBFAD863E0D230435A96FB12A.crl (hash: 5f9OjTvi4EiaKf6gFsy+hluDGNQxHyDQGt41Kt1gjjY=)
2: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: ZpK/Ne+0ga1EnvNVa9RgXnDgyeurFQu8PdBy6iCFyTc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl
rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e8:db:ec:ca:00:e9:32:13:6b:52:88:2a:b8:6d:ee:c8:1f:89:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1446915299D8F05DBFAD863E0D230435A96FB12A
Validity
Not Before: Mar 24 19:25:52 2026 GMT
Not After : Mar 28 04:04:52 2026 GMT
Subject: CN=DFD1374BD86560693DAA160D631F9503172B2F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:43:d9:4f:a0:61:e0:0f:d0:61:68:0c:44:
19:41:17:69:f1:f0:d6:e5:a2:6a:32:a7:bb:a6:b0:
1d:02:ad:85:ad:be:82:d8:c8:2e:ba:42:67:ba:f9:
16:7c:4d:4e:f7:19:67:50:7e:b6:11:c8:2d:88:b2:
f1:82:01:fa:c6:ac:b5:cb:4d:a3:50:e0:c1:e3:74:
44:d2:94:a3:73:c5:ba:0c:ef:74:68:20:0c:47:83:
3e:88:64:87:f0:bf:f5:33:ab:ab:2a:35:77:88:79:
20:0c:b1:40:d9:76:7e:a7:db:04:23:65:1e:63:dc:
4a:bd:8c:7d:87:d1:a3:df:20:1c:37:73:01:2e:e3:
0d:c1:67:b7:79:16:9a:2b:c0:52:b8:8d:5a:43:2f:
48:87:32:ce:62:e8:56:71:59:35:c0:53:d2:c1:8d:
9a:a7:d8:be:21:ca:d6:75:b4:1a:e2:e7:2e:3f:00:
ec:f0:ee:23:a6:f5:a0:e2:59:a6:7f:4f:05:84:de:
d0:38:41:5c:c1:33:7e:23:1b:22:8d:89:76:37:11:
22:98:99:67:11:75:12:ed:ac:1d:eb:73:8e:34:32:
1c:93:12:4d:3f:b7:8f:9e:98:26:60:cd:09:e5:aa:
32:4a:3c:9b:64:9b:2c:2c:f3:12:d5:da:0b:e9:45:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D1:37:4B:D8:65:60:69:3D:AA:16:0D:63:1F:95:03:17:2B:2F:8C
X509v3 Authority Key Identifier:
keyid:14:46:91:52:99:D8:F0:5D:BF:AD:86:3E:0D:23:04:35:A9:6F:B1:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1446915299D8F05DBFAD863E0D230435A96FB12A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/1446915299D8F05DBFAD863E0D230435A96FB12A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:3d:71:2c:c5:f4:ec:91:4f:8d:6d:d0:aa:78:ee:d3:c5:
98:1d:df:90:52:c4:68:00:cc:19:8a:e3:db:a3:55:5b:40:09:
d2:a5:5f:dc:c1:44:44:96:11:68:28:49:f1:8e:02:e9:98:92:
d0:04:db:22:e5:b7:34:c3:53:11:db:c1:69:63:c9:da:95:52:
a1:df:1c:05:0c:cf:06:6f:68:af:e0:13:b8:a4:1c:64:96:62:
7f:e5:90:47:26:d3:57:e0:f1:ad:0b:0e:2d:52:00:32:7e:a6:
5e:97:46:89:8f:7a:58:34:8e:32:1d:1a:1a:67:c2:da:9e:7c:
16:5e:97:00:5f:13:0e:db:24:af:f9:62:fb:34:61:ba:2a:d1:
df:f1:0b:67:bf:32:13:ce:89:ca:be:61:0e:db:f1:52:a0:da:
0b:0c:4c:6a:da:24:7d:ca:d0:fb:cf:68:1a:60:14:18:3a:56:
a6:2f:24:13:7d:78:24:6f:73:8a:51:3c:e7:5b:c1:c4:6e:5c:
ad:92:f6:fc:9f:ca:6a:51:a1:66:bc:7d:ad:32:48:24:fa:d6:
8a:2d:42:88:bc:8f:ef:0a:be:4a:ff:fc:db:2e:67:e8:c7:7f:
bb:50:c7:cb:f4:81:bb:b1:d2:5a:00:86:29:26:ca:0c:e7:66:
58:8f:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:53 2026 by rpki-client