
$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json)
Hash identifier: tt2Tk3xMmyze5Cjj5wpv21pFiNrDxik2MUMc6k1g0/k=
Subject key identifier: 60:3B:72:1A:AC:9C:A2:F6:36:B7:AB:35:C9:8E:CC:40:FC:3C:0B:1B
Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Certificate serial: 0F65A6F022E287C004D167D9708AD757E464B6DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
Manifest number: 01B7
Signing time: Wed 25 Mar 2026 01:42:26 +0000
Manifest this update: Wed 25 Mar 2026 01:37:26 +0000
Manifest next update: Sat 28 Mar 2026 05:48:26 +0000
Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=)
2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=)
3: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: zuj/vZ85kMLs33nZ+T04XynbCaw3+wYXORpHRDxsQ6c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 05:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:65:a6:f0:22:e2:87:c0:04:d1:67:d9:70:8a:d7:57:e4:64:b6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Validity
Not Before: Mar 25 01:37:26 2026 GMT
Not After : Mar 28 05:48:26 2026 GMT
Subject: CN=603B721AAC9CA2F636B7AB35C98ECC40FC3C0B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:b1:03:5f:cd:bf:87:95:17:4a:87:0b:c4:
88:ad:b2:7c:76:ba:28:49:35:46:2b:a5:fe:a9:74:
15:b7:e1:d1:97:d9:0f:c8:80:ef:c0:45:6b:28:68:
8e:56:14:b0:4b:7a:5f:d8:4b:8d:e7:c8:63:c3:30:
85:ad:9f:de:17:c1:94:0e:f1:59:b1:48:33:c6:25:
cc:e6:eb:8c:59:69:79:70:8b:96:6d:83:e4:88:56:
c1:64:87:ac:ae:d1:64:d2:b5:de:d3:81:05:39:3a:
17:75:f9:e2:70:9a:4b:1a:d1:02:34:26:be:b0:bb:
2f:10:13:23:d3:2a:fc:86:d6:99:00:01:ae:fd:6e:
38:b0:27:e3:36:c3:06:b3:26:7b:7d:67:e1:89:ae:
e6:80:ac:1b:f5:c1:94:0b:57:6d:1a:d9:6e:e9:c5:
99:6f:fd:dc:87:d8:8a:d6:56:09:50:d4:b5:03:cc:
01:98:9b:37:63:af:43:b8:d4:a0:a8:64:8c:a1:3c:
32:94:c5:7b:be:fb:ae:6a:eb:5c:f3:ad:47:6a:2d:
73:74:81:8a:fb:0e:24:51:13:2a:9b:3f:1b:19:e5:
4f:c7:cd:5f:5b:45:b5:68:8d:04:cc:78:9e:69:c4:
70:a8:7f:63:db:ab:81:54:b8:dd:0d:12:fb:01:ac:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:72:1A:AC:9C:A2:F6:36:B7:AB:35:C9:8E:CC:40:FC:3C:0B:1B
X509v3 Authority Key Identifier:
keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:98:31:c3:59:2b:63:19:c9:73:02:f7:98:a4:60:ed:12:
19:c1:bc:b2:5d:b2:ee:1a:f2:9b:3b:7c:b7:4a:72:d1:d7:8d:
83:b1:ad:b8:68:84:33:28:2f:cc:c8:81:77:f9:28:ef:a3:5c:
28:fc:89:72:ae:c6:ef:07:0d:35:a0:8a:d5:55:0c:26:57:74:
a4:72:f5:b3:74:63:47:e4:ae:ef:c2:38:f3:17:1e:05:6a:20:
a4:1a:88:d7:d2:e0:71:22:81:1e:34:a2:00:86:c6:62:54:5d:
01:12:4c:28:a7:c0:a3:9a:f3:bd:00:c6:8c:a5:70:67:bf:3e:
db:c6:6a:91:b8:e8:31:5a:1c:74:9f:29:f2:65:e9:f9:c9:0d:
95:73:74:78:21:fa:1f:69:be:8f:13:cb:06:e8:d1:48:2e:ac:
7d:ed:8e:4b:bc:04:06:7b:0e:12:93:d1:7d:f3:78:34:4f:87:
35:b6:0d:30:0f:fa:35:5b:cd:d2:91:24:da:f9:b5:16:12:4f:
92:a4:ad:58:e0:1e:a3:c6:61:d7:fd:08:fa:68:5c:5f:e9:9f:
da:f1:95:67:9f:6a:b5:70:d4:93:26:1d:5d:33:20:f3:cc:61:
c0:41:60:36:e6:52:70:93:ee:a7:0a:93:2b:1f:ce:be:b0:a4:
e2:35:16:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD2Wm8CLih8AE0WfZcIrXV+Rktt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE
OTJFNkM3NjAeFw0yNjAzMjUwMTM3MjZaFw0yNjAzMjgwNTQ4MjZaMDMxMTAvBgNV
BAMTKDYwM0I3MjFBQUM5Q0EyRjYzNkI3QUIzNUM5OEVDQzQwRkMzQzBCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKILEDX82/h5UXSocLxIitsnx2
uihJNUYrpf6pdBW34dGX2Q/IgO/ARWsoaI5WFLBLel/YS43nyGPDMIWtn94XwZQO
8VmxSDPGJczm64xZaXlwi5Ztg+SIVsFkh6yu0WTStd7TgQU5Ohd1+eJwmksa0QI0
Jr6wuy8QEyPTKvyG1pkAAa79bjiwJ+M2wwazJnt9Z+GJruaArBv1wZQLV20a2W7p
xZlv/dyH2IrWVglQ1LUDzAGYmzdjr0O41KCoZIyhPDKUxXu++65q61zzrUdqLXN0
gYr7DiRREyqbPxsZ5U/HzV9bRbVojQTMeJ5pxHCof2Pbq4FUuN0NEvsBrLKNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYDtyGqycovY2t6s1yY7MQPw8CxswHwYDVR0j
BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw
QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF
NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0
YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3
ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAITgmDHDWStjGclzAveYpGDtEhnBvLJdsu4a
8ps7fLdKctHXjYOxrbhohDMoL8zIgXf5KO+jXCj8iXKuxu8HDTWgitVVDCZXdKRy
9bN0Y0fkru/COPMXHgVqIKQaiNfS4HEigR40ogCGxmJUXQESTCinwKOa870Axoyl
cGe/PtvGapG46DFaHHSfKfJl6fnJDZVzdHgh+h9pvo8Tywbo0UgurH3tjku8BAZ7
DhKT0X3zeDRPhzW2DTAP+jVbzdKRJNr5tRYST5KkrVjgHqPGYdf9CPpoXF/pn9rx
lWefarVw1JMmHV0zIPPMYcBBYDbmUnCT7qcKkysfzr6wpOI1FrU=
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:52:53 2026 by rpki-client