
$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json)
Hash identifier: ibIVtG4G7LUPPTGMn5Jr7JpHiotBTbkW0tQ3HK+U4TE=
Subject key identifier: 63:69:90:32:5D:8C:80:E0:0B:E9:ED:25:3A:DE:42:E7:54:37:F7:AC
Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Certificate serial: 193E38AD430B9D9A3E1D78492AB0F8DA177D57A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
Manifest number: FA
Signing time: Wed 25 Mar 2026 05:02:22 +0000
Manifest this update: Wed 25 Mar 2026 04:57:22 +0000
Manifest next update: Sat 28 Mar 2026 13:26:22 +0000
Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=)
2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: 2l/Wy0wTHuANPXDZh/yNJXGTer3EYlUB8iULF2ftpDM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl
rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 13:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3e:38:ad:43:0b:9d:9a:3e:1d:78:49:2a:b0:f8:da:17:7d:57:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Validity
Not Before: Mar 25 04:57:22 2026 GMT
Not After : Mar 28 13:26:22 2026 GMT
Subject: CN=636990325D8C80E00BE9ED253ADE42E75437F7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:ce:13:82:0e:51:a3:93:40:19:fc:4c:4a:
15:ca:51:3e:d6:2f:4d:e0:c9:fe:0d:81:04:02:12:
26:cb:f5:24:ff:c2:b8:47:77:94:3c:f5:55:d4:51:
94:a1:06:92:a6:94:62:56:12:fa:67:d6:19:78:46:
3d:9a:32:bb:32:3d:0e:0d:bb:77:28:1c:d2:8b:68:
29:06:ad:43:42:77:74:66:3d:ba:22:1d:38:94:57:
7d:34:ce:f5:23:42:40:51:c0:05:e7:e6:c0:20:1d:
ae:34:cd:85:07:f7:8a:63:57:2c:2a:48:95:58:9b:
06:c9:1d:33:9c:b6:b0:4d:0b:06:d0:0e:c5:a7:d5:
60:03:b9:19:24:80:0f:83:68:71:e2:a0:af:50:27:
5e:32:ef:bc:c8:a3:43:77:ec:20:ba:37:07:a9:e9:
3b:26:a2:ce:14:af:08:23:e9:d2:ea:3b:58:3c:cc:
d6:be:d1:ca:17:c0:46:03:8d:bb:e7:92:c7:2e:23:
08:9d:90:a4:43:1e:70:13:65:b3:3a:2b:34:33:57:
3c:2e:55:16:11:69:32:5e:e6:c5:d0:c6:66:db:75:
5d:68:e1:a5:86:bb:b5:8d:e4:5a:2a:37:4e:d0:ad:
85:a2:7c:d9:f7:c7:25:3f:ca:4e:5e:fb:b8:65:86:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:69:90:32:5D:8C:80:E0:0B:E9:ED:25:3A:DE:42:E7:54:37:F7:AC
X509v3 Authority Key Identifier:
keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7d:48:ad:a1:6d:37:86:c5:7f:5c:a0:e0:f5:a3:73:63:a0:
33:db:51:99:89:ea:a6:2f:73:e3:76:30:b0:20:6c:fd:83:ab:
24:90:39:a5:17:56:87:c2:c9:92:90:73:75:8c:f3:3e:94:52:
9b:00:98:96:ee:4a:38:a5:7a:e7:30:ba:8e:d2:89:46:74:25:
b7:c3:6e:ff:e9:d3:49:ca:d5:34:49:56:77:e9:06:2f:46:45:
c8:41:35:e4:9e:20:fa:da:c6:04:4f:94:56:da:c0:9c:25:96:
ec:9a:47:5d:e9:b4:98:6d:70:83:6a:62:44:4d:15:8d:e5:ed:
ed:f8:bc:ed:cb:bb:8a:1c:bb:28:24:56:c2:71:67:f3:95:55:
ff:2f:12:b4:01:5a:41:d5:0d:e3:a5:d8:1f:bf:d6:0d:81:8f:
51:a5:81:a9:71:18:91:8c:3d:4f:aa:10:07:5a:37:d0:df:f1:
f9:03:45:58:a7:44:41:02:f9:c5:60:2f:cb:2e:ae:3d:9d:e8:
05:65:26:c4:e9:77:cc:6b:b6:ef:31:f0:90:e8:06:2d:56:ee:
9c:3b:57:90:39:53:c9:66:72:5c:a1:e9:5f:b5:c1:f7:ba:10:
18:85:67:53:c8:f3:af:69:a3:5f:35:22:04:3b:02:8e:1c:a1:
47:82:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:03 2026 by rpki-client