
$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json)
Hash identifier: VlKy35XM04rgBVaPmkXCluR05ZV847ag71lYSrZGqow=
Subject key identifier: CD:10:E5:92:77:81:29:65:8A:5A:78:64:54:53:14:31:71:26:6F:40
Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90
Certificate serial: 7953336DAA82BCAD2B0148C24E5326C8BEAE9C7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
Manifest number: 0184
Signing time: Wed 25 Mar 2026 15:01:21 +0000
Manifest this update: Wed 25 Mar 2026 14:56:21 +0000
Manifest next update: Sun 29 Mar 2026 03:00:21 +0000
Files and hashes: 1: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: xjEnCAlr3jtxEMRCpXginOPSD/H0yqblkF5zKrVbFbE=)
2: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: XwTy3von9UfcQqdLvssnHX18UIYiFkJwOgDC3XKu89E=)
3: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: NkDaIeWsM/gPXaHtYqNr3YcOAUXw5i1dgIsc199+Uh8=)
4: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: yXTkW60GOZZ9N/VIjulkmadt8AvcqAL97NY/DZvxI1Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:53:33:6d:aa:82:bc:ad:2b:01:48:c2:4e:53:26:c8:be:ae:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90
Validity
Not Before: Mar 25 14:56:21 2026 GMT
Not After : Mar 29 03:00:21 2026 GMT
Subject: CN=CD10E592778129658A5A78645453143171266F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:4c:42:29:30:65:da:67:55:f1:a7:2e:cb:
5b:c1:61:66:4d:47:d8:cc:25:3e:d6:4c:d1:dd:a3:
8f:ae:7f:f0:99:8a:fa:f2:eb:ac:c6:fd:b4:a9:db:
bc:de:0c:c3:4c:ae:1a:58:45:98:ff:aa:1c:42:38:
54:b3:26:13:06:17:08:95:c8:50:d0:f5:5d:42:42:
30:ef:e2:b5:f0:f4:14:b2:c8:68:90:e4:69:5a:b7:
75:51:8c:fb:1a:77:03:dd:8e:43:53:57:1c:18:a1:
60:93:91:17:1d:9f:39:19:47:1a:a5:83:3a:d9:07:
c4:21:5f:51:60:1a:b9:bc:61:dc:bf:e8:a3:c8:13:
e0:ec:76:73:6d:e3:48:8a:56:a1:49:4b:14:ac:d1:
63:4d:7a:22:a8:fe:42:ae:ec:19:e9:c4:4a:42:fc:
7b:4d:ee:50:2d:0d:d8:95:93:78:cf:ad:3b:0e:de:
8e:54:55:6d:58:bf:46:4a:e7:59:85:5d:db:20:6d:
2c:bd:8a:f7:f0:02:4d:37:97:7d:05:47:2f:78:f5:
cf:2f:5d:74:d4:ce:02:fd:50:f0:cd:36:6e:9e:8a:
c0:69:42:14:c4:c1:13:2f:5e:8e:1b:d3:76:07:ac:
4a:dd:a2:51:fb:ff:60:eb:a2:bf:00:b1:42:18:bc:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:E5:92:77:81:29:65:8A:5A:78:64:54:53:14:31:71:26:6F:40
X509v3 Authority Key Identifier:
keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1f:2c:88:f1:94:80:27:31:f3:7c:7a:c0:7a:eb:df:ea:16:
f5:ae:ce:cb:2b:9b:f2:e2:12:a1:57:8d:14:0e:27:3b:7f:1b:
57:77:4e:c4:3c:7d:44:2a:50:cc:e2:67:6c:92:9f:80:5c:ca:
24:79:00:b9:c1:59:4e:a0:c2:b9:77:17:e3:76:1c:1e:0d:63:
de:d1:b5:27:fb:d5:90:07:74:a2:ef:4d:52:4b:c6:47:ca:5f:
3f:42:f7:cb:ae:c5:2e:c7:46:45:9b:69:5a:96:7b:30:40:62:
c4:6b:22:11:dc:fa:a6:eb:82:23:11:81:17:df:ed:bb:6d:ee:
15:9b:7a:da:1c:d1:ba:b4:f6:a5:07:66:1a:99:cd:b1:2e:7b:
41:71:bb:ef:a7:cf:3c:21:99:e0:b4:96:bc:fb:28:83:9a:13:
1c:5f:f1:d3:a5:2a:df:97:74:55:18:9d:3e:d8:80:75:42:13:
72:44:a2:19:c0:a7:25:29:7a:b8:f5:b9:8a:95:09:9d:b6:3f:
bc:44:c0:fa:4b:b8:6f:d2:2d:ae:51:8b:4b:9e:21:80:8d:c1:
24:fe:ca:7a:00:e2:55:b6:db:c3:27:c0:2f:e4:8a:c6:3b:87:
2c:3e:4a:f1:69:6e:eb:b1:f4:98:c5:43:94:b3:4a:ec:f4:f7:
d8:63:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:14:48 2026 by rpki-client