
$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
File: 4C493E592E006837A093CD288BB55329BE38D2D2.mft (raw, json)
Hash identifier: y4lZIA4BAvDHkkwHe+SKxiunOogr7/E32CxS3Xt2VQ4=
Subject key identifier: 4F:AD:60:4D:54:CA:C7:1A:C8:B5:AD:EB:52:B5:61:12:7E:4C:62:47
Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
Certificate issuer: /CN=4C493E592E006837A093CD288BB55329BE38D2D2
Certificate serial: 7B6B55B4E50B8C167A023B12204A79024E60B2D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
Manifest number: 055E
Signing time: Wed 25 Mar 2026 11:10:06 +0000
Manifest this update: Wed 25 Mar 2026 11:05:06 +0000
Manifest next update: Sat 28 Mar 2026 22:47:06 +0000
Files and hashes: 1: 4C493E592E006837A093CD288BB55329BE38D2D2.crl (hash: CDj0MNO1j0hd5pjEakSMaCQQUyofY3/Z5zk01G7oknw=)
2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: N5m6EQloSn7cPSOHDMXggl0h6eDrNc8qhyGZ+DM46fM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl
rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:6b:55:b4:e5:0b:8c:16:7a:02:3b:12:20:4a:79:02:4e:60:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2
Validity
Not Before: Mar 25 11:05:06 2026 GMT
Not After : Mar 28 22:47:06 2026 GMT
Subject: CN=4FAD604D54CAC71AC8B5ADEB52B561127E4C6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ee:1b:1f:8d:41:12:55:cb:f3:af:85:fa:d8:
b3:45:60:75:fe:70:4d:d7:bd:0a:51:df:4c:02:3c:
ab:60:6d:56:ee:30:70:52:a9:51:eb:00:88:7a:fa:
57:d1:01:46:5a:07:a1:26:24:ef:b0:d7:7d:7e:14:
79:bc:57:96:bb:86:0e:3b:3e:35:65:6f:c9:a1:1f:
c4:ed:ae:19:9c:4e:49:14:cd:f3:f1:c3:63:4c:ef:
d7:bb:0d:48:fc:c8:98:0b:53:f4:68:ae:96:ea:35:
80:23:2f:9e:fd:3d:1b:fd:f3:43:7b:b0:b7:bf:9b:
de:30:27:4c:66:8a:c3:10:c3:ad:3e:0f:96:d6:85:
fd:b9:a9:22:55:fe:86:0e:42:c3:76:35:85:b1:83:
f0:82:1c:15:5e:6d:19:3a:9c:3d:8e:8e:c4:83:94:
5b:1c:cc:51:11:99:58:a7:04:b8:7c:0a:d3:c3:53:
46:43:10:2b:0c:18:2e:18:52:4a:5b:b5:5b:22:3c:
40:62:fb:55:6f:22:3a:c8:94:7d:6f:87:a1:7f:46:
e0:52:27:f3:5a:97:ce:db:e4:8e:a7:6c:36:97:84:
99:f0:1d:57:fd:62:f7:1d:f5:6e:41:14:4e:13:56:
c9:aa:db:02:2d:23:5f:7c:c0:c5:9a:80:d2:97:c7:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:60:4D:54:CA:C7:1A:C8:B5:AD:EB:52:B5:61:12:7E:4C:62:47
X509v3 Authority Key Identifier:
keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7c:b1:c7:d0:5c:35:a6:fc:37:e0:5c:17:c3:2c:7e:ce:92:
4a:0b:69:4a:a3:ec:d9:3a:e9:c5:98:09:f0:b1:2d:c2:fe:c9:
d3:4c:44:eb:3a:a8:21:e1:c5:c4:70:b1:e8:4b:8e:3e:6f:e9:
ec:4e:a2:79:d8:83:12:4f:78:7e:0f:7e:1a:04:21:2a:0e:dc:
3c:3e:8b:b0:65:55:b6:e5:38:64:85:74:7a:b9:79:7c:9e:ec:
36:4e:f6:2c:b9:ad:96:2d:69:34:3e:52:ae:b2:e0:ae:90:10:
93:ea:0c:08:89:23:27:08:87:04:87:29:ad:28:f2:1c:1b:9b:
7d:f5:27:c6:41:18:5e:f4:db:5a:b4:e3:c8:92:4b:44:75:01:
af:d8:6b:55:c5:c5:c8:58:49:47:22:32:13:ca:de:d6:7c:30:
a6:5a:a6:50:d4:98:ef:fa:f1:8f:aa:ba:f6:5a:54:f7:1a:7f:
6b:69:6f:e2:d5:2c:9f:ca:09:73:c1:9b:70:ad:24:de:b3:20:
42:f7:4c:a3:9e:70:a7:7d:36:78:36:f4:77:2a:62:6e:d0:a6:
26:32:23:9d:70:47:ba:fe:52:4e:9f:f5:41:e0:f4:9f:ae:56:
44:df:87:52:a8:ce:5f:30:dc:a7:d4:f3:73:2d:75:5b:fc:19:
a0:a8:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:48 2026 by rpki-client