
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json)
Hash identifier: qvFKsRgMsA6a86/Y5iCii9qlVYndtQeuTsrMiEsvqiQ=
Subject key identifier: C5:9B:FB:26:C3:9B:7F:AE:E0:EB:A0:F5:5D:62:CE:C6:45:BF:82:96
Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20
Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620
Certificate serial: 01C08FA212205126B181B0E8B9EDFD491D67022A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
Manifest number: 055D
Signing time: Tue 24 Mar 2026 15:12:43 +0000
Manifest this update: Tue 24 Mar 2026 15:07:43 +0000
Manifest next update: Sat 28 Mar 2026 01:16:43 +0000
Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: dsuvYeoT9i3L5wkk2agAoPKQMPUFYu0Jui5Pwlpiozo=)
2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl
rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c0:8f:a2:12:20:51:26:b1:81:b0:e8:b9:ed:fd:49:1d:67:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620
Validity
Not Before: Mar 24 15:07:43 2026 GMT
Not After : Mar 28 01:16:43 2026 GMT
Subject: CN=C59BFB26C39B7FAEE0EBA0F55D62CEC645BF8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:a0:de:ae:a7:0a:0b:65:43:06:fd:b9:1f:
96:a0:9f:24:ad:62:41:54:52:fd:6f:14:f6:9a:d9:
d8:7d:79:0c:c3:f0:02:94:04:c1:51:8e:89:ac:0a:
a0:7c:3e:43:d9:a8:a6:fd:22:02:99:54:e9:44:42:
0a:27:27:32:36:00:d4:ba:98:0f:c7:71:9b:f8:12:
14:bf:12:5a:22:25:cf:83:d3:e9:6d:bc:60:60:38:
4a:35:70:f0:d1:2e:7d:af:e2:7f:47:bb:67:78:24:
d7:51:a5:ba:9b:d3:25:fe:0d:59:da:74:09:53:72:
19:cd:d0:9e:30:f1:f9:a1:4d:9c:92:34:5c:5a:8a:
4c:f8:73:cd:c6:6c:96:a8:a0:37:16:95:d7:c4:7d:
9d:95:64:a1:ca:89:06:bb:81:b1:63:27:a3:12:c7:
2c:55:ae:b3:c5:75:a5:b3:ab:a8:2b:6b:f0:a8:6c:
6a:7f:e7:a4:9c:b6:b9:2e:4d:49:79:e9:f1:cd:fc:
74:4c:05:48:42:2a:85:62:a9:26:f9:f5:03:7e:21:
b9:c1:89:96:51:c1:de:2d:52:b7:6f:c4:29:7d:ca:
cd:f2:95:9e:88:3a:3f:29:3b:5a:5a:6d:ba:6c:8f:
41:4f:4d:b5:6f:51:74:b4:d9:dd:ff:62:1d:75:03:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:FB:26:C3:9B:7F:AE:E0:EB:A0:F5:5D:62:CE:C6:45:BF:82:96
X509v3 Authority Key Identifier:
keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:a3:70:5f:44:98:5f:2d:3b:72:00:94:ff:f0:c0:d5:c8:
4d:07:a1:f6:8f:6d:0b:0e:c5:de:f1:fc:6e:58:04:22:94:43:
76:ec:c9:de:75:e8:59:2f:c3:30:24:bf:07:e7:a5:aa:83:11:
92:51:25:f8:b8:27:a6:e1:5f:ee:f6:0c:92:49:13:38:7c:a9:
c5:18:9b:41:73:58:64:ea:ab:36:3a:a0:fc:f4:a1:52:9a:a5:
4e:2a:e3:6e:70:65:4a:15:18:95:b8:75:a9:38:2e:b6:bf:4f:
fc:ea:cb:5a:e5:4d:d4:08:aa:2b:7e:bd:c5:d4:57:4b:62:8d:
22:50:44:47:07:1b:4b:67:21:4a:72:5e:99:07:9b:60:5e:e7:
e5:8b:30:fc:d4:14:3e:cb:49:51:47:c8:de:6b:bb:01:d0:9b:
29:28:ac:1f:b2:8a:7b:d9:78:b7:2a:83:0b:af:da:95:82:4d:
af:99:55:37:79:25:c0:06:ea:06:7c:32:c6:e6:f3:d3:0a:67:
f0:a1:87:b2:6c:08:95:0b:c5:1e:79:9f:ca:fa:94:fe:cb:af:
3c:e9:57:2b:c3:99:4e:64:1f:bc:36:14:a1:78:b6:fb:b3:bd:
ca:07:c8:1f:15:3e:45:3b:6c:5d:75:3e:0e:24:2a:18:12:a9:
21:a1:c1:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAcCPohIgUSaxgbDoue39SR1nAiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy
QTA5NjYyMDAeFw0yNjAzMjQxNTA3NDNaFw0yNjAzMjgwMTE2NDNaMDMxMTAvBgNV
BAMTKEM1OUJGQjI2QzM5QjdGQUVFMEVCQTBGNTVENjJDRUM2NDVCRjgyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSaDerqcKC2VDBv25H5agnySt
YkFUUv1vFPaa2dh9eQzD8AKUBMFRjomsCqB8PkPZqKb9IgKZVOlEQgonJzI2ANS6
mA/HcZv4EhS/EloiJc+D0+ltvGBgOEo1cPDRLn2v4n9Hu2d4JNdRpbqb0yX+DVna
dAlTchnN0J4w8fmhTZySNFxaikz4c83GbJaooDcWldfEfZ2VZKHKiQa7gbFjJ6MS
xyxVrrPFdaWzq6gra/CobGp/56SctrkuTUl56fHN/HRMBUhCKoViqSb59QN+IbnB
iZZRwd4tUrdvxCl9ys3ylZ6IOj8pO1pabbpsj0FPTbVvUXS02d3/Yh11A6RfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxZv7JsObf67g66D1XWLOxkW/gpYwHwYDVR0j
BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx
NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5
NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5
YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4
RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD7io3BfRJhfLTtyAJT/8MDVyE0HofaPbQsO
xd7x/G5YBCKUQ3bsyd516FkvwzAkvwfnpaqDEZJRJfi4J6bhX+72DJJJEzh8qcUY
m0FzWGTqqzY6oPz0oVKapU4q425wZUoVGJW4dak4Lra/T/zqy1rlTdQIqit+vcXU
V0tijSJQREcHG0tnIUpyXpkHm2Be5+WLMPzUFD7LSVFHyN5ruwHQmykorB+yinvZ
eLcqgwuv2pWCTa+ZVTd5JcAG6gZ8Msbm89MKZ/Chh7JsCJULxR55n8r6lP7Lrzzp
VyvDmU5kH7w2FKF4tvuzvcoHyB8VPkU7bF11Pg4kKhgSqSGhwXU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:02 2026 by rpki-client