
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json)
Hash identifier: ZCYaswc4Y/ph9WtrSh/JaUSEeZ1mjGn5diNqL8Ks23o=
Subject key identifier: 6F:70:E7:E4:40:16:60:12:26:7C:48:1B:07:18:21:59:1F:26:7F:B4
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial: 034D6AFB2AFF3F86B1A7B9BE85CA2A4A86AC5AE8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
Manifest number: 0257
Signing time: Tue 24 Mar 2026 18:21:18 +0000
Manifest this update: Tue 24 Mar 2026 18:16:18 +0000
Manifest next update: Sat 28 Mar 2026 04:54:18 +0000
Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=)
2: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: dmbb4QRhEmGoTnb9esokCck+JuHCWpMQ1RCc2P+Lo3I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4d:6a:fb:2a:ff:3f:86:b1:a7:b9:be:85:ca:2a:4a:86:ac:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
Validity
Not Before: Mar 24 18:16:18 2026 GMT
Not After : Mar 28 04:54:18 2026 GMT
Subject: CN=6F70E7E440166012267C481B071821591F267FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:3e:5d:50:45:62:08:12:62:30:03:95:15:
1c:4a:fa:b4:84:43:21:5c:e4:8c:90:78:57:17:cf:
08:15:ef:b0:1f:96:6a:d2:78:3d:4e:87:2f:a0:07:
c6:b3:8b:3f:05:eb:5b:b1:f5:c5:1a:41:f4:6f:2a:
17:22:fc:3a:29:3b:ad:46:61:4d:06:7a:90:08:86:
0c:27:95:d4:4b:e4:3e:be:b9:3d:ed:c2:dc:44:c3:
e8:2d:77:6f:78:17:a1:6c:38:57:06:fb:f5:f3:6f:
99:69:eb:8c:5d:6b:28:70:0f:41:92:40:42:e2:0d:
02:80:00:a7:66:2b:84:24:bd:1f:83:64:61:37:12:
99:0c:62:a7:54:d9:5f:31:b0:16:74:a0:1a:47:2a:
2b:fb:f4:28:b1:c6:3d:64:b4:bd:c9:16:c9:07:27:
99:e3:ed:f3:79:40:31:cf:06:c1:a1:91:8d:00:ea:
ea:76:9e:c1:e3:d5:39:e4:7e:b3:bc:8f:d8:d1:e6:
11:0e:b5:3a:bf:3a:03:93:bb:77:e1:74:2c:b0:31:
3d:f6:11:36:03:e8:09:35:7c:8a:06:c2:91:6b:65:
90:0c:32:0e:ca:bb:69:68:d7:01:94:9f:27:e7:95:
3d:b5:7b:0b:e2:fe:46:8c:d1:05:6b:db:3a:b4:56:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:E7:E4:40:16:60:12:26:7C:48:1B:07:18:21:59:1F:26:7F:B4
X509v3 Authority Key Identifier:
keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0c:2e:25:47:7d:26:38:d7:2e:1a:78:85:09:67:5f:85:75:
8a:d5:ec:0b:d8:06:46:d4:03:06:14:e5:d2:a5:79:ad:f0:8d:
91:14:5a:10:d7:91:16:f2:9f:15:3a:04:32:f0:61:89:37:4e:
d8:da:f1:bd:27:d2:ce:b2:bf:a8:8a:7f:1e:84:42:b8:0e:15:
c8:e1:e7:39:ff:aa:80:f8:65:8a:ce:93:2e:7a:ae:77:d4:14:
06:64:e0:7b:30:ec:6c:e9:49:0c:5d:a5:15:8d:78:c0:09:65:
b0:c3:a9:45:34:ab:54:a1:ab:8a:bd:82:64:9b:3a:fe:20:ff:
a1:31:1d:6a:43:2b:65:d2:ac:7c:0a:3a:e7:e9:e0:a8:53:d3:
3a:41:66:cd:71:45:5e:ae:cf:25:ad:cd:9f:68:6b:41:e3:ef:
07:de:fb:dd:e6:57:7d:55:95:69:58:0f:87:40:26:27:a8:ed:
9f:16:bf:5d:f8:b8:77:cc:ed:70:9a:30:e5:43:a3:99:40:79:
d2:db:fa:25:db:24:e2:e1:e9:c0:0c:51:45:b1:cc:8f:8f:99:
23:69:27:c5:ed:41:1c:06:97:0e:30:ea:21:62:72:3f:e2:2e:
d8:b0:e9:31:8c:bc:d9:1a:3c:02:32:51:83:69:98:07:4e:3b:
94:27:81:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:07 2026 by rpki-client