
$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json)
Hash identifier: sK2LnuxgQib4zNKgUKfwEdSNatQVfevkhItFqiTQZ2Q=
Subject key identifier: 85:5B:27:1D:40:B2:E8:6F:12:62:E3:AE:0D:48:C8:EC:22:E3:85:00
Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Certificate serial: 68F2562CC03E6D26AEE418C40329013694D598FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
Manifest number: 0107
Signing time: Wed 25 Mar 2026 05:20:47 +0000
Manifest this update: Wed 25 Mar 2026 05:15:47 +0000
Manifest next update: Sat 28 Mar 2026 10:38:47 +0000
Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=)
2: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: zwAYihu0/NqqBDEWg9IofEt9aljCroRP0WjUihOCQFg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 10:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f2:56:2c:c0:3e:6d:26:ae:e4:18:c4:03:29:01:36:94:d5:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876
Validity
Not Before: Mar 25 05:15:47 2026 GMT
Not After : Mar 28 10:38:47 2026 GMT
Subject: CN=855B271D40B2E86F1262E3AE0D48C8EC22E38500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:db:14:cc:fc:46:1f:1b:7f:1b:06:fb:a3:
7a:2d:b9:a0:a0:40:82:91:eb:a9:c6:0c:4f:9e:4f:
8d:86:c0:49:bf:28:c4:df:3e:2e:c7:f6:c1:b8:41:
69:3f:59:2a:49:95:07:49:b7:6a:99:91:09:89:47:
46:1a:c6:3d:29:b9:72:c6:bc:43:f7:00:62:aa:85:
41:c9:3e:4a:d3:5d:50:32:9b:cb:ae:6b:2e:eb:ce:
48:0f:a8:fe:97:63:c3:5b:71:52:24:c0:27:40:7d:
d1:a4:c1:7c:c3:d4:d6:7b:0a:7f:b1:11:07:ce:5a:
55:94:a7:8d:71:32:ce:b3:3e:23:82:33:23:5e:48:
13:08:68:53:46:68:76:fc:f5:aa:89:ab:32:61:ac:
30:c7:17:74:aa:48:75:6f:40:a5:f4:7b:35:8d:b1:
0d:46:7d:81:47:51:46:f9:0f:5d:45:f2:84:80:c6:
15:f0:70:2a:83:31:e3:46:8f:95:8e:e5:13:bb:89:
b4:41:02:fb:c0:46:5a:98:d1:3f:82:2d:c2:7b:48:
22:d1:6c:c9:1b:f6:ee:e8:37:73:c9:c6:16:fb:43:
b7:f2:bf:c2:6b:79:97:11:f3:3f:1e:6c:95:3a:d5:
0e:8b:ba:21:b5:c6:46:b5:5b:d8:d3:11:7f:51:e5:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:27:1D:40:B2:E8:6F:12:62:E3:AE:0D:48:C8:EC:22:E3:85:00
X509v3 Authority Key Identifier:
keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:70:79:e2:68:f5:92:7b:90:5f:35:f6:7e:54:40:21:a4:
c3:21:66:f4:82:0d:f9:d7:10:89:24:20:c2:98:0d:9a:ca:eb:
27:ba:84:07:a6:74:2e:1a:28:33:05:f9:de:b6:69:c3:d0:72:
13:0f:a2:dd:0a:5e:0b:54:03:ff:a1:2d:b6:46:4b:05:9b:ec:
55:13:07:08:1f:f1:57:65:55:01:df:3b:46:4f:d4:f5:b5:3f:
2d:a8:94:43:2c:2e:1d:8f:a5:82:68:7b:18:4d:5c:9a:a5:25:
d9:ad:71:9b:00:4b:89:4f:28:24:79:40:99:b7:2c:15:0d:3e:
0f:86:50:dd:3c:cd:04:77:ba:bf:d9:58:68:a2:1c:dd:e2:9b:
57:bd:48:1f:c3:cf:7b:a0:f6:5d:77:e7:9e:e1:f4:80:3b:fb:
3e:a6:5e:a5:54:d7:16:9e:22:50:be:86:5c:ae:7a:37:d0:25:
40:11:1b:b7:9f:e7:bc:65:74:ce:c8:9e:d8:26:09:97:00:b6:
91:20:7b:50:c3:11:ea:9e:98:f3:e6:ce:24:f4:f7:a0:21:74:
27:37:dd:94:26:01:b6:a4:52:cd:de:7d:93:aa:10:84:12:65:
81:8e:0e:c7:0e:87:f6:47:f6:1e:28:30:6f:81:64:f2:1e:f0:
1e:d4:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:12 2026 by rpki-client