
$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
File: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json)
Hash identifier: q70f3EVk7AfD2Ri44KGSPi7bkHK7NURDpXWA7fAj0E0=
Subject key identifier: D7:66:C5:5C:F9:92:45:E3:96:12:05:B1:1A:46:E8:32:02:BF:5B:A6
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Certificate issuer: /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial: 049974D46ABE03383D87BD6C6ACC658E47B14B4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
Manifest number: 0248
Signing time: Wed 25 Mar 2026 17:02:30 +0000
Manifest this update: Wed 25 Mar 2026 16:57:30 +0000
Manifest next update: Sat 28 Mar 2026 23:26:30 +0000
Files and hashes: 1: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: z1hSdmav8kYD+fKGBmQZUT1hPOP5FcX9Gz1tkj0DruA=)
2: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=)
3: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=)
4: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 23:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:99:74:d4:6a:be:03:38:3d:87:bd:6c:6a:cc:65:8e:47:b1:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Validity
Not Before: Mar 25 16:57:30 2026 GMT
Not After : Mar 28 23:26:30 2026 GMT
Subject: CN=D766C55CF99245E3961205B11A46E83202BF5BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:fe:3a:0d:3a:d7:91:d4:59:7e:84:b5:98:
5f:37:6d:f4:e9:db:a8:6f:91:a6:4b:35:77:c7:6e:
a8:7f:3d:31:eb:b7:78:06:76:61:6d:ee:6e:9c:79:
f9:42:66:7a:c1:ba:3a:e3:34:32:d4:27:d9:a9:24:
c3:df:1e:0d:d2:90:8e:dd:5c:eb:ff:82:36:b4:1e:
fd:52:f8:7c:c0:b0:97:ff:fa:6d:b5:f5:85:17:3f:
d1:ab:3c:b3:50:d8:0e:9a:7c:13:ac:de:16:23:00:
f8:a0:84:e4:f2:47:cb:95:6b:95:11:1e:db:86:2e:
05:0a:fd:59:b3:86:30:15:23:65:27:a7:6d:34:d0:
02:48:95:a7:fe:3b:60:9c:01:e8:c4:96:36:c7:21:
67:5d:5e:aa:2c:f0:0c:30:38:84:a2:be:db:6d:6c:
0e:97:de:f1:2b:c1:a9:7c:a0:51:de:31:d4:e8:7d:
39:e9:22:7e:f0:89:b9:01:d9:31:77:63:f9:7f:d0:
36:2e:2c:e6:91:b2:18:e0:77:62:78:32:78:1a:40:
1f:c4:98:53:4b:38:61:ad:b2:aa:43:fb:b2:b9:87:
c7:e3:82:e1:85:c2:c4:e1:11:a3:dd:e8:85:73:bf:
f5:18:f8:82:4b:eb:cb:c3:95:38:0b:05:c3:c3:df:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:C5:5C:F9:92:45:E3:96:12:05:B1:1A:46:E8:32:02:BF:5B:A6
X509v3 Authority Key Identifier:
keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0d:a6:d1:a4:1d:04:02:d0:8a:bb:48:ae:a2:a1:66:b9:15:
00:4e:8d:90:49:7f:37:76:ef:b7:1a:f7:08:24:9a:a2:70:04:
6e:98:0a:fc:b8:f1:0a:84:48:10:11:83:9b:23:c0:cf:07:b4:
ee:0a:87:36:6a:74:e9:43:96:4b:9f:c3:f2:a6:db:36:f9:2d:
60:04:14:2f:f5:6c:77:36:b0:f9:0e:9b:06:3a:29:51:d4:f1:
e2:42:31:a4:a5:d6:31:80:4f:f4:b7:61:91:62:4b:3a:a1:3f:
88:58:79:12:26:d8:8f:90:15:76:29:69:5f:95:0a:67:54:6b:
44:c9:26:6f:4f:a5:85:35:60:cb:6a:30:2f:53:f8:b1:92:f3:
15:cd:c4:c8:65:54:40:0c:b8:90:74:49:25:f1:1b:29:68:e7:
09:bf:1c:a9:19:c9:a3:af:65:c3:ff:9d:74:ab:a4:48:76:8c:
fa:06:cc:bd:39:51:8d:fe:61:c0:07:da:fd:d9:4a:82:69:ec:
d2:ba:39:fe:fb:51:4d:59:88:49:8e:d2:0f:2c:d7:a1:83:df:
25:65:d6:3a:1d:47:a9:27:3e:c9:85:21:35:0c:41:82:f1:3f:
05:8a:5b:f0:7f:e9:a7:73:a6:a9:e4:c8:38:38:7f:31:25:24:
81:49:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:52 2026 by rpki-client