
$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier: GfvOZxjy5ljg3leirNy1ZjWYTU+4Vb7haDX5G9xAa1Q=
Subject key identifier: 6A:BA:E9:3C:42:9C:0E:45:A5:F8:5A:5B:55:4A:36:F8:5B:5F:10:78
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 585E8E4C3455A844852D0DA2A7E6C4809D94A2E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 05:13:34 +0000
Manifest this update: Wed 13 May 2026 05:08:34 +0000
Manifest next update: Thu 14 May 2026 08:08:34 +0000
Files and hashes: 1: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: s8oe69lsKL4TbxiQ8FNNrXfipz8nY0QhVDIHtTTRvCI=)
2: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
3: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
4: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
5: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
6: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
7: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
8: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
9: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
10: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
11: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
12: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
13: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
14: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
15: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
16: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
17: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
18: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
19: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5e:8e:4c:34:55:a8:44:85:2d:0d:a2:a7:e6:c4:80:9d:94:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: May 13 05:08:34 2026 GMT
Not After : May 14 08:08:34 2026 GMT
Subject: CN=6ABAE93C429C0E45A5F85A5B554A36F85B5F1078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:7a:36:60:cb:98:25:82:06:40:18:87:e5:
be:c4:96:6a:de:6b:b8:2f:4e:10:79:12:fa:8a:27:
3d:2c:2b:bf:82:51:77:be:cd:b9:f8:28:6c:a9:cd:
3b:89:60:e8:f8:00:b9:9b:1a:88:c7:c2:a0:b6:38:
08:67:5f:3d:82:a4:36:2d:56:2e:4a:5b:65:e4:2c:
9d:a4:b0:d4:33:ab:94:5d:56:3e:e8:b1:e9:af:be:
ba:a4:c9:04:55:4f:d9:b8:d4:77:6c:5e:d7:94:af:
32:77:fc:01:59:85:35:b4:64:f9:2b:03:49:92:cd:
fc:c0:b3:b8:82:ba:2c:f8:0f:74:69:b8:24:a7:3a:
6f:40:c3:3c:71:81:bc:b7:4c:52:c2:bd:fe:03:d4:
81:ed:05:bf:c3:62:82:af:72:92:6d:6e:67:ea:be:
38:8a:50:32:d0:2f:b8:2c:db:c1:60:0b:0f:64:f4:
97:f2:8f:97:bc:fc:00:6c:c6:51:5b:ee:3e:60:03:
96:b1:22:c0:b7:60:d3:bb:58:08:88:9d:fe:97:85:
c8:5a:03:e2:55:66:c3:5f:78:8e:03:ca:ef:e6:bd:
3e:d8:9f:16:eb:e4:16:ca:4a:0c:99:ff:97:ff:87:
e8:a8:1e:f0:8a:f6:c7:ae:0f:11:26:ff:fc:70:e4:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:E9:3C:42:9C:0E:45:A5:F8:5A:5B:55:4A:36:F8:5B:5F:10:78
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:a7:b1:34:df:db:f9:8f:a4:a0:3d:4f:8e:7b:0f:ed:3d:
53:84:b3:ed:e9:2a:52:e7:a2:41:89:aa:47:a8:91:b0:25:e6:
e8:02:3a:5d:9f:02:dd:7a:03:bf:6f:dd:a4:49:10:cb:1e:67:
89:97:b3:30:7d:7f:7b:83:3c:41:97:15:4f:a3:9f:8a:09:31:
ba:64:b2:10:57:7d:b3:c6:3e:d1:76:50:35:e2:ff:bb:9d:e3:
bc:d7:ff:b5:df:09:88:de:54:cd:bc:5a:19:95:5f:a4:11:4e:
d5:cf:26:ea:4e:f9:cf:7f:46:e6:cf:e4:5e:ad:74:43:90:74:
c8:cc:28:b3:a0:3a:0e:98:7e:61:c6:49:ef:a5:eb:02:3d:56:
eb:b1:78:b5:a3:15:d4:97:5f:24:15:e9:3f:d0:0c:0a:6c:dc:
8f:fc:9e:fe:f4:19:f9:e1:f8:01:a5:25:cf:56:bb:ca:c5:f6:
1f:71:07:3a:cc:c9:f7:c4:71:aa:28:ac:49:aa:cb:20:51:12:
1d:39:76:10:87:33:48:9d:e2:37:ad:27:60:5f:61:d7:57:32:
4e:b8:8b:c4:77:b9:a3:bd:0c:c4:b8:a5:a2:92:c5:e3:b9:06:
64:92:fe:16:30:2a:9d:9e:4f:6b:81:29:2b:8e:c4:38:06:86:
fb:dc:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:24 2026 by rpki-client