
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier: C8VpjV7Lc+/c/g8LhJL8TS5YfFGlECFbst3AlfAArrg=
Subject key identifier: 23:B5:BA:2C:BF:F3:6A:CC:7C:03:5D:28:08:96:46:20:74:5A:62:8A
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 0EACC0DCDC2E5FA7D5BBEF929F5CB4F7ADFE004C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 03:34:40 +0000
Manifest this update: Sat 26 Sep 2026 03:29:40 +0000
Manifest next update: Sun 27 Sep 2026 06:55:40 +0000
Files and hashes: 1: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
2: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
3: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
4: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
5: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
6: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: LdLzqybVRylMWk+fJFCavBZYn8A8SqvKj8ix9cDu/Kc=)
7: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
8: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
9: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
10: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
11: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
12: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
13: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
14: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
15: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
16: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
17: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
18: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
19: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 06:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ac:c0:dc:dc:2e:5f:a7:d5:bb:ef:92:9f:5c:b4:f7:ad:fe:00:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: Sep 26 03:29:40 2026 GMT
Not After : Sep 27 06:55:40 2026 GMT
Subject: CN=23B5BA2CBFF36ACC7C035D2808964620745A628A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:d4:d6:0a:9a:cc:21:8e:ba:50:85:46:fc:
34:94:bf:31:d9:2e:d0:d3:1d:b6:b6:db:7c:f7:57:
9a:e8:28:63:53:0a:21:74:fe:9c:08:f3:b4:6a:10:
38:44:6b:bf:ce:1b:f8:6f:51:e8:78:c8:22:0b:57:
7e:6a:4b:3a:0e:94:4e:31:44:01:34:5d:6e:7d:59:
d5:4e:a1:2b:31:76:4d:46:aa:4d:02:f7:df:e0:14:
d9:36:94:6f:fb:4b:7c:49:9a:28:40:c1:f4:b3:09:
32:f8:63:0e:2c:16:8e:8a:79:ee:00:16:5c:82:c1:
28:c7:9d:85:e2:74:c8:be:d2:5c:26:4f:0f:f7:b3:
ad:e3:de:74:73:7f:c2:1c:05:19:ae:65:33:6c:30:
10:3e:12:c8:ac:41:c9:5c:5c:c8:ce:06:dd:f6:8c:
bf:73:25:7c:61:17:dc:40:4d:42:83:28:2d:47:5f:
58:5d:d7:49:db:f7:34:4d:ba:8e:1f:ac:73:4f:5a:
e5:8f:eb:4d:51:0f:db:92:4c:b2:d0:20:e6:e6:35:
96:f8:b7:e4:27:25:18:b0:49:f1:b4:15:23:61:8e:
85:b5:2b:4b:5d:f1:36:1d:f8:69:b2:eb:7d:7a:54:
5c:3d:23:c1:c2:d8:ec:29:b7:17:35:c8:91:f8:ec:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:BA:2C:BF:F3:6A:CC:7C:03:5D:28:08:96:46:20:74:5A:62:8A
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:59:fb:4f:29:31:09:0c:02:a5:90:0e:34:d2:c7:38:f5:4a:
6b:d9:64:17:ab:4e:63:13:50:ee:e4:0d:bf:23:4d:ea:36:48:
d4:1e:e6:7e:75:d3:c9:bc:20:28:3a:a4:b7:9b:54:cd:3e:c8:
e4:d5:a4:d6:fe:0d:57:c4:ff:eb:06:54:af:25:ae:46:40:c6:
25:4e:01:48:d4:c6:7d:1b:b1:bd:37:58:b4:35:e4:f3:92:d9:
7c:c1:e1:52:ed:14:8b:15:24:c4:db:50:73:2a:60:13:5b:e0:
aa:05:6f:86:74:0b:6a:f5:99:52:2b:a6:ae:4e:55:7e:a2:1f:
07:11:42:e1:46:52:2e:35:b9:ce:1a:99:6c:af:2f:2a:e6:5c:
0d:a3:34:0a:23:5a:a0:68:6b:c7:14:5b:68:ae:fd:09:75:9c:
ca:4f:7d:2b:5b:c6:eb:98:a4:db:ac:61:76:aa:29:73:33:73:
e4:09:a7:00:ff:7a:aa:b5:5e:ed:33:91:30:cd:ab:9c:62:14:
f5:ca:dd:6c:40:cc:ae:18:f3:6c:73:8e:66:8e:a7:d0:b8:42:
42:52:f2:f2:b0:a0:34:a4:01:ad:92:da:c6:ed:50:ef:0c:53:
97:09:1a:d0:78:ad:08:f5:8f:e1:4a:59:6f:af:4e:ca:66:8f:
e6:fe:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:47:48 2026 by rpki-client