
$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier: 294X1cFRPUOEVY2BudhfI7p68TujSQ6d5DFWMdMvPzQ=
Subject key identifier: 54:ED:9A:91:B8:DD:74:EC:4E:6F:88:DC:2D:03:34:64:7D:25:A2:94
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 4BC6FB7CB891000B141D54F812734BEF2EFF1EA2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 07:18:18 +0000
Manifest this update: Fri 24 Jul 2026 07:13:18 +0000
Manifest next update: Sat 25 Jul 2026 09:56:18 +0000
Files and hashes: 1: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
2: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
3: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
4: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
5: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
6: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
7: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
8: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
9: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
10: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
11: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: 6q78FEIxB/z17bkPSoqC1YXs7CyEkG+KrjMzpYWzRpk=)
12: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
13: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
14: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
15: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
16: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
17: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
18: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
19: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c6:fb:7c:b8:91:00:0b:14:1d:54:f8:12:73:4b:ef:2e:ff:1e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: Jul 24 07:13:18 2026 GMT
Not After : Jul 25 09:56:18 2026 GMT
Subject: CN=54ED9A91B8DD74EC4E6F88DC2D0334647D25A294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:e6:d6:06:81:ce:30:46:49:b4:4a:7e:4e:
29:f0:02:7d:62:d1:e8:7f:2e:9e:61:45:30:00:8b:
64:19:5b:72:33:81:b4:05:16:f9:71:b6:e3:e4:72:
6a:ef:66:1d:92:36:5e:0c:72:d9:fa:21:07:66:cc:
cd:6f:df:ef:a1:c8:76:d2:9f:b8:8d:9c:b2:f8:c9:
62:db:56:b1:d2:41:64:62:8d:dc:d3:f5:e1:b3:27:
4b:5f:7c:bd:22:da:7c:56:76:4a:d2:e3:94:6d:2c:
50:c6:54:e6:e9:e2:dc:52:63:09:8b:64:73:83:2e:
ff:5b:c2:9a:49:09:ed:57:77:77:80:20:90:b9:19:
7b:58:10:f3:4a:de:06:aa:60:5c:88:06:ce:7f:ce:
d8:e6:9f:a9:41:7a:11:dc:85:7d:08:6b:ce:06:f5:
33:da:b5:ba:88:94:1d:b6:aa:56:05:8d:bb:f0:a2:
95:4b:e5:f9:54:f9:13:4a:1c:b2:e8:2a:be:cf:dc:
33:46:97:10:1f:11:27:c1:e9:0c:4c:e5:aa:a3:0f:
02:ad:2f:d0:28:bd:13:cb:ea:3d:89:72:b1:fd:6b:
af:98:90:64:d0:db:88:ea:3e:0b:a2:bf:67:0f:d5:
2e:7c:c7:aa:c4:d2:fe:7d:8a:56:73:8a:61:24:9c:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:9A:91:B8:DD:74:EC:4E:6F:88:DC:2D:03:34:64:7D:25:A2:94
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:92:a3:17:8d:e6:a8:36:dd:fa:ba:fa:b1:2e:21:ed:f3:61:
91:28:4e:8f:cd:c7:c0:43:68:5a:c7:95:f6:dc:72:04:22:6e:
87:cf:5f:c7:b2:09:cd:d6:f1:b5:49:cc:8a:af:19:ce:d4:6c:
23:1f:3f:71:dc:10:20:9d:65:dc:f9:df:f3:26:d3:aa:d5:55:
e2:68:4e:5f:e7:b9:de:67:00:ed:c7:ff:cc:8b:05:e8:1b:8c:
c2:6a:5f:9b:ec:d7:a3:5f:2f:48:73:b9:a2:a0:5f:21:5a:b3:
c1:2f:1b:74:29:60:62:12:f8:34:59:8d:cb:ca:fc:00:aa:9f:
9e:0c:23:cf:5b:35:c7:ff:df:f0:1e:a1:fa:57:f1:41:e3:7d:
c0:79:db:78:cc:23:df:bf:9c:bc:19:15:6f:48:2d:72:43:84:
c3:bc:b3:22:16:c3:5d:c1:70:da:4d:6b:ff:7f:62:be:39:79:
90:99:c8:f6:a3:81:15:50:8a:35:0a:fb:f6:8d:0a:53:d4:40:
1f:3b:c4:c8:7b:45:83:48:de:c1:6f:15:d5:39:c7:74:b5:36:
34:ac:c8:fb:9d:d3:d3:59:5a:57:a1:ad:90:26:3b:16:76:ee:
8e:ba:21:56:e5:08:cf:60:0e:30:b5:29:3f:7d:f1:68:1a:45:
11:3e:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:15 2026 by rpki-client