
$ rpki-client -vvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json)
Hash identifier: mYGu0ubO0yQNcASM9kxPLmC1MqIrKFtx55yW3wagvo4=
Subject key identifier: 38:E6:14:87:14:7B:4D:62:9D:C2:F5:93:BD:7D:38:AE:66:EE:35:74
Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151
Certificate serial: 4FE05390E3C5D70D93116C460AD47D2700966CA5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 15:44:09 +0000
Manifest this update: Thu 23 Jul 2026 15:39:09 +0000
Manifest next update: Fri 24 Jul 2026 16:49:09 +0000
Files and hashes: 1: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=)
2: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=)
3: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=)
4: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: cpOe88hfV3SWDDii7fRXwQx7SuJM1RbeT+tQskZMeCg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e0:53:90:e3:c5:d7:0d:93:11:6c:46:0a:d4:7d:27:00:96:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151
Validity
Not Before: Jul 23 15:39:09 2026 GMT
Not After : Jul 24 16:49:09 2026 GMT
Subject: CN=38E61487147B4D629DC2F593BD7D38AE66EE3574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8a:a2:47:85:d8:45:87:3b:35:d1:aa:13:72:
29:ff:75:92:15:8c:e9:05:1e:a4:e8:d9:a9:c4:11:
80:1b:39:dc:2c:41:f1:4c:a5:a3:bb:08:e5:c4:ae:
88:82:58:03:8c:ff:c4:ca:e2:3b:b7:e8:7b:93:a3:
0f:e2:6f:de:93:1d:06:70:8f:c5:74:f0:30:80:a6:
49:58:db:03:e8:72:47:5a:c9:a2:b8:46:12:c2:c0:
e1:77:b3:46:7d:20:b4:e5:57:5d:0c:a8:ff:df:54:
3a:10:37:c7:b7:5d:95:75:c0:d8:84:c3:0c:eb:79:
78:c5:4d:07:6e:a1:96:1b:09:e7:4e:db:d6:74:2e:
5f:73:cf:ba:4e:0d:29:a6:9f:f9:88:8e:84:57:86:
82:a1:3c:55:cd:f0:ae:92:7c:44:8d:de:62:ea:9b:
3b:73:aa:49:c7:2e:41:81:50:de:16:56:b7:20:eb:
50:44:7f:b8:c1:df:01:8b:e0:78:d8:5f:84:ab:e2:
ed:e5:b6:0c:47:13:84:bf:10:b3:69:d5:39:84:d3:
98:86:82:b6:ea:9b:b3:54:47:37:ee:41:90:8e:c4:
86:4b:df:46:24:27:41:d3:74:cb:cc:09:20:62:ec:
13:f7:65:b3:00:12:54:d0:ab:48:aa:42:58:e1:07:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:14:87:14:7B:4D:62:9D:C2:F5:93:BD:7D:38:AE:66:EE:35:74
X509v3 Authority Key Identifier:
keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b0:bc:18:a2:d9:64:75:d0:ac:83:b9:4c:d1:ab:a5:44:96:
1d:b6:71:10:2e:14:a5:ff:dd:4b:a2:56:ed:d1:69:a7:49:0f:
2b:62:e4:06:57:2a:94:f4:b2:26:4b:5c:96:ec:c2:85:17:e0:
39:b6:7d:c1:de:ad:8f:f7:8d:cd:13:3d:26:0d:83:a6:a8:88:
95:0b:c7:3b:47:ab:f3:e0:c1:34:39:85:94:11:44:a4:46:36:
7d:13:e6:a6:20:4f:ad:5d:75:c1:e9:ac:34:3c:15:d2:55:b4:
ba:19:2f:17:22:53:2e:af:ed:03:1a:fe:f0:4e:af:25:5e:46:
66:a1:d7:3b:56:1f:af:e6:cb:cc:54:ab:84:30:93:60:60:56:
8a:c4:48:bd:e7:25:22:4c:95:2f:ba:2b:8c:e6:02:fa:ad:fc:
ac:ec:ff:a6:33:4f:71:3b:d5:b1:b5:dc:bf:25:86:34:0b:a3:
9b:92:18:58:56:d7:8b:a3:4b:73:b5:85:38:cd:33:8f:7f:e4:
57:b6:e9:4c:d2:4f:eb:10:fd:8d:69:13:f7:d4:91:9d:6e:18:
1d:6d:df:d7:60:45:fd:b5:a7:be:94:d4:a8:07:57:2e:d3:8f:
97:d1:99:61:d8:99:50:ea:55:95:cf:b3:84:14:53:f9:a0:bf:
91:5f:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:30 2026 by rpki-client