
$ rpki-client -vvf rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft
File: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft (raw, json)
Hash identifier: VNCbKnme6wmavcpUfdZi/8lcuAC4YIaKIZha3C9c7Zg=
Subject key identifier: 52:88:D3:5E:EF:6B:CC:D6:68:F4:F1:1D:D5:D1:3A:B7:AC:30:89:02
Authority key identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C
Certificate issuer: /CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C
Certificate serial: 133A52C83D0EC2EF444613D403CB4717AF0C431B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 12:53:06 +0000
Manifest this update: Tue 12 May 2026 12:48:06 +0000
Manifest next update: Wed 13 May 2026 14:25:06 +0000
Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: hUbYV74o2po437IyhmufJ2EH4wEuOB+BJKCVuYVEfLs=)
2: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl (hash: kH4R1+wDQzaciRL1+mHR6QwifYiGfr/f5gpU9/IazdE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl
rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3a:52:c8:3d:0e:c2:ef:44:46:13:d4:03:cb:47:17:af:0c:43:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C
Validity
Not Before: May 12 12:48:06 2026 GMT
Not After : May 13 14:25:06 2026 GMT
Subject: CN=5288D35EEF6BCCD668F4F11DD5D13AB7AC308902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:6f:2f:cd:9b:f0:dc:a6:a0:eb:ff:ca:94:
b2:f1:66:05:e7:9b:af:25:2c:aa:ed:16:9b:48:b8:
8e:69:8d:33:fe:d5:22:6d:08:79:52:07:82:de:55:
81:f5:f5:6b:aa:a5:fb:e4:e2:be:74:ae:02:e3:7a:
55:e3:11:36:fd:b0:10:c1:80:87:5a:56:a6:a7:88:
9c:7e:65:0f:72:03:ae:62:2d:02:d8:bf:13:df:2d:
d5:e2:49:d5:79:7a:44:99:f1:94:44:7c:6b:36:ed:
56:2d:86:c1:17:e8:71:6f:42:87:74:85:30:fc:ad:
08:54:ae:38:9c:6e:49:f1:f6:ac:47:3c:13:8b:30:
79:7f:34:e2:a6:08:4f:7a:2d:e4:35:c3:4d:bd:36:
08:41:6d:d6:86:ab:69:6a:44:75:35:29:f4:f8:2b:
ae:eb:a7:38:40:c8:ce:e8:62:f0:e1:88:77:4e:db:
66:22:26:f5:56:4b:2d:46:3a:17:2f:44:9a:42:b1:
0a:0b:8e:4e:1f:24:44:95:a6:1c:36:84:69:79:39:
ad:40:ec:b5:d7:3f:c9:e5:96:c2:05:de:7e:12:5d:
c7:84:6f:31:77:b1:37:b0:58:b7:ef:fd:7e:43:99:
c0:a4:79:45:77:34:30:78:9f:45:6a:2a:37:f3:a6:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:D3:5E:EF:6B:CC:D6:68:F4:F1:1D:D5:D1:3A:B7:AC:30:89:02
X509v3 Authority Key Identifier:
keyid:10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:11:c6:c9:50:a0:6e:ac:59:52:35:72:47:4e:0a:fe:6c:74:
0c:46:77:a5:07:e5:3b:79:7e:26:bd:97:8c:96:1b:77:77:9d:
b5:c1:91:c4:84:43:7a:5f:90:38:33:5c:ed:5c:5b:de:66:d4:
82:4e:45:37:3e:14:c5:8c:9e:a1:83:fa:ae:89:63:91:d8:88:
8b:7e:1e:94:dc:51:85:a0:2e:64:6a:35:0a:70:31:7a:a5:14:
3f:f0:50:10:7d:38:14:d4:01:5a:97:7b:87:df:37:81:2b:7e:
e1:c8:3a:23:0f:01:16:0e:ab:2c:35:75:0c:7b:94:a8:8f:0f:
d5:4f:6d:bf:56:31:ad:e6:da:34:5a:e7:16:5b:22:94:8f:06:
1a:22:e9:17:1d:02:c1:1b:24:27:e3:8b:49:d2:f1:fd:3c:f3:
cb:98:f0:f5:1a:bf:82:18:7d:ff:f7:56:ca:60:84:5b:69:37:
f3:fa:d0:81:9c:ba:e8:bb:c9:dd:b0:6e:3f:9d:a8:53:56:ce:
5a:3e:da:a4:e6:43:6a:0b:e3:16:fe:1d:0a:13:61:8e:cd:b1:
93:87:09:a3:4a:6b:a9:09:20:27:5e:d8:5f:ee:d7:1f:92:a4:
a3:f2:0a:ff:b7:fd:f8:d3:a9:01:dc:ce:e3:45:d4:12:fd:b0:
16:7a:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:16 2026 by rpki-client