
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
File: 102CB228255AC59C06F56BF9291AABDD49CD72E1.mft (raw, json)
Hash identifier: u3d0hukXufU1KGUI8LckXB0QW8KEXxxh3UUWs2v7MTQ=
Subject key identifier: 89:70:22:C4:DB:23:72:8F:96:35:AF:E1:8A:03:0E:06:A7:2E:45:4A
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 4E0B147F60AEAC7BD7939FA2343AF0E587F41FD4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 20:51:20 +0000
Manifest this update: Fri 25 Sep 2026 20:46:20 +0000
Manifest next update: Sun 27 Sep 2026 00:17:20 +0000
Files and hashes: 1: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: /bDQ1gDKqvhjUD5sIBBKcc/d7hDJ/PXDCn4UuJeT0Ls=)
2: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: tb8tqC2j+OjSb+L7vqU+HSUIKvZtFxMKtvlg07BjAFo=)
3: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: YlFXyFkcnhrnLUhhbwfxblxgALA+vv77xuVIntax+TQ=)
4: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: Zdd9YKsWBUvddcG/dV3/nHAZNChI9zFUfTujTOe6+Bo=)
5: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: 5UlSEWJmILcSCfVnTwCxa/ENvvAkNUAYdbFPlsU3zCg=)
6: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: DvAQZFim4RnakkK453H6rQLkthvZlqZSuH57aVH5BIA=)
7: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: +huyDf3yDQWqXY+1iyFRAvgOtc7xkYdLMWVDiq9SZeo=)
8: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 2nlIoQG3hoyOGXVcA94jjH5wFjmakuKKKtaTFgTjeZw=)
9: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: ZG79u4PD+HEejweoK85E+fQQ2D0/TOpv6Ke8PIGpdKs=)
10: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: tSpJIXLzQ0pL+aodNvc7ns9K3AjDZr8FDk8CW+jKFio=)
11: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: sB0ILDPDQsVKp3KJ8VkdfBp6KlnEUdhc4ZcUygvqa+w=)
12: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: Ll/b1GQ1hHLk4m8w9GNJTYVsExVvnc52BAO7f5yAJAY=)
13: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: 8kLzKJI2nja5geHzz7DQr+VguP3Mo1f3FK0nffBs5Fc=)
14: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: Syq9ruOdB8nqa2oeUhCsgKQVXRsHPSeGmU6poI2HQz4=)
15: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: PKamMspjwCbW9/wmGhI81OH48EZJP0jTkY5TCE2XWoM=)
16: 102CB228255AC59C06F56BF9291AABDD49CD72E1.crl (hash: YqKhCHpgKRrDonVKGSOCtAU46ZuHtM+MuzWrbaIcUXc=)
17: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: DX0BDwvQfYWqJMwZZe9PCmGoXzRVtdlAfrxpl2Av62g=)
18: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: 7tn1qwvIgRbEeEPHCn3MsAshrkZGxEueKKt6KwLv3Q4=)
19: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: xYUCxNjbL6KiwbzD5tLh736zsjEEIJXbWkyCaYS6mBM=)
20: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: ajL2Z4kGQ5eVIGfrteNGWAu6qh97wyjv9fNZZ/zBigM=)
21: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: LrSilx8qH4y/sFG5VI5lyVEcXDtGQaCk1j5qW1FFbZY=)
22: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: sOHfwxxz4WtkgkX9/GptGhrfX40Hb7Ok9OU92SIpJPU=)
23: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: +VS5/Tu3kvOWWv43cJdkwZYGDexUxzNwL5sBfy7ijfc=)
24: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: 1atYO53KPKnfzwdtLkkfQDcEaqY17dJ35gAY7eIGRsI=)
25: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: OjUvEwuMJfYQiDda50+RujR33MhuHSqzyDUYeSQ0JY8=)
26: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: gPbto/7983SacM5tnXYlR5B4CYRQU3aEqwN9PIo4NB4=)
27: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: cysQm/9v/6VSV1/Frp1R3Gk3bFk/u3ElIBj1C4sCGdc=)
28: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: rxmp8zrUV8LmDcLuaoUqV9tezcrFbbsMQfNjGLGu+lk=)
29: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: vyr8/5qv5wY87ZAec3IdObappZpdpcyhrrvuSGncmDk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0b:14:7f:60:ae:ac:7b:d7:93:9f:a2:34:3a:f0:e5:87:f4:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: Sep 25 20:46:20 2026 GMT
Not After : Sep 27 00:17:20 2026 GMT
Subject: CN=897022C4DB23728F9635AFE18A030E06A72E454A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:aa:b2:0c:ec:2b:29:76:a5:f7:5a:bb:c2:
6f:e9:7b:7e:2d:6d:c6:b8:25:db:47:b6:8e:6e:c1:
6b:53:bb:10:58:84:be:3b:d1:63:4f:0a:64:c8:25:
f5:6f:44:bb:2c:f9:b1:4c:ff:54:e4:a2:42:df:e6:
ca:ee:de:27:66:b9:01:43:ce:51:67:97:9f:05:a3:
bf:d0:b2:89:e7:b4:5b:14:db:a7:a6:46:01:07:e0:
8e:fd:05:9e:60:16:64:73:86:9b:e7:e5:ef:6b:40:
eb:c4:63:94:99:d7:76:15:e9:27:95:32:28:05:ed:
b8:e2:f1:98:38:d7:31:1f:7e:1f:8e:a7:2a:0c:89:
a8:7f:45:8c:43:37:40:f7:8d:55:10:24:ce:41:6e:
82:d4:38:63:b1:e1:ca:3f:c4:75:59:3d:fa:f9:3f:
02:d3:01:b5:ee:36:16:45:f2:6f:f0:6d:fe:fb:db:
f1:c2:2f:a8:02:e7:2b:a3:f9:7b:71:d3:a0:cd:34:
ff:8b:a6:b6:d3:c8:ae:af:31:b3:f3:b6:dc:a4:92:
61:53:f4:2d:e0:24:96:7d:88:07:0a:89:96:0e:69:
3f:34:de:3a:ef:60:aa:a0:7c:ae:a1:f5:ba:a1:a4:
d9:83:5e:e7:93:14:c1:1a:1e:7c:57:d3:3e:1a:0e:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:22:C4:DB:23:72:8F:96:35:AF:E1:8A:03:0E:06:A7:2E:45:4A
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bf:d5:c8:5d:e7:d3:a9:4f:c2:01:d5:f3:06:a9:c6:ec:b5:
48:14:b3:ff:5e:21:a0:79:7d:f4:f7:21:2d:ce:dd:0d:2a:8a:
28:ec:c5:fe:8d:e4:6d:80:1d:ba:e8:34:07:7e:55:7b:c3:ed:
15:9e:39:10:b6:fb:18:f2:5a:09:25:a8:38:49:a5:b2:82:f7:
8a:08:37:3a:fc:1d:4c:5f:3d:90:10:10:18:46:5a:15:a1:c9:
e7:95:fd:00:57:3a:54:65:bb:2c:f7:ef:56:c1:ec:d7:42:55:
38:7b:22:54:03:15:e3:85:86:10:06:eb:d1:83:85:e1:59:93:
fe:14:85:cb:fb:18:35:ad:75:be:63:2d:16:20:ec:bc:e9:20:
73:9f:0f:17:f9:f9:3d:da:9a:18:3e:cc:51:26:bb:96:1b:94:
0c:aa:8d:e7:36:d1:72:ce:1d:1a:c8:e5:78:54:ea:54:0e:ca:
07:a9:7c:79:b3:bd:f3:e7:df:ff:b8:bd:9b:ba:36:1a:a3:ca:
39:e4:87:b3:6f:70:08:75:2f:01:1e:85:d7:95:d7:04:05:cb:
66:fd:8d:1a:96:dc:c2:16:50:1c:8a:b3:d5:97:98:3d:55:39:
02:f8:7e:94:e6:3b:29:8a:fc:70:f5:fc:52:69:f6:4e:36:8f:
2a:91:79:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTgsUf2CurHvXk5+iNDrw5Yf0H9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0
OUNENzJFMTAeFw0yNjA5MjUyMDQ2MjBaFw0yNjA5MjcwMDE3MjBaMDMxMTAvBgNV
BAMTKDg5NzAyMkM0REIyMzcyOEY5NjM1QUZFMThBMDMwRTA2QTcyRTQ1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9aqyDOwrKXal91q7wm/pe34t
bca4JdtHto5uwWtTuxBYhL470WNPCmTIJfVvRLss+bFM/1TkokLf5sru3idmuQFD
zlFnl58Fo7/QsonntFsU26emRgEH4I79BZ5gFmRzhpvn5e9rQOvEY5SZ13YV6SeV
MigF7bji8Zg41zEffh+OpyoMiah/RYxDN0D3jVUQJM5BboLUOGOx4co/xHVZPfr5
PwLTAbXuNhZF8m/wbf772/HCL6gC5yuj+Xtx06DNNP+LprbTyK6vMbPzttykkmFT
9C3gJJZ9iAcKiZYOaT803jrvYKqgfK6h9bqhpNmDXueTFMEaHnxX0z4aDrfJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiXAixNsjco+WNa/higMOBqcuRUowHwYDVR0j
BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy
NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3
MkUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj
NzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFC
REQ0OUNENzJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHG/1chd59OpT8IB1fMGqcbstUgUs/9eIaB5
ffT3IS3O3Q0qiijsxf6N5G2AHbroNAd+VXvD7RWeORC2+xjyWgklqDhJpbKC94oI
Nzr8HUxfPZAQEBhGWhWhyeeV/QBXOlRluyz371bB7NdCVTh7IlQDFeOFhhAG69GD
heFZk/4Uhcv7GDWtdb5jLRYg7LzpIHOfDxf5+T3amhg+zFEmu5YblAyqjec20XLO
HRrI5XhU6lQOygepfHmzvfPn3/+4vZu6Nhqjyjnkh7NvcAh1LwEehdeV1wQFy2b9
jRqW3MIWUByKs9WXmD1VOQL4fpTmOymK/HD1/FJp9k42jyqReUs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:54:34 2026 by rpki-client