
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
File: 0DED71031394AA16715F3D03F26571528F1A6B78.mft (raw, json)
Hash identifier: mR3sRIBQAfDeCxdLy58CeNjSlAtfEDTwCqTUVDNwwRE=
Subject key identifier: E1:C1:F3:C8:10:96:7D:AA:78:05:1F:40:56:33:6E:91:28:16:A5:58
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 50BC2CB93E7C7A695A2CA8A48ECEC3335A8EFE90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 22:18:11 +0000
Manifest this update: Thu 24 Sep 2026 22:13:11 +0000
Manifest next update: Fri 25 Sep 2026 22:21:11 +0000
Files and hashes: 1: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: VsyONkSurv+9TahILF/1bYqHX84Y5bFx2pjIHaiSJGI=)
2: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: AsGbw0cbRJMt+AHYBFh8GsmxUOZcTvqzv4dYjEpLqWI=)
3: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: 6P/gtrzHwkH3kENiz3/is/cjoDAJlGYuJTJreGDj0WI=)
4: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: 7SOOVpEkvhM8jKS5ml9tavuy6fhlwX85TRg6uRnySPg=)
5: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: fW/MYh09AaNNODsolkt0n1TRKWiUESamqS4145FgwBo=)
6: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: YUzbLQ5j/NrlJLr3BA5MdjrGyteXCKBcOA9XM5EndXY=)
7: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 6MK3BTfSdOqMu7uDUlMlrcofKxmm7ND7Ppxbk9itFD8=)
8: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: +P/AMngDtPsWOGxlH3Mr6PlyfaGk41zvE2zQOV1G0jQ=)
9: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: pL+bPlRYYQGeiYZEexp0fc0F/PP7A+oMtImtipkVLIE=)
10: 0DED71031394AA16715F3D03F26571528F1A6B78.crl (hash: n6WkQmBp29CG01U3w1Sz/jsf79l52XeXKI6h3EoRkxQ=)
11: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: WknzV8Nu8IMTlOIi8o8zGv3PuOd24Q9LnQo6SQwKlsg=)
12: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: GK7JrFFTMtRaVSiXERiAUwR8S0jPiNQeuHLwltAd/4o=)
13: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: OfeOZDKtwz07hp7cEfgVVGzrjch6eyioJUOXZr6UY1A=)
14: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: dbjeUfofaAZBLKBCceZ22YQLnJ60T/u4G98K58+vimo=)
15: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: AVqen3U0gUyXJ0Gc/rcGvSgOXqlzI++3CxMMEOAo30Q=)
16: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: skBT3RdnJ+CBUwElmxoesrXpDa/Pn3QhE5o4dAxByQo=)
17: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: T2d/1dANpMVbfsrDZMQgMJnfjqw3B5RFvLZjQM+Maic=)
18: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: +ZnAeFJoXHPh+xq3xuSvRbcR94NVVsIzNuYlIiCcSpQ=)
19: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: OcytzAOerPcWTuVnLCz3It1QvJ1fzJzeOWmkkXqipNY=)
20: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: 8WhM2jfK6A9eXDQHoiLc7iWdsFkOi6rmzW7WT+47mh8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 22:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bc:2c:b9:3e:7c:7a:69:5a:2c:a8:a4:8e:ce:c3:33:5a:8e:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: Sep 24 22:13:11 2026 GMT
Not After : Sep 25 22:21:11 2026 GMT
Subject: CN=E1C1F3C810967DAA78051F4056336E912816A558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:d4:ae:d0:43:76:2b:f5:ff:a2:d9:8b:77:
ea:6b:36:34:13:1a:07:b7:d9:79:3e:ef:29:53:66:
a3:d4:be:d7:d3:b2:5a:6c:ad:fc:62:49:2b:16:ca:
d4:85:10:42:27:d2:ae:b3:8c:68:a9:e3:ec:8c:cf:
a1:28:35:fd:38:7a:4e:69:ef:ec:5b:33:2a:54:2e:
d4:4e:53:0a:fa:8c:99:b3:13:40:6f:68:88:b8:de:
96:9f:36:0b:c3:07:02:3e:b2:68:f6:03:b2:da:c9:
56:84:41:09:f3:89:1f:00:28:e4:94:6f:e6:8c:90:
a0:58:ea:8f:89:dd:0c:ff:1f:ce:39:33:88:fe:a9:
1a:f0:77:53:59:97:2f:a9:5a:13:23:91:fb:05:4d:
3e:f1:78:aa:10:6c:91:5a:a1:8d:8f:a5:44:ad:4b:
87:a2:0f:62:66:c9:c8:f9:5c:a7:f0:bc:64:b3:19:
62:6f:5f:dc:bb:81:12:7e:78:ec:b0:c7:9b:ef:4b:
e9:b8:c1:f3:b4:32:c2:69:18:5a:5b:60:9c:29:33:
c8:14:c3:30:df:24:8d:af:2e:13:9e:73:0e:7f:59:
22:22:ce:18:e2:65:10:7e:25:df:a6:84:26:15:14:
a7:85:4d:82:7e:54:7f:55:9b:78:c3:fb:3a:aa:8a:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C1:F3:C8:10:96:7D:AA:78:05:1F:40:56:33:6E:91:28:16:A5:58
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a4:22:2a:74:18:66:ee:54:31:46:39:6d:32:2d:12:ca:bc:
3d:90:3d:21:5a:81:b0:0b:2a:0b:c1:55:9f:7d:1b:cb:79:f2:
f2:7a:05:0c:58:46:13:2a:97:03:a6:31:6d:8c:9c:81:26:1d:
eb:a8:ad:ff:98:8d:ba:e1:aa:9d:54:10:ea:28:91:64:b0:10:
49:63:ad:ac:aa:1a:76:86:f0:eb:a6:53:aa:69:ee:89:5a:66:
bf:f5:d8:b0:d2:17:b9:2e:05:3f:5b:3e:e5:a0:07:57:df:9f:
f9:ce:ef:a1:ae:62:20:16:e2:d8:a6:c6:c3:d8:a7:40:5f:03:
2f:a6:28:fa:ab:3f:c4:7a:a1:28:3d:31:7d:36:32:ac:3a:ec:
c4:f4:5c:70:14:87:8e:f5:b7:da:ce:3a:12:a7:2c:7f:80:f5:
06:d8:70:30:ff:23:1a:e1:82:56:93:54:e7:6f:9e:3e:9f:96:
77:b7:60:bd:bb:24:08:5f:ba:2d:93:c6:7d:dd:d1:9e:8c:36:
95:c7:53:34:72:21:fa:8b:d7:0d:81:8e:91:65:d6:82:fb:56:
65:8b:13:4b:9b:53:92:56:72:0b:bd:5e:04:0f:cc:46:2e:5b:
ce:4c:aa:6d:98:91:69:68:91:23:02:b3:69:b5:86:97:ae:82:
72:3f:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:01:11 2026 by rpki-client