
$ rpki-client -vvf rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
File: 1072303E63837C5CAD6D6208D064394F85518DC3.mft (raw, json)
Hash identifier: VM9447FrmAUBgBB27bCU4qwntjHQcm4lSY1lnp6FvXM=
Subject key identifier: 1D:8D:7E:A1:D9:BF:56:92:BE:A5:BE:87:A6:4D:6A:E1:76:43:4B:53
Authority key identifier: 10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3
Certificate issuer: /CN=1072303E63837C5CAD6D6208D064394F85518DC3
Certificate serial: 12F7F216D5351A69C1B332CE16398C75AD386312
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:34:02 +0000
Manifest this update: Tue 12 May 2026 18:29:02 +0000
Manifest next update: Wed 13 May 2026 19:38:02 +0000
Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: ZpWBUTYuQcAKlvk2d2JG20XN4fDhWIahOn1m4ehuvWM=)
2: 1072303E63837C5CAD6D6208D064394F85518DC3.crl (hash: CsXNAD54jw3lpJcm36CxbsXY0MWTPnABqH0TirTfoKw=)
3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: VL+yGGs45eeKxi6k75PI3vnPXDk9Qwklp2W/skU92Zw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl
rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f7:f2:16:d5:35:1a:69:c1:b3:32:ce:16:39:8c:75:ad:38:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1072303E63837C5CAD6D6208D064394F85518DC3
Validity
Not Before: May 12 18:29:02 2026 GMT
Not After : May 13 19:38:02 2026 GMT
Subject: CN=1D8D7EA1D9BF5692BEA5BE87A64D6AE176434B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:4b:b5:32:40:8a:0e:43:88:59:c1:95:7a:
1a:07:54:69:67:ab:c9:27:86:16:b5:f7:9f:2b:de:
03:b5:69:b1:f8:76:25:74:5b:55:10:b5:23:2f:2e:
1f:63:34:3a:23:3f:74:c0:5a:16:c7:17:1c:1d:59:
e5:16:fc:6b:47:5b:74:de:1f:9b:f1:ef:ca:f4:23:
c5:49:5a:72:7c:43:a1:04:ca:a2:0a:75:2e:95:ad:
0e:46:c8:c2:c2:68:dd:09:2b:7a:c4:5d:49:69:b6:
d4:10:81:d2:94:81:c3:1f:27:e8:75:33:d0:1a:56:
88:dd:48:d0:8b:4b:65:f2:40:54:13:5a:0c:93:ca:
e6:ac:77:a8:ed:f4:c9:b0:0c:72:b6:04:a4:e1:d1:
fc:b1:29:79:c4:e0:8e:47:17:3a:01:a7:79:10:07:
c0:ba:cd:48:19:9c:0d:04:53:72:d9:b5:3c:14:f6:
9f:1e:a9:e8:d7:84:4c:9c:c4:5f:57:e4:f3:39:7d:
12:4e:8b:06:82:89:ef:75:83:4e:e9:41:dc:92:b0:
1d:5c:f6:6f:6f:07:87:2c:30:0b:36:fc:86:f2:4c:
0e:cf:71:08:4a:5e:3c:bd:af:3e:2b:84:b8:2e:92:
27:2e:67:93:9c:1e:8f:b7:5a:6e:51:9b:41:84:24:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:7E:A1:D9:BF:56:92:BE:A5:BE:87:A6:4D:6A:E1:76:43:4B:53
X509v3 Authority Key Identifier:
keyid:10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f4:9b:93:2d:90:40:1d:3f:d5:68:ac:b2:38:46:24:7f:25:
63:35:e6:c1:21:e0:09:ef:fd:87:41:a5:10:d9:62:fc:87:af:
da:ad:22:80:49:4d:2a:3e:e6:46:df:2b:1e:f0:dc:e6:ec:a6:
a3:ff:ef:4b:54:4f:48:f6:1e:46:22:a3:28:02:69:ed:5e:c1:
7f:0e:7e:ed:0d:92:b3:f5:83:b0:73:89:37:48:a7:2c:d5:95:
14:f7:cd:7d:d9:b8:b9:6f:93:7b:1a:c6:3b:1d:68:ac:1e:c2:
c2:55:1f:62:f0:18:d3:b7:22:39:75:1f:3a:63:33:e8:f5:a3:
cd:66:bb:71:8c:6d:de:2b:59:f6:de:cb:27:e3:40:65:55:e6:
f5:8f:b6:c3:70:0e:8b:c1:af:48:07:51:fc:97:62:20:a9:45:
56:40:b7:c1:99:65:25:4e:41:89:cc:f6:3c:50:75:06:5b:bd:
66:e2:3e:9b:93:d5:2c:61:08:f6:57:dd:88:fc:db:91:25:8a:
1c:e2:04:b4:60:53:e2:1b:46:7b:5f:f7:ec:d7:bc:3d:84:2f:
9c:72:27:7e:d1:c0:23:a4:ac:5f:a9:00:b1:97:5a:ab:51:67:
26:83:cc:98:ae:a7:f7:26:97:f2:bb:0e:05:ad:67:c5:cb:ca:
e4:30:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:17 2026 by rpki-client