
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
File: 5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json)
Hash identifier: HHYtREfMNd+Awazm2wbvyg26uhEX9JYIHUFcWJQqn18=
Subject key identifier: AE:C1:16:BE:9C:2C:0F:62:35:23:14:D9:17:28:2E:8B:85:66:A6:41
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial: 6745C8932C369477C6BA04C7CD4637FE0E6BEFBE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
Manifest number: 0108
Signing time: Sat 14 Nov 2026 20:45:25 +0000
Manifest this update: Sat 14 Nov 2026 20:40:25 +0000
Manifest next update: Sun 15 Nov 2026 21:42:25 +0000
Files and hashes: 1: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=)
2: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=)
3: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=)
4: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=)
5: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=)
6: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: 1/65HjHYZj/1Rznw5f1UliqL+bysQ4UAUGYIuPaQrEY=)
7: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=)
8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=)
9: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:45:c8:93:2c:36:94:77:c6:ba:04:c7:cd:46:37:fe:0e:6b:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Validity
Not Before: Nov 14 20:40:25 2026 GMT
Not After : Nov 15 21:42:25 2026 GMT
Subject: CN=AEC116BE9C2C0F62352314D917282E8B8566A641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:0b:9a:83:5c:a3:db:f7:0c:c5:92:df:b6:
95:4b:97:d1:f6:ef:c9:32:cf:cd:12:94:4e:1c:fc:
c1:e4:a7:5b:61:04:0c:e7:56:56:b8:31:9f:60:79:
1b:55:b7:8f:a3:85:fe:2b:e7:59:69:4b:9e:2d:83:
9f:35:35:8c:c9:25:a2:83:5a:62:c7:88:2b:3f:ec:
5a:e0:4a:14:f6:c0:9c:26:e7:8a:56:8f:c8:56:13:
53:49:5b:71:02:08:8d:73:f5:89:b8:0e:e8:a1:67:
15:88:ed:68:f9:82:d6:f5:fd:dc:c4:49:78:e0:c5:
08:40:fb:62:f5:41:e2:60:a3:85:6d:b0:61:4b:c4:
97:18:1e:45:ff:ec:d9:79:3d:59:c4:c1:3f:b7:81:
50:52:71:44:cb:04:8b:4e:94:fb:3b:b2:88:80:f0:
45:d7:22:28:28:77:6b:f1:6d:14:46:91:67:c8:14:
cc:4b:88:c1:29:8f:95:4e:33:8f:f1:cf:0c:9a:be:
96:b7:7d:84:87:c7:3d:bc:9c:d6:32:de:e5:a5:61:
65:c1:a3:01:14:81:16:99:84:fe:18:15:61:fc:6d:
a7:db:ad:e6:45:61:97:1e:fe:09:9b:39:4e:ff:69:
aa:27:b0:4f:6f:36:88:53:e0:4e:83:6f:f6:87:93:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:16:BE:9C:2C:0F:62:35:23:14:D9:17:28:2E:8B:85:66:A6:41
X509v3 Authority Key Identifier:
keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:fb:23:91:43:94:8c:54:ec:d2:79:d9:cb:a4:c7:58:d3:
2c:ce:61:db:51:ac:4d:f9:8f:ac:4a:63:9b:3b:98:d2:6c:e8:
aa:61:a8:18:ed:f6:8b:14:b4:96:68:ae:02:01:1b:4f:17:eb:
40:10:62:c1:3b:05:20:d0:13:fa:42:86:a9:73:8f:9a:5a:9a:
39:18:4d:b6:6c:7d:c8:85:13:e0:f3:bc:ad:55:69:65:45:44:
cb:ce:24:a6:00:25:8a:9b:a9:f8:9d:1b:cb:2f:9f:16:4c:61:
ab:1f:2b:ee:9d:c7:88:e3:64:b7:19:22:06:fc:11:07:a6:26:
40:62:84:56:a7:3a:a5:8a:6c:00:df:ef:87:5b:83:c3:da:67:
80:29:72:bc:99:2f:10:ae:60:9d:55:c9:7d:b9:4f:55:22:0c:
89:2a:9f:cd:14:ac:4a:7f:59:73:aa:ff:95:2f:42:a5:28:3b:
c9:34:ae:34:21:d5:08:f1:37:33:25:8e:2a:8c:52:a1:4e:dc:
f2:18:7c:4f:e7:67:fa:00:d9:e8:86:5c:e4:d1:14:14:a1:c5:
ec:58:22:81:61:48:c9:ab:64:71:c9:48:e4:c0:53:6e:b9:b9:
cc:93:99:2e:f6:60:50:4d:54:af:a9:c8:71:3c:8a:dc:fd:e1:
37:69:53:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ0XIkyw2lHfGugTHzUY3/g5r774wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVF
RjYxMjJCQzAeFw0yNjExMTQyMDQwMjVaFw0yNjExMTUyMTQyMjVaMDMxMTAvBgNV
BAMTKEFFQzExNkJFOUMyQzBGNjIzNTIzMTREOTE3MjgyRThCODU2NkE2NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDToQuag1yj2/cMxZLftpVLl9H2
78kyz80SlE4c/MHkp1thBAznVla4MZ9geRtVt4+jhf4r51lpS54tg581NYzJJaKD
WmLHiCs/7FrgShT2wJwm54pWj8hWE1NJW3ECCI1z9Ym4DuihZxWI7Wj5gtb1/dzE
SXjgxQhA+2L1QeJgo4VtsGFLxJcYHkX/7Nl5PVnEwT+3gVBScUTLBItOlPs7soiA
8EXXIigod2vxbRRGkWfIFMxLiMEpj5VOM4/xzwyavpa3fYSHxz28nNYy3uWlYWXB
owEUgRaZhP4YFWH8bafbreZFYZce/gmbOU7/aaonsE9vNohT4E6Db/aHkwCfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrsEWvpwsD2I1IxTZFygui4VmpkEwHwYDVR0j
BBgwFoAUWEOVi7JAd5Mg1/DCtnSs9e9hIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmQ5NWMxOWMtMzI2Mi00OGM3LWFmMDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJC
MjQwNzc5MzIwRDdGMEMyQjY3NEFDRjVFRjYxMjJCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81ODQzOTU4QkIyNDA3NzkzMjBEN0YwQzJCNjc0QUNGNUVGNjEy
MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm
MDItMzdhODM1ZDBhNzc5LzAvNTg0Mzk1OEJCMjQwNzc5MzIwRDdGMEMyQjY3NEFD
RjVFRjYxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAqC+yORQ5SMVOzSednLpMdY0yzOYdtRrE35
j6xKY5s7mNJs6KphqBjt9osUtJZorgIBG08X60AQYsE7BSDQE/pChqlzj5pamjkY
TbZsfciFE+DzvK1VaWVFRMvOJKYAJYqbqfidG8svnxZMYasfK+6dx4jjZLcZIgb8
EQemJkBihFanOqWKbADf74dbg8PaZ4ApcryZLxCuYJ1VyX25T1UiDIkqn80UrEp/
WXOq/5UvQqUoO8k0rjQh1QjxNzMljiqMUqFO3PIYfE/nZ/oA2eiGXOTRFBShxexY
IoFhSMmrZHHJSOTAU265ucyTmS72YFBNVK+pyHE8itz94TdpU0Q=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:36:52 2026 by rpki-client