
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json)
Hash identifier: /p5x18HsbsCAcJT4DUkPMBwJPVdIBNsGVjJ34DfuDXE=
Subject key identifier: F4:17:E1:52:D9:56:AC:16:07:82:A7:6D:5E:A0:B4:E1:BE:4D:A8:F1
Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
Certificate issuer: /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Certificate serial: 4E6058ACC31C3A715F2105F9D6448B5F44AE9BDF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 06:23:55 +0000
Manifest this update: Wed 23 Sep 2026 06:18:55 +0000
Manifest next update: Thu 24 Sep 2026 09:25:55 +0000
Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=)
2: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: L5Bx+h4zcIvw3ri/HM91DiztvVkw8F06xJbE4X+wQ2k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:58:ac:c3:1c:3a:71:5f:21:05:f9:d6:44:8b:5f:44:ae:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Validity
Not Before: Sep 23 06:18:55 2026 GMT
Not After : Sep 24 09:25:55 2026 GMT
Subject: CN=F417E152D956AC160782A76D5EA0B4E1BE4DA8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:ac:a8:28:df:0a:2a:b9:17:60:e5:ec:51:
9a:f0:59:08:8d:99:bc:73:e9:73:ed:c1:dc:35:1e:
b9:d3:d5:4d:9e:f2:a1:08:56:53:06:ee:5a:95:20:
07:a4:a4:e1:04:4b:52:59:eb:08:2d:60:3f:ad:84:
cc:fc:20:b0:b0:e8:d6:e9:ae:6e:22:05:59:77:53:
39:c8:e1:c2:98:41:d4:18:8d:d3:2a:2e:f6:c2:84:
04:0e:ef:51:05:0f:6d:e3:3e:6d:bd:e2:1c:cb:8d:
93:80:a1:4a:9e:ba:b0:6b:64:24:85:62:b1:28:07:
66:71:1b:ec:fc:09:43:27:61:32:79:90:70:68:7c:
64:82:8d:7a:51:06:1c:5d:4c:86:a8:da:3e:0e:74:
11:15:55:f3:82:3b:6f:05:be:34:9a:6d:bc:6d:b5:
dc:61:91:e1:ae:23:f4:02:01:15:84:92:14:03:35:
24:d9:c2:93:5a:5c:70:21:13:64:7c:31:54:8a:4b:
30:ae:57:34:9f:ca:10:f9:b6:13:b5:ce:f2:96:7b:
db:03:20:b9:86:5a:0d:6c:77:8a:2d:3b:76:3c:39:
bb:02:45:ca:76:63:90:39:74:c1:d1:53:63:51:27:
b6:b2:62:50:a4:b0:2a:35:db:1d:6c:52:00:81:a9:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:E1:52:D9:56:AC:16:07:82:A7:6D:5E:A0:B4:E1:BE:4D:A8:F1
X509v3 Authority Key Identifier:
keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9a:80:07:00:19:ae:c6:1e:b5:03:70:dd:cf:cc:b9:03:09:
3a:56:10:95:d8:09:09:9b:10:4f:98:48:c5:45:3f:96:f3:e2:
e7:9e:9d:3f:95:13:6a:41:c1:b6:7a:83:85:05:29:63:f6:52:
f3:4b:30:83:fd:ef:e1:19:bb:3f:62:23:ee:34:5f:3e:48:ad:
2c:0d:89:f8:43:cd:f4:e1:ce:b2:aa:42:9c:6d:21:8a:89:df:
5a:09:ca:f6:c2:aa:9a:33:a0:9c:94:41:ee:5c:13:fc:ff:b2:
ca:f0:ba:06:d8:92:3f:58:c6:94:a7:34:39:ac:bc:68:a2:7e:
cb:eb:08:29:c8:ba:75:61:fa:ea:c9:01:11:0f:0f:d3:6c:1c:
38:fe:77:87:59:12:7c:c2:54:f3:37:1b:e6:94:2e:f3:16:96:
ef:ca:a1:6b:18:a0:04:8e:1f:33:d9:6b:9d:5e:7c:a7:8a:c1:
25:26:f9:e7:27:f4:f8:77:37:63:2a:0a:85:a3:79:2e:73:43:
59:af:e0:95:84:ad:77:56:9b:dc:0f:c0:29:88:81:f9:53:62:
f4:e5:8b:bc:62:c5:f5:21:f9:79:dd:0e:f2:6e:6a:cd:c1:18:
37:5b:40:d1:96:72:0a:7a:cd:0e:b4:7d:56:55:a6:90:d0:af:
96:87:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:40:00 2026 by rpki-client