
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json)
Hash identifier: ULhKGzZo1XnPLXkmDJM9p8+JYDVeN5FkWjyZM6BmFj0=
Subject key identifier: 81:50:C1:05:F9:3E:B4:68:55:D3:0F:4D:91:F7:EE:BC:CC:E7:E0:31
Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
Certificate issuer: /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Certificate serial: 5037751D5BE98B30BC2D4575F9AFD67DA8A51203
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:15:49 +0000
Manifest this update: Tue 12 May 2026 16:10:49 +0000
Manifest next update: Wed 13 May 2026 17:56:49 +0000
Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=)
2: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: pf/FNzZwDDJLXGbZ7YXPOV3JoLka1bstPloKS14TaLA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:37:75:1d:5b:e9:8b:30:bc:2d:45:75:f9:af:d6:7d:a8:a5:12:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Validity
Not Before: May 12 16:10:49 2026 GMT
Not After : May 13 17:56:49 2026 GMT
Subject: CN=8150C105F93EB46855D30F4D91F7EEBCCCE7E031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:b7:c6:84:b7:c1:db:41:7f:a4:4a:f7:2f:
50:df:b9:0f:d6:d2:a9:35:83:06:bc:f0:59:4c:53:
ce:1c:ce:48:be:88:39:d3:2a:51:a9:89:90:6b:e4:
90:bb:b2:e0:0d:be:17:0f:bf:e8:20:d1:48:b2:d3:
35:e8:5b:2e:01:a5:08:5e:fe:2b:df:2e:84:52:22:
b4:c7:26:e2:4e:83:f6:ba:fe:b8:de:ab:70:02:2f:
c2:c2:38:e4:9c:22:2b:a6:c4:9c:fc:8c:26:61:07:
c0:a0:3b:2c:94:6d:c3:c3:d0:3c:ef:6e:d1:96:f3:
1d:b3:3e:09:cf:fd:3b:24:40:aa:88:00:a2:e5:57:
4d:72:94:dc:40:85:3c:7f:6b:1a:36:f5:4b:45:29:
06:17:1e:47:a4:d5:e6:38:1f:bf:01:58:2a:39:a7:
0e:78:54:f8:b1:80:b7:86:9d:c7:2c:7b:4d:92:79:
8d:ae:07:a4:ad:7e:7b:a1:30:1c:af:a0:0c:4b:24:
eb:a1:42:5b:fe:64:59:d2:0e:1c:ca:b8:00:45:5d:
bc:c1:2e:6c:02:99:8d:ad:59:d9:23:55:42:34:9b:
da:69:69:53:ee:49:32:7b:01:92:8f:19:63:75:89:
01:1b:c3:b0:ac:e2:d8:d5:d7:b2:04:56:cc:94:cd:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:C1:05:F9:3E:B4:68:55:D3:0F:4D:91:F7:EE:BC:CC:E7:E0:31
X509v3 Authority Key Identifier:
keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:0f:7f:8c:45:d3:dd:e1:cd:81:ae:ec:c5:62:bb:f3:78:
54:51:a7:45:fb:51:6d:fa:c4:cc:0a:6b:3a:83:0e:fb:59:af:
e6:4b:64:6e:a1:1a:b5:25:e2:78:a2:f1:2b:ac:49:d8:b8:b4:
a3:42:0a:55:a6:82:20:0b:3a:5a:d9:4b:c2:2e:5c:06:b1:0c:
aa:2e:77:b4:93:14:30:3f:ea:c3:1b:37:d6:ab:d7:e4:f7:c1:
f0:c2:02:83:7e:15:a1:66:36:a9:38:fd:02:38:49:b8:2d:a8:
08:d6:c3:79:af:9e:5e:e9:c4:39:92:1c:c7:7d:0d:31:29:be:
77:74:28:6d:66:80:ec:f9:29:53:72:a1:56:cc:c2:56:e5:ab:
a7:57:2b:d5:30:92:7f:0b:62:09:6d:86:e3:80:9e:25:20:9e:
65:09:43:9a:a8:fd:c6:27:fd:42:38:9b:12:ac:95:e5:e4:17:
21:59:9f:91:5c:82:fb:9f:a5:3c:de:87:ab:a4:e3:1a:0c:0c:
f5:bb:6e:cf:19:4a:97:4e:5e:5b:50:a4:cf:df:d5:16:b6:2a:
56:c3:73:72:47:5d:60:1c:43:33:59:26:79:57:ca:4f:43:f2:
55:15:11:cd:9a:ef:13:9c:59:b0:a3:a5:4f:59:3f:b9:2f:b7:
97:a5:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:38:53 2026 by rpki-client