
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json)
Hash identifier: 6AtBfd8DZEaqsMQ+TtYfTAWQK4UNHxs14iYl6zQHHXI=
Subject key identifier: 0F:54:F8:67:DD:B3:39:D7:DD:9B:DC:79:D2:29:11:DA:70:0D:60:89
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial: 79FEA90987A3305CD83AA35B97BC0A8481B247CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
Manifest number: 0108
Signing time: Sun 15 Nov 2026 06:11:51 +0000
Manifest this update: Sun 15 Nov 2026 06:06:51 +0000
Manifest next update: Mon 16 Nov 2026 09:40:51 +0000
Files and hashes: 1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: 3QQtQ/NWQY9bBBid65BhEfPhZ9g+8EsWwESg+obLMBw=)
2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=)
3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 09:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fe:a9:09:87:a3:30:5c:d8:3a:a3:5b:97:bc:0a:84:81:b2:47:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Validity
Not Before: Nov 15 06:06:51 2026 GMT
Not After : Nov 16 09:40:51 2026 GMT
Subject: CN=0F54F867DDB339D7DD9BDC79D22911DA700D6089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:f3:60:60:ce:0f:a0:7a:93:40:02:1a:73:
e6:40:40:69:87:a1:3c:4e:15:ae:29:4d:22:c4:cf:
d2:f4:43:a9:d3:a6:85:83:19:9a:da:86:36:d3:6a:
ab:f9:93:9c:ce:06:9b:d1:58:5b:91:2e:1c:36:21:
d3:04:f2:d8:e5:3e:23:aa:90:82:75:25:98:86:62:
c6:25:9a:7c:c9:b6:08:b2:3b:59:44:b0:e2:3b:9f:
1b:74:f9:6b:10:7c:c9:b0:c6:2a:04:65:bb:d0:fc:
40:b1:ad:ba:7f:3d:81:ae:7c:83:bb:4a:f3:95:ea:
80:af:01:52:5d:b1:a2:12:11:7c:25:7e:15:9a:ec:
d4:da:de:5b:90:0a:0b:ef:ac:98:74:3f:ec:f4:c4:
a3:f3:cc:77:fb:b9:c2:0e:7b:dd:43:c6:db:3f:84:
73:6b:a2:49:fe:c2:95:45:f6:8b:40:fc:15:4c:c4:
01:9a:a3:5d:d4:70:e8:6b:6d:de:75:2b:5b:27:2c:
ef:13:83:12:c7:a9:a2:5a:29:ea:08:25:99:02:21:
b0:44:14:65:81:69:a5:64:69:27:4f:45:b7:39:2c:
e8:ba:2d:42:63:35:d6:6c:79:6b:99:d6:85:55:f1:
51:cc:a0:cf:0f:4f:4c:bb:40:75:4a:66:1c:1d:e8:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:F8:67:DD:B3:39:D7:DD:9B:DC:79:D2:29:11:DA:70:0D:60:89
X509v3 Authority Key Identifier:
keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8f:0b:c8:0a:20:49:78:b3:4b:ca:ac:15:b7:65:8b:ca:1d:
77:b3:bb:36:f8:1d:c7:fc:b8:7d:4f:fb:0d:7a:28:8d:e7:cc:
8b:ce:82:4f:e8:b1:39:27:10:35:28:f9:cc:5a:6e:23:b7:85:
5d:f1:98:19:6d:86:01:52:5c:be:69:22:2b:12:5e:16:f5:02:
49:0b:8c:ca:7b:84:1d:c3:e5:77:27:e3:5b:c2:e5:0c:3b:02:
01:a2:a7:6c:b2:e9:a3:94:5a:b2:34:29:fd:f1:d2:e4:b4:20:
49:9f:8d:fa:9a:04:fa:7e:81:57:90:c4:44:c6:04:2a:cc:59:
9f:c7:b2:5b:06:ad:42:ae:4b:43:33:29:7a:a7:b6:c9:61:5b:
6c:c5:fa:f7:96:f7:82:2a:88:a4:28:2a:62:2b:0c:f0:90:84:
95:72:0f:e3:df:59:83:ab:e1:7b:84:2e:c6:9b:c5:5a:36:4e:
5d:96:3c:da:d4:6b:f8:c2:19:02:5f:11:88:e3:3b:27:47:8e:
e2:73:6c:4d:d4:ff:a3:ce:f1:cd:91:e3:c7:c5:c0:a4:86:40:
69:3e:fd:9f:0f:2b:50:1e:77:82:f4:8e:9d:d8:01:c0:77:f9:
c8:88:86:ba:19:b5:16:a0:2f:10:60:22:7b:ca:ba:1d:7d:14:
69:cf:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:06 2026 by rpki-client