
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
File: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json)
Hash identifier: +O/XzV7FIt6hln34tjuZr6nhfda4cFI6MuD/6YB3Pko=
Subject key identifier: 80:42:95:2B:09:A7:65:A8:1A:5D:AA:9D:02:76:C0:1B:46:6C:F6:3C
Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
Certificate issuer: /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Certificate serial: 5F5995E253D9FFA8D9E3FF0FDF1F8A351CA0A5C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
Manifest number: 0105
Signing time: Sat 14 Nov 2026 14:42:46 +0000
Manifest this update: Sat 14 Nov 2026 14:37:46 +0000
Manifest next update: Sun 15 Nov 2026 18:00:46 +0000
Files and hashes: 1: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: 2xFXLoGA253udLfoKXtnmZ8TicwZCq7UimvNOxkfYEc=)
2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:59:95:e2:53:d9:ff:a8:d9:e3:ff:0f:df:1f:8a:35:1c:a0:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Validity
Not Before: Nov 14 14:37:46 2026 GMT
Not After : Nov 15 18:00:46 2026 GMT
Subject: CN=8042952B09A765A81A5DAA9D0276C01B466CF63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:9e:9e:57:c9:02:21:36:c0:49:9c:e0:52:
f1:57:cc:79:9b:63:cc:39:8c:34:52:91:19:af:c5:
9f:37:97:f2:2b:e5:44:ef:52:c4:7a:b8:3f:09:b3:
d7:ec:c4:c6:70:06:70:b1:44:6e:64:b0:06:82:e1:
fb:f6:8a:78:22:6f:f8:e0:09:94:c4:09:51:6a:68:
9a:0a:46:72:9b:0f:5d:96:c0:de:55:9a:45:60:2f:
c0:c3:09:8b:9f:4a:d4:2f:2a:fb:2f:d1:35:58:46:
01:3d:ea:7a:fb:1b:5d:92:18:9a:e9:9a:6a:b4:8c:
e5:11:9e:ac:a9:39:28:62:43:31:cc:e2:7f:d9:86:
cd:29:33:1c:4b:83:a1:3a:87:ba:9c:4b:c8:91:c3:
84:55:57:6e:a0:52:3c:53:3f:cc:e2:ec:91:23:4b:
7d:aa:6c:72:35:60:4b:31:b7:6b:7c:67:4f:d5:e0:
de:38:e1:d2:9c:b4:58:9e:e2:eb:a0:33:d8:f5:39:
fb:bb:71:75:51:c8:43:48:f2:0f:2a:a6:02:11:e2:
7f:f8:9d:bf:91:8b:06:29:66:0a:34:3d:a7:f6:45:
4d:a6:6d:b3:99:5e:53:0e:df:d2:e8:fe:1d:da:54:
b1:55:db:b8:d4:18:63:40:5f:b3:99:f8:30:cc:b0:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:95:2B:09:A7:65:A8:1A:5D:AA:9D:02:76:C0:1B:46:6C:F6:3C
X509v3 Authority Key Identifier:
keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:c5:8c:db:9a:00:d4:9f:74:51:61:96:85:05:7a:3b:4a:
fd:84:22:43:9f:f1:e4:8c:9e:9d:33:ec:21:21:99:bf:67:1f:
ed:96:49:c0:4b:55:f2:c5:48:93:8e:c3:a5:3c:f7:89:08:d6:
c6:ec:92:f8:2b:c8:2c:2e:0e:ce:93:94:21:bb:eb:36:23:31:
37:8b:58:ec:0a:f5:bb:30:2e:27:9d:8a:aa:fc:17:6b:8e:d8:
94:01:9f:1a:1b:ee:4a:24:7b:7d:3a:bf:af:96:c4:b4:0c:ba:
ef:72:d6:ff:85:20:2d:b6:39:42:d5:5b:26:f0:13:57:65:c5:
ab:9b:b1:aa:ff:cd:c9:de:be:a6:59:1f:c1:f9:49:45:13:fe:
04:a8:82:0a:46:b9:1b:df:13:5b:77:31:0a:ca:b8:1d:77:51:
28:27:3e:33:ed:c9:76:5b:10:2c:34:17:ac:e5:d4:c4:c4:a0:
b9:a4:4e:ed:46:18:4e:75:46:d0:b5:c6:dd:f7:e0:e2:46:a8:
95:41:7d:4e:96:7d:c5:ff:e9:62:04:58:d3:fd:d6:a2:e3:13:
87:03:0a:f5:6a:6e:0f:d0:f1:7d:c0:94:0c:15:4a:4c:f3:d0:
07:1c:a7:2a:d8:ad:9f:29:3c:03:a2:34:c8:61:77:12:7f:df:
17:a0:af:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX1mV4lPZ/6jZ4/8P3x+KNRygpcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC
NTk5MDcyMTAeFw0yNjExMTQxNDM3NDZaFw0yNjExMTUxODAwNDZaMDMxMTAvBgNV
BAMTKDgwNDI5NTJCMDlBNzY1QTgxQTVEQUE5RDAyNzZDMDFCNDY2Q0Y2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zJ6eV8kCITbASZzgUvFXzHmb
Y8w5jDRSkRmvxZ83l/Ir5UTvUsR6uD8Js9fsxMZwBnCxRG5ksAaC4fv2ingib/jg
CZTECVFqaJoKRnKbD12WwN5VmkVgL8DDCYufStQvKvsv0TVYRgE96nr7G12SGJrp
mmq0jOURnqypOShiQzHM4n/Zhs0pMxxLg6E6h7qcS8iRw4RVV26gUjxTP8zi7JEj
S32qbHI1YEsxt2t8Z0/V4N444dKctFie4uugM9j1Ofu7cXVRyENI8g8qpgIR4n/4
nb+RiwYpZgo0Paf2RU2mbbOZXlMO39Lo/h3aVLFV27jUGGNAX7OZ+DDMsLlFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgEKVKwmnZagaXaqdAnbAG0Zs9jwwHwYDVR0j
BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC
QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw
NzIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5
N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5
RjNCNTk5MDcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAETkxYzbmgDUn3RRYZaFBXo7Sv2EIkOf8eSM
np0z7CEhmb9nH+2WScBLVfLFSJOOw6U894kI1sbskvgryCwuDs6TlCG76zYjMTeL
WOwK9bswLiediqr8F2uO2JQBnxob7koke306v6+WxLQMuu9y1v+FIC22OULVWybw
E1dlxaubsar/zcnevqZZH8H5SUUT/gSoggpGuRvfE1t3MQrKuB13USgnPjPtyXZb
ECw0F6zl1MTEoLmkTu1GGE51RtC1xt334OJGqJVBfU6WfcX/6WIEWNP91qLjE4cD
CvVqbg/Q8X3AlAwVSkzz0AccpyrYrZ8pPAOiNMhhdxJ/3xegr2c=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:07 2026 by rpki-client