
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json)
Hash identifier: EKwLFU4m5djTTRAIEIT4oUOmMML+PCZQQSMqHbvGgLE=
Subject key identifier: AD:1B:41:12:3F:AC:4E:C7:82:D9:BC:08:54:C7:51:FD:B3:7F:80:DD
Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Certificate serial: 551E0D1722ECC5CFCBF65A2A3F8326B1F66498DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 17:21:14 +0000
Manifest this update: Sat 14 Nov 2026 17:16:14 +0000
Manifest next update: Sun 15 Nov 2026 20:19:14 +0000
Files and hashes: 1: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: j5/mQUOYIffgEuFoEclIa5Ujuj7uVaoPl4G2k4bfdiQ=)
2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 18:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1e:0d:17:22:ec:c5:cf:cb:f6:5a:2a:3f:83:26:b1:f6:64:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Validity
Not Before: Nov 14 17:16:14 2026 GMT
Not After : Nov 15 20:19:14 2026 GMT
Subject: CN=AD1B41123FAC4EC782D9BC0854C751FDB37F80DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:3b:3a:f1:6f:83:a0:74:bb:86:48:29:bc:
48:44:de:48:22:3e:da:8c:5f:5d:07:78:9e:55:ff:
fb:35:c4:b4:73:f8:08:ca:a3:42:99:3c:d5:b6:3c:
17:b4:04:59:e6:f6:ed:ff:4b:95:59:23:97:7a:a4:
6e:5c:d9:73:a6:3f:67:20:45:cf:d8:ee:5c:8d:fa:
9f:75:21:e7:3b:59:aa:ba:d9:7c:5f:82:dc:fa:e0:
88:4d:c6:1f:7c:59:ba:f7:ad:92:bf:c5:64:d4:36:
fc:25:c2:c7:af:aa:52:65:8c:90:d7:2d:34:08:48:
d5:22:5d:f1:55:36:2d:aa:61:93:e4:4c:ef:01:8f:
a2:46:f9:cb:0b:6a:53:e2:c6:56:69:84:a6:5d:78:
b5:8b:ca:94:bc:2a:a0:2a:4f:f7:60:58:d8:2d:3c:
07:cf:39:cf:53:69:ad:57:4d:4c:c9:e6:e5:99:f0:
8d:69:93:d7:74:e5:8f:b7:3f:fb:f7:54:db:35:89:
64:f1:fd:61:ea:84:39:b0:78:6b:9f:78:46:9f:50:
5c:4d:40:3e:bb:e3:40:6b:5a:7a:30:f6:13:a6:12:
f3:36:11:16:d2:47:78:d2:ff:c2:a9:28:4a:a2:63:
50:92:5e:f0:e6:f2:1e:57:f2:c6:da:82:bc:95:f0:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:41:12:3F:AC:4E:C7:82:D9:BC:08:54:C7:51:FD:B3:7F:80:DD
X509v3 Authority Key Identifier:
keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d2:9a:e0:d6:02:3e:b7:fb:02:66:2c:7d:60:e3:f7:4f:ec:
41:05:c4:28:b9:56:30:dc:a4:2b:5a:87:0d:09:7e:71:1e:4e:
c6:4e:35:11:d0:04:6e:ca:f4:7b:3e:65:73:8e:2f:6c:5b:10:
fb:cd:fe:ce:7b:c0:8f:7a:7d:d1:fa:39:de:9f:e8:d8:27:be:
71:dc:d0:8e:c6:9b:a2:ca:a0:dc:c1:86:be:c3:8a:b7:a6:01:
f0:1e:e6:b1:ca:ca:af:ba:b6:16:1b:27:8a:16:97:4f:15:13:
13:16:a2:10:73:09:ff:85:7b:d9:65:c7:7c:0c:fb:89:e3:70:
b8:34:2f:aa:75:0b:95:16:8e:9d:b5:3f:fa:1a:22:83:c7:10:
6a:00:f5:60:e0:6c:c1:af:bc:00:58:77:68:b7:2d:2f:93:55:
bf:2a:69:d8:69:b0:4c:0b:14:ad:96:fe:57:dc:6f:45:fb:96:
e0:6d:b2:94:11:03:92:3d:44:8e:c7:22:58:a1:41:c9:d3:6a:
8f:97:f3:96:e0:c3:4a:cf:0e:ae:ce:ee:53:9f:74:ed:fe:d9:
51:1c:43:ae:31:11:4f:75:bd:cc:85:5c:46:06:ba:4d:fe:f7:
1b:fa:65:d7:e8:76:60:6a:fd:04:71:07:b2:a9:f8:05:63:62:
db:d0:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:43 2026 by rpki-client