
$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File: 104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier: 62CP3shadfoURU4CL2yycsnq10Jng8e3bPqDr5p13rc=
Subject key identifier: 4D:9F:2B:BE:E8:70:53:60:50:32:88:5F:3E:6A:1E:DC:FF:DB:09:74
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer: /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial: 3448672BCDFFE3858488A74689F33061240CF23F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number: 0346
Signing time: Tue 04 Nov 2025 15:11:21 +0000
Manifest this update: Tue 04 Nov 2025 15:06:21 +0000
Manifest next update: Fri 07 Nov 2025 16:49:21 +0000
Files and hashes: 1: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=)
2: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=)
3: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=)
4: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: eUuXJmwoGYt42jkifORVg4BIy0T+0OZrUwMfEKq3DQg=)
5: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: VcKH5MJv0PsbSw/ylAqkYnvN7oEA35OAIpUTZqe2tts=)
6: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 16:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:48:67:2b:cd:ff:e3:85:84:88:a7:46:89:f3:30:61:24:0c:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Validity
Not Before: Nov 4 15:06:21 2025 GMT
Not After : Nov 7 16:49:21 2025 GMT
Subject: CN=4D9F2BBEE87053605032885F3E6A1EDCFFDB0974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:d0:1e:2d:fc:bd:83:63:92:e1:bc:e3:01:
ef:33:27:eb:e0:88:9a:2f:f1:b9:7b:cc:42:aa:8f:
85:78:89:c5:0f:e3:21:9a:89:60:79:c7:f3:bd:15:
d6:08:69:29:f7:f8:9b:7e:bd:16:f1:b6:10:e3:d4:
c6:d6:e4:6d:db:ae:2e:8f:fa:07:ab:69:38:ed:27:
c1:de:30:8f:17:13:9d:12:79:40:28:a9:8d:95:09:
36:b1:11:72:84:4c:0b:81:c8:67:08:94:75:96:eb:
b6:20:cd:1e:64:a6:bf:18:06:2f:62:61:35:22:22:
57:82:b6:ae:c2:c5:4b:7d:c5:ea:e3:8c:7d:80:33:
95:60:a3:e6:19:e4:d9:3c:9f:7d:a7:58:86:17:99:
9d:3d:b0:1c:33:30:a2:6b:c8:d9:3f:ca:48:f8:a0:
c6:35:bc:8d:22:2e:4e:79:13:18:92:6a:aa:11:e3:
68:a8:9c:cc:a1:86:1d:e5:c2:cd:b1:17:07:c7:9e:
ac:12:e6:8b:88:05:94:a7:63:c6:e8:2b:3b:0d:00:
e8:3f:02:d4:69:e8:9e:19:49:b8:42:09:d8:06:eb:
94:92:b6:28:ef:88:d0:68:48:40:ee:f7:4a:ee:24:
8c:6a:d3:81:8a:4a:55:67:fe:2b:5c:59:aa:21:c4:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:2B:BE:E8:70:53:60:50:32:88:5F:3E:6A:1E:DC:FF:DB:09:74
X509v3 Authority Key Identifier:
keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:33:7c:8a:a9:85:ca:80:67:9e:00:b2:09:14:e6:0b:87:d1:
4b:02:bb:fd:06:56:50:17:af:4e:f3:98:c1:e0:be:db:38:7f:
9f:ac:6e:b8:89:ff:72:13:83:cf:fd:21:be:05:1d:69:21:0a:
b3:4c:3f:8a:23:d1:6f:43:6f:32:b3:3c:04:1b:5b:64:75:f6:
40:75:0a:29:8c:28:5f:f0:90:18:02:00:39:61:f9:7d:91:e6:
95:cd:12:33:1f:6c:fa:63:31:4b:91:07:80:a4:da:42:01:c5:
01:81:55:d2:1b:82:3a:f0:d1:3f:96:4f:99:43:27:d1:c2:97:
a6:7d:88:a1:d1:b3:9f:57:57:08:d0:7a:49:b7:5f:25:26:0b:
a4:33:74:f8:cf:54:65:3c:07:9c:26:3d:7f:20:90:73:77:5f:
04:60:33:20:33:53:f9:57:a1:64:00:e8:bd:5f:e3:94:92:e9:
af:bf:1e:06:34:bf:8d:b4:6a:23:e2:1a:c5:3a:10:c2:65:c5:
7e:d3:47:cd:3f:32:6b:17:b7:44:2a:20:fd:75:3f:d7:40:e4:
e5:fe:7c:11:ee:cd:4e:6b:1b:27:1a:a8:48:b8:c6:6f:86:8d:
f3:42:14:02:f5:44:0f:59:57:14:0e:af:5e:c4:d4:28:f0:97:
3a:fd:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:54 2025 by rpki-client