
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
File: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft (raw, json)
Hash identifier: E/NaCOxE/34jB4cYxwE7wcS9kpunGyKqVmWDfXcSn2U=
Subject key identifier: 2A:4A:E6:1D:50:35:98:A2:43:B9:FB:43:7A:0A:D1:ED:A6:13:06:41
Authority key identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA
Certificate issuer: /CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA
Certificate serial: 2392234D77F4FF9B94D2D65A4432E68B1F43363F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 06:55:45 +0000
Manifest this update: Sun 20 Sep 2026 06:50:45 +0000
Manifest next update: Mon 21 Sep 2026 09:19:45 +0000
Files and hashes: 1: 0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl (hash: 3zLbkIOsnlVMWJvOjRYxg6HxSLeTKqQvC7lgAQGzBLs=)
2: 3130332e3139382e312e302f32342d3234203d3e20313530393436.roa (hash: quvbYNmn/O14F1WsMTm8aak0xPXGeYxU82kt65bFRhY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl
rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 09:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:92:23:4d:77:f4:ff:9b:94:d2:d6:5a:44:32:e6:8b:1f:43:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA
Validity
Not Before: Sep 20 06:50:45 2026 GMT
Not After : Sep 21 09:19:45 2026 GMT
Subject: CN=2A4AE61D503598A243B9FB437A0AD1EDA6130641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:32:38:ac:d7:d1:f5:96:1f:50:16:fb:77:
66:2a:a3:6f:cb:cf:c4:1f:48:4f:1d:14:df:1f:22:
d7:a1:65:ce:c1:2e:f9:89:43:81:4f:d3:87:fc:84:
77:e2:01:da:1d:5b:d0:be:ce:04:2d:11:07:d0:0e:
a7:92:7d:2d:2b:90:a9:fb:58:82:46:13:ed:24:cc:
be:93:80:ab:14:11:57:31:08:80:64:b8:c7:75:88:
d9:c9:a1:52:d0:54:0f:5f:96:46:d0:8b:cd:7e:33:
eb:b7:1b:bc:12:96:2c:c0:23:f2:2a:34:9b:b6:6a:
f4:8a:04:04:77:a2:41:5a:b1:6d:27:93:a7:e6:90:
04:09:1e:cc:f1:43:2d:76:de:9f:ed:ed:00:31:35:
2b:42:45:1c:8f:ab:20:f5:b7:ea:9d:e9:46:87:8f:
90:c7:17:35:cc:39:42:3b:65:f8:2d:a5:d4:f2:4e:
ae:c5:14:c0:8c:16:49:6f:5a:70:32:7f:a6:ce:a7:
be:43:15:f0:3b:f1:80:d2:1a:2d:9b:3c:d0:5d:99:
b3:2b:c2:03:a6:15:a8:e4:d1:9e:c0:c8:f8:41:ea:
22:5d:fe:82:f5:5b:16:65:17:06:47:47:4a:fd:5a:
89:df:5f:a8:71:ef:ee:4a:37:6e:15:36:da:8a:b1:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:E6:1D:50:35:98:A2:43:B9:FB:43:7A:0A:D1:ED:A6:13:06:41
X509v3 Authority Key Identifier:
keyid:08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:ab:f0:1f:67:3e:7b:a7:fb:07:bf:a3:d0:9b:cc:95:5e:
f8:02:18:22:bc:23:5e:e8:bd:7d:f4:78:e3:01:bb:ad:38:15:
a6:c6:f4:ad:13:e7:ab:d4:3a:32:4f:19:38:f9:28:cd:af:e8:
cf:c5:01:6a:e6:5c:9f:10:28:fb:81:65:77:84:82:24:8d:70:
d5:31:15:4a:66:0d:f6:16:0d:42:59:27:0c:5c:df:c3:d1:4e:
e6:95:17:59:86:41:64:14:4d:53:2e:f3:7d:a8:da:7f:ce:2c:
61:5d:43:ed:3b:63:b5:53:1f:d5:88:d6:cd:c8:6b:24:43:50:
53:00:c3:e4:48:13:b9:db:2c:70:46:1b:7f:60:ac:9f:9e:e5:
af:3d:25:e8:47:74:a3:93:8c:00:70:56:be:0d:07:64:e0:ef:
2c:f9:eb:50:94:2f:17:ef:7a:23:ec:9d:f1:ea:de:82:31:ca:
27:5a:ea:75:55:d7:3e:49:a4:16:97:a4:f0:9a:bc:13:8c:c3:
6d:6d:5a:5b:a6:20:40:d0:4b:e2:7f:0b:cd:36:eb:ae:30:9c:
3e:fb:4a:25:34:91:e2:78:19:ac:cc:07:ca:2b:4a:f0:bc:63:
60:d2:5f:57:87:91:c1:b1:47:0c:8a:d4:18:42:f0:51:69:bf:
9f:5c:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:11:41 2026 by rpki-client