
$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier: rit9u1MOSG9OGhRN+gNLHBSe0MUZHHv/UBeYwo3mVno=
Subject key identifier: 47:98:FD:0B:EA:10:83:D1:78:1F:6C:5B:6F:B3:90:39:0B:BE:C5:3A
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 74417BAC163D1C950354B19AC8FA174E3D55DB75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:23:52 +0000
Manifest this update: Tue 16 Jun 2026 20:18:52 +0000
Manifest next update: Wed 17 Jun 2026 20:32:52 +0000
Files and hashes: 1: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
2: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
3: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
4: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
5: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
6: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
7: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
8: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
9: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
10: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
11: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
12: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
13: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
14: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
15: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
16: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: al6ZXBt8G45VKKb5F01ZpoTcl35TWynzpXXAF0MAao0=)
17: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
18: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
19: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:41:7b:ac:16:3d:1c:95:03:54:b1:9a:c8:fa:17:4e:3d:55:db:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: Jun 16 20:18:52 2026 GMT
Not After : Jun 17 20:32:52 2026 GMT
Subject: CN=4798FD0BEA1083D1781F6C5B6FB390390BBEC53A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6e:1d:0b:ea:de:83:37:2c:d9:62:ab:9b:32:
a0:87:46:a2:9f:e1:6d:59:0a:14:9e:72:bc:32:01:
85:2d:9e:50:97:7a:55:e9:73:3a:8c:c6:a6:e3:bb:
87:02:e2:2f:d8:b1:8c:6b:ab:e3:4f:55:3a:2c:20:
69:d2:60:bd:90:fa:de:ec:27:3b:ef:be:32:29:38:
08:a2:f2:7c:dd:96:ff:47:1d:70:64:d7:f9:3e:01:
9b:cd:44:c8:cd:9d:ec:8d:2a:64:9e:76:52:1a:ac:
01:0e:57:46:09:e2:02:ea:67:d7:72:94:fb:62:50:
2b:1a:22:a8:35:78:52:34:08:75:21:5a:00:9c:25:
2b:3e:13:80:a1:e5:4e:0c:54:90:72:ce:08:f0:2f:
24:37:0e:e4:a8:e3:8d:b9:92:af:ae:59:d0:74:21:
b8:14:ea:c0:43:c7:7a:b4:7c:dd:28:a0:3d:7f:4f:
5d:52:bd:b1:c4:a5:0e:60:ab:3d:85:da:60:c2:88:
58:3a:ed:52:0c:dc:54:b5:95:cd:c1:44:90:64:1d:
8d:fe:15:73:74:f7:47:a5:00:48:92:ed:1e:5a:d7:
91:09:c5:1b:85:2e:2d:ce:cf:fd:b2:20:3e:53:c4:
06:57:4e:37:ab:e4:f2:df:2a:6e:80:5a:14:62:d6:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:FD:0B:EA:10:83:D1:78:1F:6C:5B:6F:B3:90:39:0B:BE:C5:3A
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5e:14:26:7d:73:d2:0b:c6:71:e7:e1:7d:ef:12:99:40:3f:
27:91:3f:28:5a:a2:fe:e0:36:48:34:7e:b9:b4:8f:67:c5:d0:
d5:47:3e:fb:c1:40:e1:ec:2f:9e:ec:90:23:3e:17:5d:71:28:
02:de:86:97:d9:0e:a7:b1:b4:8b:ae:43:db:75:f5:d4:d1:fd:
1d:b8:a7:ad:39:c2:0a:5e:75:35:69:22:3a:1d:d2:8d:3b:fd:
b0:10:12:b6:e6:2f:16:c3:da:4b:fe:47:f8:47:7b:cc:59:4f:
9b:a6:51:ed:67:c4:1b:f7:0c:8a:07:32:68:f0:a3:7e:16:62:
7f:8c:9b:b2:0a:0a:1f:1d:18:28:22:6c:c4:36:47:95:43:e9:
15:bd:16:3a:2a:00:df:a1:20:7a:ec:02:00:79:f2:b6:f6:55:
fa:a4:dc:4c:e5:21:f5:14:ba:fe:cd:bd:c7:46:b6:45:51:0b:
a2:76:4d:48:04:bf:7f:f9:02:71:97:c9:73:13:db:12:6b:8d:
fe:32:37:f5:10:e9:9a:47:f3:d2:3e:24:58:87:1e:d8:9b:a0:
d1:d5:6d:88:08:0b:a6:50:c6:62:80:9c:97:33:e3:c2:f3:ea:
2e:00:5e:c3:b4:56:0b:91:8c:7b:76:f6:20:56:89:b4:8d:b6:
55:b9:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:23 2026 by rpki-client