
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json)
Hash identifier: NCbIlAtYzb/6TaeVN+RnvFsGKrI6lz7xyUWroqLdJko=
Subject key identifier: CE:75:E9:32:46:96:E7:58:AB:A2:0C:A4:7C:90:C1:49:6C:7E:95:65
Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151
Certificate serial: 39CD0B3D59ACB85A7C8EDF51132E6961FF90D351
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 13:17:31 +0000
Manifest this update: Wed 23 Sep 2026 13:12:31 +0000
Manifest next update: Thu 24 Sep 2026 16:21:31 +0000
Files and hashes: 1: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: oSsOYmXoBOWjzveWtVw/XKsw9Dhnvv5OI/nbUwSvchY=)
2: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=)
3: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=)
4: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 16:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cd:0b:3d:59:ac:b8:5a:7c:8e:df:51:13:2e:69:61:ff:90:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151
Validity
Not Before: Sep 23 13:12:31 2026 GMT
Not After : Sep 24 16:21:31 2026 GMT
Subject: CN=CE75E9324696E758ABA20CA47C90C1496C7E9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:89:a0:83:aa:eb:b2:d4:37:ae:2f:a0:0d:
77:8d:1b:f8:f4:6c:81:c1:09:57:e4:47:da:7a:2e:
29:6a:83:09:4c:0f:b2:d5:05:1b:10:34:47:d0:27:
eb:70:4e:93:32:97:2b:d5:a2:17:b3:82:5c:b0:06:
38:17:92:de:cc:8c:7b:0a:80:70:38:ed:4f:c3:92:
41:e2:13:f1:b9:c0:ef:88:35:aa:10:78:aa:b4:35:
8d:72:49:cb:64:94:45:2d:67:36:7c:e4:d6:89:4b:
30:d7:ef:35:35:e0:2e:a1:67:0c:8c:fb:24:db:5e:
cc:74:17:cd:e2:3d:c9:f5:a5:65:82:2b:ce:a5:9b:
a8:0a:9c:80:3a:21:69:81:05:5b:4f:60:fb:ec:ba:
4f:67:14:1e:5b:5a:c4:06:c5:78:41:85:0e:5e:ac:
3c:6e:e1:3a:33:a2:36:99:b3:6b:3d:e9:e3:92:44:
75:35:66:5d:5e:c5:c2:a7:43:cc:0f:de:6f:f2:8d:
1c:dd:27:b1:ee:2a:d9:0c:05:35:4f:f6:e9:ae:db:
80:92:ad:be:1a:df:db:f6:3f:d4:47:70:0b:a7:0e:
12:f3:65:84:4e:de:40:32:50:f0:c3:56:59:60:bf:
d1:df:39:71:10:38:6e:56:c1:2f:a5:f0:96:7c:0b:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:E9:32:46:96:E7:58:AB:A2:0C:A4:7C:90:C1:49:6C:7E:95:65
X509v3 Authority Key Identifier:
keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5b:2e:f1:58:60:83:d3:19:82:98:94:96:31:56:81:fa:ca:
8f:a1:97:b3:96:e9:ee:3f:f6:60:4e:52:ac:09:1d:15:98:77:
82:fd:37:0b:cb:8a:35:39:22:a9:e1:3f:d9:4c:6c:b3:a1:1f:
a6:e5:a7:ea:53:2d:08:c4:27:f3:46:2c:d6:e9:e3:47:32:98:
e0:c8:5c:17:66:f7:1c:29:0b:ce:87:f2:86:3e:c1:d1:42:25:
e1:85:58:f1:9b:19:ca:1d:7b:73:ce:e6:10:a8:8d:75:82:a9:
cd:57:8d:f5:c4:6c:e5:f1:ce:13:fc:36:87:02:39:50:4c:c5:
1a:c1:ce:49:09:b2:29:9a:04:14:2b:18:fe:d6:9a:68:af:be:
01:21:d1:bd:b0:9c:3a:9e:29:5c:44:f9:15:73:ed:73:ae:c0:
ac:24:c8:6f:42:b9:8f:87:da:6e:a9:8b:68:1b:07:f3:a5:ac:
6f:06:7e:f2:77:8d:97:30:7d:70:c9:a7:c6:44:45:5a:1b:ec:
c2:37:61:37:67:57:d7:c3:b9:d8:89:6c:57:34:f3:c2:8e:4e:
7f:ae:16:07:3a:79:bc:f8:de:22:86:ce:25:28:4d:36:2a:e9:
cc:90:67:7e:4b:93:fe:17:0b:15:f7:ed:53:29:93:6a:f1:8d:
9e:47:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:18:07 2026 by rpki-client