
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft
File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json)
Hash identifier: /Ou7suPHKvUmEVLlKAQbwtKRUrQ+Y0epghP5qfvJsTg=
Subject key identifier: 77:5C:9F:F8:10:73:56:CA:50:36:2E:9D:26:CC:89:BB:95:64:AD:B3
Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50
Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450
Certificate serial: 08D9F8FFADEC854A70AD3A97139E5306626858E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 03:18:15 +0000
Manifest this update: Sun 15 Nov 2026 03:13:15 +0000
Manifest next update: Mon 16 Nov 2026 05:45:15 +0000
Files and hashes: 1: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=)
2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=)
3: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=)
4: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: gDae6lzCpzyzFff+xmY9vMLttE2wA9z6zeTvwtXUd/8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl
rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 05:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d9:f8:ff:ad:ec:85:4a:70:ad:3a:97:13:9e:53:06:62:68:58:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450
Validity
Not Before: Nov 15 03:13:15 2026 GMT
Not After : Nov 16 05:45:15 2026 GMT
Subject: CN=775C9FF8107356CA50362E9D26CC89BB9564ADB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:f8:45:7d:b4:7e:b8:ab:e2:f7:57:8b:7e:
aa:8b:aa:b2:41:4e:89:8c:80:ea:a6:52:6e:39:6e:
6a:a1:40:b1:e4:e0:1a:7e:fe:6b:d6:79:d1:fb:f0:
64:bf:2a:60:42:a7:40:1f:37:a7:01:96:84:2c:5b:
79:38:7c:e8:0f:ff:62:93:1f:99:19:b7:81:44:a8:
3d:7f:8e:0f:d1:17:0c:3d:df:da:63:43:6d:c0:e3:
43:3e:b5:11:3f:76:5f:0f:4f:6e:51:1e:cb:4d:79:
66:0e:63:14:fa:c6:ec:c0:df:89:af:86:5e:a5:d7:
49:a9:b4:ef:1f:af:08:97:de:df:72:9a:bd:87:1b:
89:9c:b8:f8:89:93:85:1f:72:05:84:26:ec:79:f3:
0e:bc:dc:e1:92:87:2f:12:48:04:52:b1:9f:16:03:
41:90:3f:ee:2b:d8:ca:ab:4f:b4:d9:f7:0b:f3:dd:
97:a4:30:98:0d:6b:0c:cb:0d:52:b5:cb:83:e4:db:
a1:dc:c8:2a:d6:e8:d6:68:ea:fa:33:1f:41:6d:e4:
46:8d:63:4c:9a:ed:24:13:4b:94:55:72:99:15:21:
bc:bf:1d:d8:b8:bb:18:44:10:8f:4b:9f:73:c8:34:
e4:fc:bd:42:0f:97:b3:1e:83:d8:09:d0:37:44:4c:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5C:9F:F8:10:73:56:CA:50:36:2E:9D:26:CC:89:BB:95:64:AD:B3
X509v3 Authority Key Identifier:
keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f1:df:3c:14:7b:83:8f:58:db:68:d1:ba:6b:a4:66:bd:ff:
b1:0a:b9:0b:49:97:5c:30:5e:02:3f:42:d7:20:57:47:ea:c2:
08:d9:21:97:e0:39:88:7b:aa:32:d9:05:35:d4:29:57:75:83:
a5:66:9b:ea:94:cf:71:a6:de:7f:cd:ab:7d:01:55:e5:2b:89:
9b:b6:5b:44:e2:f8:88:69:89:19:82:99:23:44:2d:b8:4b:d0:
38:55:3f:f2:df:e6:5a:f4:ef:0f:a4:34:f6:ef:81:eb:88:92:
84:5b:56:cf:b3:56:91:d3:bf:10:c9:06:18:4e:ce:39:28:0e:
ea:e8:e8:18:3e:9b:c9:de:12:84:75:92:2a:af:58:20:0d:20:
f2:a7:f8:eb:a1:4a:e1:07:cd:ca:16:92:ce:38:f8:b0:6a:c2:
9f:4c:50:08:60:e6:dc:44:5b:19:4b:86:f1:f2:c1:22:cb:ba:
b1:b9:8d:1b:45:16:ca:b7:37:b2:12:d2:77:40:a3:45:17:d6:
95:bc:97:90:33:29:d8:ab:d6:d7:d9:24:f4:db:87:3c:10:82:
02:6e:ce:5f:29:eb:1c:e1:c8:09:a7:4d:d1:65:4f:10:80:71:
cc:86:74:69:6e:55:52:d7:46:b7:af:4b:2b:9b:5c:32:45:32:
8a:5c:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:02 2026 by rpki-client