
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
File: 102CB228255AC59C06F56BF9291AABDD49CD72E1.mft (raw, json)
Hash identifier: XraGHIfuvxoa+ZvskgbUXbL7pq/4tdZF9PGHehAloaA=
Subject key identifier: 4E:56:7D:EA:7A:49:9C:96:D5:46:A6:4C:95:AE:35:AC:4F:16:FB:77
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 36C3B5E9DDE521E3D632908B807EE75AC80A3DD3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
Manifest number: D4
Signing time: Thu 08 Oct 2026 12:54:13 +0000
Manifest this update: Thu 08 Oct 2026 12:49:13 +0000
Manifest next update: Fri 09 Oct 2026 16:01:13 +0000
Files and hashes: 1: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: sB0ILDPDQsVKp3KJ8VkdfBp6KlnEUdhc4ZcUygvqa+w=)
2: 102CB228255AC59C06F56BF9291AABDD49CD72E1.crl (hash: dZvoxC+ehzktH3Ql2BKTXGPgTaiy39UBK1s9sqvm1/g=)
3: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 2nlIoQG3hoyOGXVcA94jjH5wFjmakuKKKtaTFgTjeZw=)
4: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: DX0BDwvQfYWqJMwZZe9PCmGoXzRVtdlAfrxpl2Av62g=)
5: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: +VS5/Tu3kvOWWv43cJdkwZYGDexUxzNwL5sBfy7ijfc=)
6: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: Zdd9YKsWBUvddcG/dV3/nHAZNChI9zFUfTujTOe6+Bo=)
7: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: tSpJIXLzQ0pL+aodNvc7ns9K3AjDZr8FDk8CW+jKFio=)
8: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: ajL2Z4kGQ5eVIGfrteNGWAu6qh97wyjv9fNZZ/zBigM=)
9: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: ZG79u4PD+HEejweoK85E+fQQ2D0/TOpv6Ke8PIGpdKs=)
10: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: 1atYO53KPKnfzwdtLkkfQDcEaqY17dJ35gAY7eIGRsI=)
11: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: rxmp8zrUV8LmDcLuaoUqV9tezcrFbbsMQfNjGLGu+lk=)
12: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: +huyDf3yDQWqXY+1iyFRAvgOtc7xkYdLMWVDiq9SZeo=)
13: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: vyr8/5qv5wY87ZAec3IdObappZpdpcyhrrvuSGncmDk=)
14: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: 8kLzKJI2nja5geHzz7DQr+VguP3Mo1f3FK0nffBs5Fc=)
15: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: Syq9ruOdB8nqa2oeUhCsgKQVXRsHPSeGmU6poI2HQz4=)
16: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: cysQm/9v/6VSV1/Frp1R3Gk3bFk/u3ElIBj1C4sCGdc=)
17: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: sOHfwxxz4WtkgkX9/GptGhrfX40Hb7Ok9OU92SIpJPU=)
18: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: /bDQ1gDKqvhjUD5sIBBKcc/d7hDJ/PXDCn4UuJeT0Ls=)
19: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: tb8tqC2j+OjSb+L7vqU+HSUIKvZtFxMKtvlg07BjAFo=)
20: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: Ll/b1GQ1hHLk4m8w9GNJTYVsExVvnc52BAO7f5yAJAY=)
21: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: LrSilx8qH4y/sFG5VI5lyVEcXDtGQaCk1j5qW1FFbZY=)
22: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: gPbto/7983SacM5tnXYlR5B4CYRQU3aEqwN9PIo4NB4=)
23: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: PKamMspjwCbW9/wmGhI81OH48EZJP0jTkY5TCE2XWoM=)
24: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: DvAQZFim4RnakkK453H6rQLkthvZlqZSuH57aVH5BIA=)
25: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: OjUvEwuMJfYQiDda50+RujR33MhuHSqzyDUYeSQ0JY8=)
26: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: YlFXyFkcnhrnLUhhbwfxblxgALA+vv77xuVIntax+TQ=)
27: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: xYUCxNjbL6KiwbzD5tLh736zsjEEIJXbWkyCaYS6mBM=)
28: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: 7tn1qwvIgRbEeEPHCn3MsAshrkZGxEueKKt6KwLv3Q4=)
29: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: 5UlSEWJmILcSCfVnTwCxa/ENvvAkNUAYdbFPlsU3zCg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 11:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c3:b5:e9:dd:e5:21:e3:d6:32:90:8b:80:7e:e7:5a:c8:0a:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: Oct 8 12:49:13 2026 GMT
Not After : Oct 9 16:01:13 2026 GMT
Subject: CN=4E567DEA7A499C96D546A64C95AE35AC4F16FB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:7f:c0:c7:6b:5d:d4:7a:11:b0:c0:fa:08:
6a:fc:e4:05:c8:4d:d5:70:55:07:84:f3:1a:3d:a0:
de:8a:aa:b8:1b:38:6c:44:fd:1f:86:6f:a7:25:6b:
dc:70:7e:f9:02:a4:08:a0:46:4e:85:63:58:b9:a8:
86:b8:07:50:e6:98:f2:3a:97:96:b6:57:dc:12:85:
85:d8:64:20:34:6c:4e:09:ba:6c:13:de:51:38:01:
24:61:63:c3:1e:37:f8:ff:8c:cf:d7:3c:4c:2d:50:
6a:22:22:4b:23:6e:57:47:0d:34:5c:88:76:cb:64:
1f:b9:a8:1a:d7:8a:ec:9e:2c:71:38:30:4e:66:0e:
b9:f9:74:f8:5b:32:fe:14:8a:aa:87:d6:0d:c7:5b:
96:56:9a:ba:57:82:f8:87:07:a2:f2:7a:82:41:b5:
ed:ae:59:1d:3c:f5:ab:10:04:d8:8c:94:c8:b2:79:
c5:53:90:62:9b:9c:2b:33:5c:d1:e1:33:58:dc:29:
a8:b7:b9:d9:76:ae:77:4f:a5:29:a8:98:ef:b8:a4:
ba:49:30:a5:3b:69:b1:87:e3:f2:2e:22:ad:8f:3d:
88:e7:2a:be:40:b9:53:55:ab:9b:bc:13:04:35:ff:
84:80:56:6a:f1:f8:50:59:90:15:3a:6f:0a:5d:db:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:56:7D:EA:7A:49:9C:96:D5:46:A6:4C:95:AE:35:AC:4F:16:FB:77
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:32:66:e3:e1:02:be:e6:1e:71:7b:ce:91:b9:2a:d8:46:
72:ae:86:63:81:66:9b:56:8f:11:35:cf:6f:3a:47:b0:57:bc:
c8:e7:4b:ad:88:57:23:84:07:f0:83:d8:01:33:5f:fc:96:12:
21:64:d7:ad:25:68:16:4d:1d:81:b2:81:b9:4a:94:28:2c:94:
3c:34:ce:39:8a:10:e7:05:3e:9d:d6:38:a9:36:9a:d5:af:67:
82:e6:f9:b3:fc:30:ff:a6:5e:45:48:9d:ed:7a:bd:e2:67:24:
e4:ca:6b:b7:f8:9a:f9:c6:9c:16:1f:cf:fd:a2:ba:8a:95:c5:
5b:a6:7c:05:2b:46:08:97:45:a6:0f:ce:4d:5b:25:76:ce:2b:
ea:f1:4c:58:03:03:67:da:0c:5b:a3:82:9f:f3:21:16:c6:8f:
f9:91:b1:d3:b9:7e:45:10:f2:03:91:32:72:4f:19:fe:e4:86:
2b:09:57:68:12:72:9d:ae:9d:35:b7:c0:6c:98:a7:7b:f5:8a:
21:15:c2:da:2f:24:6f:e0:ad:5b:c6:28:d3:da:eb:16:8f:f6:
86:05:7e:a7:cd:2a:f3:ab:9b:5a:cc:72:53:5c:22:3d:6f:e1:
9c:3a:cc:22:87:db:34:0e:90:bd:8f:c2:f9:ea:75:e0:e9:ae:
50:f9:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:53:03 2026 by rpki-client