
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json)
Hash identifier: pTXn461YFb7315ZHGpxJU+A2WINy6uL3fzbFuEedDWA=
Subject key identifier: E1:D3:EA:AD:5F:7E:A1:89:74:69:F9:BE:44:02:03:EA:DB:68:7E:BD
Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
Certificate issuer: /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Certificate serial: 04E8941190FC5E0A43449F53BD11F53F17DACBA2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 02:39:43 +0000
Manifest this update: Mon 21 Sep 2026 02:34:43 +0000
Manifest next update: Tue 22 Sep 2026 03:59:43 +0000
Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=)
2: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: Gb9c1Sd9IH4D/59uv3Pb5Bg6xJPm52owLaVuUOTrEl4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e8:94:11:90:fc:5e:0a:43:44:9f:53:bd:11:f5:3f:17:da:cb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Validity
Not Before: Sep 21 02:34:43 2026 GMT
Not After : Sep 22 03:59:43 2026 GMT
Subject: CN=E1D3EAAD5F7EA1897469F9BE440203EADB687EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:c9:4c:5a:60:da:d6:fb:1c:7b:d5:5b:1e:
bd:31:32:32:3b:46:d5:be:d4:0e:6f:45:67:e5:6d:
df:f7:0a:aa:5b:e3:21:a0:a5:7d:d6:b6:f8:6f:7e:
9a:79:1c:1d:81:85:19:b5:16:0f:4d:42:3d:43:57:
7f:bf:b2:c2:83:ca:68:7f:72:76:ef:7d:0d:92:1b:
7a:88:37:c6:6e:fb:7e:14:38:a2:3d:28:c5:73:4e:
17:de:b9:86:fd:cb:9f:5b:14:3a:cb:6b:43:de:9d:
4a:79:54:f9:02:ee:ad:96:c5:97:70:fb:00:21:8f:
4c:a7:b1:b0:df:2f:c0:8f:e5:f1:7a:4b:fa:5b:45:
ab:5f:75:a6:92:06:67:de:64:df:c3:6f:d1:4f:04:
84:2c:14:34:5d:03:90:ac:ed:a7:79:db:75:29:d1:
0a:eb:2f:d6:a7:15:45:ba:8b:0e:d9:84:34:6a:19:
89:b6:72:4a:44:75:23:fd:9d:d5:71:50:54:99:7d:
57:b4:36:3b:5a:a9:cd:0c:16:55:7f:dc:ca:4d:36:
29:b7:db:4c:6a:c6:fa:31:80:a8:84:f6:93:80:f0:
f1:36:b6:f5:df:e9:e3:b3:2a:d0:9a:0e:84:aa:ed:
82:de:00:82:2e:25:29:a5:cb:87:90:e7:ab:26:fe:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D3:EA:AD:5F:7E:A1:89:74:69:F9:BE:44:02:03:EA:DB:68:7E:BD
X509v3 Authority Key Identifier:
keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:54:61:fd:c3:ce:3f:ac:d4:26:a3:f0:93:b4:8e:65:a6:7b:
e6:58:e8:9c:44:19:63:9c:0d:5c:6e:63:85:21:3f:ed:07:6d:
1e:85:ae:02:44:e7:9e:1b:91:5f:e6:3d:b2:60:45:ab:07:55:
b2:12:ed:15:1f:ea:ed:6e:6b:61:e0:66:ce:6a:19:14:cb:58:
ea:1e:c2:0c:91:52:15:77:43:f3:ca:2d:a0:95:6d:f1:11:b7:
18:c9:29:2a:c3:70:fa:b2:c0:ae:ea:89:07:e9:46:b4:87:81:
5e:a0:e8:03:c7:03:25:2a:c7:3e:15:93:a5:f5:33:5d:2a:58:
cf:c6:f8:97:2d:8a:17:9c:21:0f:7a:c2:c8:36:82:18:9f:52:
71:b3:a6:b8:8b:e3:ef:30:e5:b1:a6:17:ad:43:a5:20:25:ce:
b9:db:ed:f0:56:8c:7f:f9:95:b3:6f:68:96:23:83:39:72:d7:
ac:d4:4e:9c:7e:e0:e9:be:93:a9:0a:3b:93:e1:b9:41:a4:f8:
d4:74:85:73:02:90:b0:68:f6:4e:e5:1d:4f:e3:23:30:b4:57:
64:05:62:2b:2a:ba:f6:aa:c6:6a:d8:4e:bf:4c:6a:bb:a4:1e:
a1:3d:55:44:c4:29:b7:f3:ef:0c:a3:ae:19:39:a5:e7:3c:ba:
1a:61:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:21:49 2026 by rpki-client