
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json)
Hash identifier: pSmmX2UvU+nW96b7X/z4cKq6NwgeXQxieKZHzJCU9xE=
Subject key identifier: B8:6C:AB:58:92:D9:B3:A0:C5:E5:52:6F:EC:F4:CB:14:4F:70:CD:10
Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9
Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9
Certificate serial: 468E3D83F6883FCE147F696070550525B4C09FFF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 09:41:10 +0000
Manifest this update: Sun 15 Nov 2026 09:36:10 +0000
Manifest next update: Mon 16 Nov 2026 10:33:10 +0000
Files and hashes: 1: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: ThXLzXUaZ0yrIBF8sVSO7gty3ujOm9oUkKsgPjPRCaM=)
2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl
rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8e:3d:83:f6:88:3f:ce:14:7f:69:60:70:55:05:25:b4:c0:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9
Validity
Not Before: Nov 15 09:36:10 2026 GMT
Not After : Nov 16 10:33:10 2026 GMT
Subject: CN=B86CAB5892D9B3A0C5E5526FECF4CB144F70CD10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:c4:18:06:6d:40:e5:2b:8b:a1:aa:4f:4a:
e1:a9:39:0b:a9:82:7b:5e:fe:0e:80:e3:bb:da:58:
a2:54:6b:25:85:8a:9c:a9:84:44:a8:ba:2a:7a:f6:
b9:7e:47:48:c4:29:17:04:ae:ac:4f:3c:b4:b1:83:
e5:6c:7a:ee:40:bf:2e:21:df:31:e8:94:40:3a:40:
78:3b:73:8a:0f:f6:0f:83:f9:23:11:4a:75:e4:f4:
92:7b:03:c2:5e:be:06:d1:51:51:16:0e:14:76:8f:
ee:e0:ae:92:a2:33:d7:52:d5:ca:80:1f:26:18:56:
8b:34:92:94:e1:a4:94:5a:15:1a:7c:26:2d:03:87:
7a:15:a7:38:c3:22:6f:01:3d:d8:c5:4c:18:33:01:
18:58:56:01:4d:f5:28:d5:cd:d9:24:a6:59:da:5a:
75:ef:14:dd:df:e5:c3:b7:77:03:8e:35:0e:a9:90:
03:41:da:89:a8:ef:4d:36:94:b1:73:17:3f:50:55:
3c:a6:63:ae:14:d3:41:d5:12:e3:0f:fc:ab:fe:f8:
fc:4c:eb:02:34:38:69:23:f3:39:bb:47:6f:65:74:
63:ac:aa:2e:b4:32:1d:33:2d:ae:bd:0c:e8:77:a9:
ec:46:ac:f5:f5:5b:39:26:ee:9d:ef:46:e3:ac:50:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6C:AB:58:92:D9:B3:A0:C5:E5:52:6F:EC:F4:CB:14:4F:70:CD:10
X509v3 Authority Key Identifier:
keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f1:16:fd:02:26:c4:77:6a:8b:5b:35:d7:1c:58:ca:5a:80:
a9:47:12:ae:6a:6d:e2:df:b1:98:15:0c:9c:5b:34:47:67:90:
93:77:8b:71:83:13:7b:bc:c2:19:dd:34:1b:51:45:01:25:34:
6c:70:f8:a7:e3:e0:e1:eb:f8:27:98:5c:1f:cc:1b:e8:d7:3a:
16:53:af:0b:15:24:b8:e4:f1:ba:40:87:11:ec:cc:01:78:94:
a5:fd:d8:7f:0a:ff:f7:ae:6a:24:b3:95:31:77:38:e8:e5:0e:
d0:f9:77:49:4a:51:ae:4c:ae:56:8b:93:db:e6:7a:43:1c:68:
1e:e9:d2:71:d2:f5:4f:bb:b8:73:78:55:92:82:53:9c:af:a8:
1a:e3:1c:f1:8f:45:59:e2:09:8c:03:55:5c:8f:44:74:09:a4:
e0:96:8c:0b:24:fb:77:6b:b1:d1:1e:e2:5b:8f:27:e2:27:ac:
6d:2c:89:ee:9a:17:51:14:8c:ea:87:2e:7d:7e:d9:ce:09:3b:
6b:33:f7:4f:b1:b5:cc:25:fd:5d:18:4c:87:19:54:4c:81:6a:
f7:54:35:d9:35:54:ee:9c:71:e9:39:f2:60:06:e0:35:35:e2:
29:fe:4c:c6:4e:c3:e2:f8:27:1e:8c:40:77:54:c5:5b:49:58:
fd:e5:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:40:30 2026 by rpki-client