
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
File: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft (raw, json)
Hash identifier: gBuPxYrBq1LHASIt52UutS+/4T05gXjHQU+nPAcU1Wk=
Subject key identifier: 9D:77:C1:48:55:A8:FA:9C:78:6C:43:85:DC:9F:E6:52:4E:A5:B5:6B
Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
Certificate issuer: /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Certificate serial: 4E7C321AC08B7AD97DE5196BD5CC53CE33DB85A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 10:01:34 +0000
Manifest this update: Sun 15 Nov 2026 09:56:34 +0000
Manifest next update: Mon 16 Nov 2026 12:34:34 +0000
Files and hashes: 1: C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl (hash: Uo1KZrldVJZST1NAQ5UobQPRhkgVXJK//IFArvX+eZs=)
2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7c:32:1a:c0:8b:7a:d9:7d:e5:19:6b:d5:cc:53:ce:33:db:85:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721
Validity
Not Before: Nov 15 09:56:34 2026 GMT
Not After : Nov 16 12:34:34 2026 GMT
Subject: CN=9D77C14855A8FA9C786C4385DC9FE6524EA5B56B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:00:d0:86:48:f2:5c:03:aa:85:6e:bf:18:
a6:b9:18:3c:f8:b2:1d:78:02:32:82:2c:c4:03:8c:
2a:75:8d:65:4e:f1:1f:c1:f9:2b:43:ba:5c:0e:f0:
da:ec:39:e2:dc:31:f5:58:60:d3:89:61:c8:68:e0:
07:db:95:0e:e5:19:a9:b0:37:40:14:79:64:ca:a9:
87:ec:4e:14:5e:e3:65:55:ce:b4:40:41:20:75:a1:
c5:e1:c3:61:f0:69:3b:13:41:91:ca:37:c3:64:60:
eb:15:77:0e:bc:d5:7c:ad:b3:12:f4:09:55:db:da:
88:2d:fa:63:17:5a:fa:c7:49:1e:73:9f:b9:0e:e5:
8f:9b:84:16:2c:a9:61:3c:a5:69:32:18:7a:10:89:
13:52:db:af:0f:85:ec:30:3b:9e:8f:e1:83:05:1c:
f3:54:f7:ef:7d:27:14:93:26:8e:74:75:e3:32:4f:
87:f8:67:12:e1:14:6d:03:f9:d1:0e:eb:d5:2d:75:
48:62:17:d1:1c:a7:5f:10:05:21:fc:b8:78:b8:70:
2c:02:ca:0d:0f:9c:fa:e7:2d:47:a1:bf:c4:aa:ac:
df:83:f9:7d:6e:6a:01:a6:0c:b4:44:b0:e4:05:14:
72:b0:ff:9e:b3:e4:ce:07:4d:11:40:4b:a8:cc:f7:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:C1:48:55:A8:FA:9C:78:6C:43:85:DC:9F:E6:52:4E:A5:B5:6B
X509v3 Authority Key Identifier:
keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:39:0a:75:50:1e:36:4d:29:73:e3:20:ae:8c:9e:5c:70:47:
07:b5:c3:de:72:ac:60:db:eb:68:55:80:3c:55:fe:8c:e4:15:
43:19:82:19:c3:66:6b:6a:dd:8d:62:cc:38:5f:1d:75:94:ac:
a9:84:e6:a2:7e:5f:05:d8:ed:34:55:d6:38:20:18:47:26:ef:
6c:98:19:4b:8c:ed:ce:83:d6:a8:82:f4:74:e1:fc:88:69:d0:
b3:64:08:3d:90:f1:dc:a9:80:76:f1:c1:6b:47:20:47:39:88:
4e:05:76:fb:6a:f5:5c:42:dd:53:e2:73:be:41:29:a7:65:68:
28:22:30:41:f7:64:03:9b:6d:dc:5c:50:58:3b:b5:e0:86:36:
5f:1a:2a:1d:09:ae:37:37:6c:70:af:6a:40:22:86:54:1b:ca:
d9:34:4a:4e:a9:a3:b6:d1:41:23:09:25:bf:b1:58:49:e7:7e:
6a:a9:e2:42:0a:3f:bb:21:f1:09:f2:65:15:f0:00:9a:d6:78:
9d:30:72:19:04:b1:ee:26:f8:5c:61:96:52:6e:00:1b:25:db:
88:28:5d:f5:6f:7f:79:86:88:05:23:e5:22:90:86:30:a2:8b:
1d:07:17:7c:3e:cd:17:2f:70:3b:ac:52:0c:99:0c:93:dd:c5:
bf:3e:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:21:22 2026 by rpki-client