
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json)
Hash identifier: RtDXmSz0ppSzyVCwor1bGyoDpk/Gd3zMaiKjU+/Ukz8=
Subject key identifier: A8:EB:A0:9D:4A:DD:BD:9F:89:9D:05:A8:EE:41:BF:D1:8F:AD:72:7F
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 73C1045B2FE53A14C8E1E97F29A0953C2F05BB50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 01:45:10 +0000
Manifest this update: Thu 03 Sep 2026 01:40:10 +0000
Manifest next update: Fri 04 Sep 2026 05:20:10 +0000
Files and hashes: 1: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=)
2: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=)
3: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=)
4: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=)
5: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=)
6: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=)
7: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=)
8: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=)
9: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=)
10: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=)
11: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=)
12: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=)
13: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=)
14: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=)
15: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=)
16: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: ARJeM+s2gW4PAm5TRCqwHILhhsm5XeKweYg65GbGhCM=)
17: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=)
18: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=)
19: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c1:04:5b:2f:e5:3a:14:c8:e1:e9:7f:29:a0:95:3c:2f:05:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: Sep 3 01:40:10 2026 GMT
Not After : Sep 4 05:20:10 2026 GMT
Subject: CN=A8EBA09D4ADDBD9F899D05A8EE41BFD18FAD727F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:f7:a4:11:52:51:eb:0a:bb:57:62:de:dc:
55:e9:90:69:53:33:68:66:5d:25:93:fd:72:65:f5:
22:fa:2d:0d:7a:3e:27:79:5e:29:e1:b5:1e:6a:88:
6e:cd:79:76:ea:07:6e:a1:22:56:d3:c3:48:76:24:
be:29:8d:7c:55:87:57:27:bc:05:cc:1d:3b:d9:03:
9d:86:ff:29:68:44:a4:49:92:e6:3a:d8:4f:1c:e0:
ee:78:2e:37:d2:76:60:4e:f0:20:fe:78:bb:37:6d:
75:d2:2e:5f:b1:44:9f:a1:b6:4d:d8:ea:64:ce:ad:
92:ac:5d:33:e5:13:f8:6a:97:7a:1a:dd:23:2b:bb:
b8:14:83:df:20:c6:60:89:70:4c:25:82:d8:f0:c9:
23:97:c4:d1:f9:fe:02:73:5c:cc:f5:a8:3c:43:14:
75:8f:65:cf:47:53:01:34:dc:88:ae:7b:23:a0:ad:
62:f2:ea:93:71:db:dc:76:f8:24:94:1c:9a:19:de:
cc:ac:fe:4f:4d:e4:98:a9:4a:c9:03:e2:2e:0f:1b:
36:d2:c6:7a:b3:b8:25:46:81:c4:67:d8:32:62:57:
0f:54:19:56:2e:6e:d2:c5:5e:48:03:d0:f2:83:d5:
39:29:8e:b3:66:ac:0c:74:c9:ed:4d:47:2e:2b:63:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:A0:9D:4A:DD:BD:9F:89:9D:05:A8:EE:41:BF:D1:8F:AD:72:7F
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f5:8c:13:30:22:7d:f1:94:82:4c:ac:83:94:c2:fa:d6:f8:
6e:e7:12:b0:e1:c9:5f:8f:bb:fa:63:63:a0:90:77:37:88:67:
28:a1:ba:a0:17:15:6d:e8:1a:05:7a:e9:e2:12:fd:2c:c3:ad:
22:e4:78:f7:73:5c:19:9c:42:56:e6:01:71:6d:3c:ec:53:3d:
9c:6f:10:21:7d:9a:68:59:e7:59:17:55:7b:d4:cd:ab:d0:4c:
40:c2:23:e0:45:df:d9:9c:5c:cd:03:e2:1c:ee:6b:c4:00:5a:
0c:54:af:e2:27:d8:8d:4c:dc:40:1f:b6:7c:dd:0a:97:6b:e1:
19:fa:31:18:8f:fa:14:ab:ba:70:15:6b:13:27:0c:de:d3:dd:
d5:2b:bf:70:1e:10:48:2c:06:69:0d:59:cc:5c:5e:be:94:25:
ea:eb:85:ea:42:a0:5b:5e:f6:f5:0a:7b:4d:d9:27:59:14:3a:
2a:a1:db:36:62:28:72:ff:fe:64:81:6e:d7:6c:a3:97:dc:0a:
65:19:d0:f8:aa:29:76:e5:a9:97:f6:91:41:d5:d4:76:30:46:
1a:29:c5:6b:81:a0:94:e7:b3:b7:e9:83:10:4c:53:e9:6f:d7:
72:28:d3:95:0e:e0:36:a7:5a:25:18:cf:3f:2a:d5:b9:c0:e3:
5e:75:9a:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc8EEWy/lOhTI4el/KaCVPC8Fu1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5
REJBRDUyMDAeFw0yNjA5MDMwMTQwMTBaFw0yNjA5MDQwNTIwMTBaMDMxMTAvBgNV
BAMTKEE4RUJBMDlENEFEREJEOUY4OTlEMDVBOEVFNDFCRkQxOEZBRDcyN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jPekEVJR6wq7V2Le3FXpkGlT
M2hmXSWT/XJl9SL6LQ16Pid5XinhtR5qiG7NeXbqB26hIlbTw0h2JL4pjXxVh1cn
vAXMHTvZA52G/yloRKRJkuY62E8c4O54LjfSdmBO8CD+eLs3bXXSLl+xRJ+htk3Y
6mTOrZKsXTPlE/hql3oa3SMru7gUg98gxmCJcEwlgtjwySOXxNH5/gJzXMz1qDxD
FHWPZc9HUwE03IiueyOgrWLy6pNx29x2+CSUHJoZ3sys/k9N5JipSskD4i4PGzbS
xnqzuCVGgcRn2DJiVw9UGVYubtLFXkgD0PKD1TkpjrNmrAx0ye1NRy4rY2STAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqOugnUrdvZ+JnQWo7kG/0Y+tcn8wHwYDVR0j
BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw
RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE
NTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQyMzQ0YmUtZjlmYi00NjM0LTky
ZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMz
OEI5REJBRDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFr1jBMwIn3xlIJMrIOUwvrW+G7nErDhyV+P
u/pjY6CQdzeIZyihuqAXFW3oGgV66eIS/SzDrSLkePdzXBmcQlbmAXFtPOxTPZxv
ECF9mmhZ51kXVXvUzavQTEDCI+BF39mcXM0D4hzua8QAWgxUr+In2I1M3EAftnzd
Cpdr4Rn6MRiP+hSrunAVaxMnDN7T3dUrv3AeEEgsBmkNWcxcXr6UJerrhepCoFte
9vUKe03ZJ1kUOiqh2zZiKHL//mSBbtdso5fcCmUZ0PiqKXblqZf2kUHV1HYwRhop
xWuBoJTns7fpgxBMU+lv13Io05UO4DanWiUYzz8q1bnA4151mig=
-----END CERTIFICATE-----
Generated at Thu Sep 3 04:59:13 2026 by rpki-client