
$ rpki-client -vvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
File: 143B0FF235C900164875105AD0C37F3C7DB28151.mft (raw, json)
Hash identifier: Sn9jehbFpHH5Hrk5ySGgtdvDpCkyQ6JDLX6sjRJS5JU=
Subject key identifier: EE:4E:BB:12:CD:17:D8:D6:B0:BF:B0:0A:4E:5A:E4:66:DD:ED:F9:6B
Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151
Certificate serial: 0CAF66EECBE7B90C99D07A3BD63C48E21BA5786D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
Manifest number: 69
Signing time: Mon 20 Jul 2026 14:44:48 +0000
Manifest this update: Mon 20 Jul 2026 14:39:48 +0000
Manifest next update: Tue 21 Jul 2026 16:15:48 +0000
Files and hashes: 1: 143B0FF235C900164875105AD0C37F3C7DB28151.crl (hash: VQegorWqQejIT4XTNT4LH558GWXZ50nmNUEO1SQj0Xo=)
2: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: kEo9J9YDEfycsSJU6o/UUiHq399l3gpS8mmcj4dD7Es=)
3: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: hD2c2fRRpw85nnii8gI6DgDgE1ceI1WBb5qAu0bq2pA=)
4: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:af:66:ee:cb:e7:b9:0c:99:d0:7a:3b:d6:3c:48:e2:1b:a5:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151
Validity
Not Before: Jul 20 14:39:48 2026 GMT
Not After : Jul 21 16:15:48 2026 GMT
Subject: CN=EE4EBB12CD17D8D6B0BFB00A4E5AE466DDEDF96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:15:e4:51:9e:78:1f:76:54:6b:6e:46:69:
08:5f:3e:10:9c:ae:46:0c:b6:d1:d9:1b:64:d3:dc:
c2:5f:a9:49:8f:a3:23:05:a6:bb:4d:e8:bb:dd:05:
4c:81:67:62:f7:f5:05:0d:ff:99:68:21:37:a0:d9:
2b:bb:bc:8e:bc:74:52:dc:45:47:9e:65:96:e9:04:
e2:d6:95:0a:ba:6f:8e:04:2a:22:ca:1f:fe:f2:e1:
8b:ee:7a:7d:ac:0b:67:95:74:88:0b:b9:1e:30:2c:
85:1c:81:90:9e:f4:de:e1:9a:03:7c:1d:50:0f:69:
89:55:f6:62:5b:4c:e1:2d:c8:fc:c4:c4:65:05:48:
93:99:63:b0:1b:bd:7f:3b:66:58:9d:00:85:0a:14:
bd:ac:26:58:02:ff:33:b1:d8:5c:e4:a4:45:82:d2:
87:5e:de:7b:2f:f6:22:45:01:28:c8:cf:e4:65:db:
84:da:93:ad:ca:4b:43:ce:0b:c0:62:15:4e:21:5c:
1f:c5:ef:52:4e:7e:94:7e:1f:2e:05:df:6a:a4:55:
34:f6:7c:58:ff:7f:65:e6:76:3e:3e:73:98:6c:e3:
40:e5:02:a6:3e:57:37:f0:82:83:c5:2b:5c:af:82:
c1:6a:de:1b:40:32:89:ec:9d:96:43:00:72:ff:3b:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4E:BB:12:CD:17:D8:D6:B0:BF:B0:0A:4E:5A:E4:66:DD:ED:F9:6B
X509v3 Authority Key Identifier:
keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:30:cf:4f:0c:02:27:fe:6c:87:b4:0e:20:1c:49:6b:13:63:
a3:a3:3c:c4:11:56:0a:93:7e:54:46:62:58:7e:3a:12:9a:b0:
ee:a0:9f:84:49:3a:42:01:fe:7d:4f:12:62:71:7e:a0:68:0a:
f0:45:d2:22:db:48:7a:f6:07:4b:c9:17:05:c2:53:a0:92:1b:
97:be:76:c3:88:4a:b6:18:d4:eb:cf:3b:8d:84:4a:5c:e8:74:
4f:f6:bc:cc:c5:6d:97:66:a7:9c:e1:cb:f4:7e:0e:6f:7d:ca:
82:80:3c:bd:e0:f0:22:44:af:25:eb:af:0c:21:7c:cd:bc:ff:
8c:46:dd:92:e1:2c:68:c3:1c:66:bc:c0:72:7d:b2:cf:d1:69:
66:f5:9c:07:ee:25:66:89:66:4d:d8:07:10:f0:49:92:a0:93:
8f:e4:1e:95:dd:48:05:0b:8e:18:85:e7:7f:04:2a:7a:63:a8:
27:da:6f:d2:cd:99:79:56:52:ab:c5:67:7e:7b:76:df:ab:af:
2c:83:f0:47:a3:09:0b:b3:5d:1b:3e:2b:9d:56:38:3e:0c:41:
a7:79:b2:e2:4e:26:6d:1b:78:9a:87:46:f3:31:4c:ae:aa:15:
ea:c6:a1:5a:b4:96:10:a3:08:af:30:9a:5a:f3:a1:07:8a:cc:
c7:91:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:59 2026 by rpki-client