
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
File: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json)
Hash identifier: 8mNzJb2jt4VKkQg3c98xPOVaavCSTNhsD8BGDw3E8xA=
Subject key identifier: 69:A1:9E:0B:08:82:89:75:0B:DF:A6:EE:73:0D:2F:07:86:0A:16:AD
Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
Certificate issuer: /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Certificate serial: 2D488FC7F4AC64C401FC0A63B3044223F869EF38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
Manifest number: 43
Signing time: Sat 20 Jun 2026 06:07:10 +0000
Manifest this update: Sat 20 Jun 2026 06:02:10 +0000
Manifest next update: Sun 21 Jun 2026 08:59:10 +0000
Files and hashes: 1: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: d/hhdAAzGaludB7jCjjjtNil14Jzvf/+2UgIVVFSTzI=)
2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 08:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:48:8f:c7:f4:ac:64:c4:01:fc:0a:63:b3:04:42:23:f8:69:ef:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Validity
Not Before: Jun 20 06:02:10 2026 GMT
Not After : Jun 21 08:59:10 2026 GMT
Subject: CN=69A19E0B088289750BDFA6EE730D2F07860A16AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:ab:97:ba:d9:14:e6:4c:6e:23:39:8a:2f:
8d:14:a8:71:81:51:0b:8f:14:e9:4c:f9:be:34:a1:
cb:89:d0:90:70:e5:e4:e0:5e:df:3a:ff:c2:dd:ab:
c8:68:2d:eb:2f:2d:a5:3a:20:e8:6a:72:4d:70:41:
ab:3d:a2:f6:aa:0c:4f:80:be:5b:b1:3a:d8:77:39:
9b:2d:00:ec:67:47:87:3f:c9:d0:68:81:8f:54:8c:
dc:3f:1e:5c:9a:42:20:a5:a6:78:17:82:01:fe:11:
4d:59:a7:53:60:56:eb:bf:6f:73:b6:d3:f2:a5:f3:
29:d8:c2:24:f8:6e:e2:9a:f4:6c:18:01:35:f6:9a:
d7:ac:ca:16:2f:0f:3b:bf:48:37:bf:a4:d1:8d:0e:
52:6e:9a:ff:03:f1:a5:e9:d0:2e:3c:85:01:26:07:
b3:81:63:35:85:49:98:85:d6:d8:03:0c:48:1e:a5:
a4:08:a9:26:da:a7:15:df:9b:de:52:66:fa:76:55:
30:0d:b4:00:d3:54:a3:3f:cb:7f:66:38:2a:2d:a7:
c9:78:2b:75:6e:6c:17:b2:69:0a:ca:17:01:31:d9:
4c:a2:7c:f2:09:66:97:ab:65:3d:9b:ec:5e:28:7a:
b8:ef:5c:9a:ac:aa:91:77:67:94:b0:ec:07:59:43:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:9E:0B:08:82:89:75:0B:DF:A6:EE:73:0D:2F:07:86:0A:16:AD
X509v3 Authority Key Identifier:
keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:e9:8c:0a:a2:14:2a:c2:87:13:cd:ba:95:63:c4:0b:5c:
91:f2:55:ea:02:47:ec:92:c1:6a:1d:28:b3:a5:86:1f:cb:af:
3e:90:13:4b:48:0c:8f:be:ae:6f:48:fb:24:90:4d:20:80:99:
bf:32:35:44:1f:8c:56:e8:5f:c6:14:1b:ce:0e:b0:e5:d0:97:
97:9b:3f:ef:18:0d:43:7b:68:ba:88:c8:90:54:a0:18:9d:9d:
a0:ce:97:b6:61:88:83:8e:4d:ce:34:5c:15:d9:c1:94:38:ff:
f5:b5:cf:69:c4:e3:05:c8:3a:b1:d0:36:44:c3:33:5b:1e:70:
5f:ba:7f:8c:94:8e:d0:26:d4:e6:97:a9:b2:24:28:40:1c:8b:
3f:dd:bb:e6:f5:bc:63:dc:7e:87:38:9d:6d:10:a6:1c:59:3e:
32:94:86:09:22:44:bb:96:92:04:ee:0c:9d:3f:44:4b:b4:74:
51:7f:d6:c9:e1:ac:40:1b:f7:02:fa:e7:ac:85:3a:8d:ab:d5:
6a:6a:5a:2e:f4:da:26:05:b9:29:47:0a:91:5b:6c:b0:72:e2:
58:6e:03:a2:49:2c:1a:63:ba:98:a5:ca:44:72:f5:e1:f3:83:
eb:77:14:11:b7:f0:93:0f:20:81:ef:dd:5b:71:14:9d:ee:0e:
1b:69:99:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:43 2026 by rpki-client