
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
File: 03B83E011591057E9C55D430A83D331349B52D74.mft (raw, json)
Hash identifier: BJnB7apcfa7UyGoxTOyYs56WmGo038/ewwoGftvOq4A=
Subject key identifier: 2D:DB:CB:C0:9E:4E:65:7D:CD:D0:57:A0:7C:D0:3F:3C:AA:FF:00:E0
Authority key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
Certificate issuer: /CN=03B83E011591057E9C55D430A83D331349B52D74
Certificate serial: 65EFA84DE5D4140721569F185155BB4E2ABAE191
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
Manifest number: BA
Signing time: Fri 18 Sep 2026 07:27:39 +0000
Manifest this update: Fri 18 Sep 2026 07:22:39 +0000
Manifest next update: Sat 19 Sep 2026 08:02:39 +0000
Files and hashes: 1: 03B83E011591057E9C55D430A83D331349B52D74.crl (hash: s0TE48rM4t82ejLoKO5mLzKdrRtbFJYvBXlS+qLdTXw=)
2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: MWGMyGsif1qG/JrFen/swi1iMUWK7kAxIalVFfa1ZhI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 07:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ef:a8:4d:e5:d4:14:07:21:56:9f:18:51:55:bb:4e:2a:ba:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03B83E011591057E9C55D430A83D331349B52D74
Validity
Not Before: Sep 18 07:22:39 2026 GMT
Not After : Sep 19 08:02:39 2026 GMT
Subject: CN=2DDBCBC09E4E657DCDD057A07CD03F3CAAFF00E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:5b:fb:4d:38:bf:94:25:56:70:44:f6:ae:
44:0a:3b:65:6a:ce:c6:1a:ef:6b:df:9f:8f:d6:ca:
29:7f:fb:e9:9a:1f:10:73:e3:22:2e:a8:f8:34:0c:
90:b8:fb:05:40:a9:d3:bb:0c:38:49:1f:4d:37:44:
b5:5a:ee:50:b2:d8:e4:13:46:09:e0:38:d1:42:57:
ef:0e:ff:0c:34:84:0b:c2:13:3b:98:fb:09:83:db:
34:9c:01:c8:42:ef:60:6a:46:b4:3e:36:8e:8e:e1:
f8:58:b8:bf:34:22:8e:7c:ff:e1:53:c1:5a:f8:b8:
25:ad:ea:9a:f7:3a:26:d9:02:15:af:e6:ed:20:b5:
1d:37:d5:3d:13:2b:2e:fd:61:94:53:64:81:54:2f:
13:e7:65:44:62:46:29:7d:6f:c2:51:f4:b9:c4:17:
35:75:f3:80:a4:d9:b5:8a:e7:c4:e3:72:95:16:23:
4d:f8:a6:59:07:46:af:37:db:4f:3e:40:88:00:22:
ef:c5:b8:6a:14:ef:85:db:d8:49:c8:22:0d:2e:15:
43:1b:13:79:76:e4:c4:a4:3d:38:04:ba:52:9a:6e:
0f:5f:75:d9:70:97:8b:5a:e3:ba:40:16:48:c0:6e:
f3:cf:86:d5:cc:51:d3:ee:a8:a9:01:f5:d5:e0:27:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:CB:C0:9E:4E:65:7D:CD:D0:57:A0:7C:D0:3F:3C:AA:FF:00:E0
X509v3 Authority Key Identifier:
keyid:03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:73:b6:a2:6c:a7:8a:84:16:65:ff:d3:ed:5d:63:50:07:
9f:7b:c7:33:2a:0c:4e:89:b3:7a:71:f6:72:94:4c:4d:ac:d9:
66:8e:86:34:7e:3b:6b:b2:25:1b:3d:b6:0a:fe:28:88:db:35:
32:dd:8d:9a:5d:9c:fe:6f:04:18:41:16:4e:ab:3a:a6:36:b9:
ba:57:22:8c:37:ed:be:93:c5:51:a8:d2:e1:49:9b:ab:91:67:
e9:3d:37:1f:5a:0c:91:5f:5e:7a:34:16:33:6d:9a:0e:66:27:
34:ef:47:06:72:e0:0e:ec:fe:85:5c:2e:6f:40:c2:b0:5a:90:
d9:cd:38:a9:d7:ec:0b:36:81:5d:23:9f:76:10:d2:6e:5d:26:
e7:d4:b2:7e:f0:d1:e5:4a:6d:72:63:59:f8:fb:26:88:d7:2f:
a2:a1:fa:68:55:3e:b4:58:85:d7:bf:b2:a4:1e:46:8f:a8:34:
0f:2f:e8:c9:3a:da:0b:0c:fb:29:64:46:bb:27:84:ce:52:7a:
0f:dd:73:49:42:db:4e:74:b2:da:a8:72:e0:d6:21:42:0a:3c:
59:cb:f2:72:b5:f2:9f:c3:f2:85:de:e5:b7:ed:0a:f0:46:b8:
8c:46:37:d3:ea:2d:c8:dd:49:28:05:a4:b1:5b:76:d9:52:11:
31:d6:23:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZe+oTeXUFAchVp8YUVW7Tiq64ZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNCODNFMDExNTkxMDU3RTlDNTVENDMwQTgzRDMzMTM0
OUI1MkQ3NDAeFw0yNjA5MTgwNzIyMzlaFw0yNjA5MTkwODAyMzlaMDMxMTAvBgNV
BAMTKDJEREJDQkMwOUU0RTY1N0RDREQwNTdBMDdDRDAzRjNDQUFGRjAwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MVv7TTi/lCVWcET2rkQKO2Vq
zsYa72vfn4/Wyil/++maHxBz4yIuqPg0DJC4+wVAqdO7DDhJH003RLVa7lCy2OQT
RgngONFCV+8O/ww0hAvCEzuY+wmD2zScAchC72BqRrQ+No6O4fhYuL80Io58/+FT
wVr4uCWt6pr3OibZAhWv5u0gtR031T0TKy79YZRTZIFULxPnZURiRil9b8JR9LnE
FzV184Ck2bWK58TjcpUWI034plkHRq83208+QIgAIu/FuGoU74Xb2EnIIg0uFUMb
E3l25MSkPTgEulKabg9fddlwl4ta47pAFkjAbvPPhtXMUdPuqKkB9dXgJ1N1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULdvLwJ5OZX3N0FegfNA/PKr/AOAwHwYDVR0j
BBgwFoAUA7g+ARWRBX6cVdQwqD0zE0m1LXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjgwMDJmM2YtYmYxNy00ZTQ4LTllODUtODQzNjA2MzMxM2QyLzAvMDNCODNFMDEx
NTkxMDU3RTlDNTVENDMwQTgzRDMzMTM0OUI1MkQ3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wM0I4M0UwMTE1OTEwNTdFOUM1NUQ0MzBBODNEMzMxMzQ5QjUy
RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjgwMDJmM2YtYmYxNy00ZTQ4LTll
ODUtODQzNjA2MzMxM2QyLzAvMDNCODNFMDExNTkxMDU3RTlDNTVENDMwQTgzRDMz
MTM0OUI1MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJT0c7aibKeKhBZl/9PtXWNQB597xzMqDE6J
s3px9nKUTE2s2WaOhjR+O2uyJRs9tgr+KIjbNTLdjZpdnP5vBBhBFk6rOqY2ubpX
Iow37b6TxVGo0uFJm6uRZ+k9Nx9aDJFfXno0FjNtmg5mJzTvRwZy4A7s/oVcLm9A
wrBakNnNOKnX7As2gV0jn3YQ0m5dJufUsn7w0eVKbXJjWfj7JojXL6Kh+mhVPrRY
hde/sqQeRo+oNA8v6Mk62gsM+ylkRrsnhM5Seg/dc0lC2050stqocuDWIUIKPFnL
8nK18p/D8oXe5bftCvBGuIxGN9PqLcjdSSgFpLFbdtlSETHWI0Q=
-----END CERTIFICATE-----
Generated at Fri Sep 18 10:16:13 2026 by rpki-client