
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
File: 101B41766786F11711DBC574AEB99665E513B990.mft (raw, json)
Hash identifier: MQO76vDPD/O8r09uMePjQAYuVcLTpM7/VjTFDIrMEIA=
Subject key identifier: 0D:05:DA:8B:B3:85:4B:01:BB:E3:BB:97:04:4B:42:56:B5:77:AF:1C
Authority key identifier: 10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
Certificate issuer: /CN=101B41766786F11711DBC574AEB99665E513B990
Certificate serial: 5D297ABDD6748FCFED0601482032F5296F91F4A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
Manifest number: F3
Signing time: Sat 24 Oct 2026 23:13:07 +0000
Manifest this update: Sat 24 Oct 2026 23:08:07 +0000
Manifest next update: Mon 26 Oct 2026 02:46:07 +0000
Files and hashes: 1: 3130332e3138352e35322e302f32332d3233203d3e203538383230.roa (hash: MocOMZvXF2Of3ZlngJI7mWGFsuJURJzlMQVT/Y0KRCw=)
2: 3130332e3138352e35322e302f32342d3234203d3e20313339343536.roa (hash: fdgYg9Q61h2vrVunApThGuv0SA3lWQltGycDEahVHCE=)
3: 3130332e3138352e35332e302f32342d3234203d3e20313339343536.roa (hash: 2/M+qS2XEYEy3c1p2wHiQjRhDZvNqtKYPCMKrPPfKqM=)
4: 101B41766786F11711DBC574AEB99665E513B990.crl (hash: KuNKW4lBa95riVXELtNEu+yd7xxIn/bTvlybHUgdhq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 02:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:29:7a:bd:d6:74:8f:cf:ed:06:01:48:20:32:f5:29:6f:91:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101B41766786F11711DBC574AEB99665E513B990
Validity
Not Before: Oct 24 23:08:07 2026 GMT
Not After : Oct 26 02:46:07 2026 GMT
Subject: CN=0D05DA8BB3854B01BBE3BB97044B4256B577AF1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:7f:ac:f0:78:29:00:09:ce:91:33:85:65:
40:04:0c:ad:18:69:5c:4a:c7:5a:60:73:bd:a9:83:
cc:ff:93:30:24:fb:34:2d:ce:fb:b4:61:79:33:8b:
22:59:f3:f2:fb:a7:aa:48:50:96:fb:17:5e:16:49:
28:fb:2b:d9:7f:2d:bf:4a:a2:35:1a:0a:a9:61:d3:
bb:7f:41:7a:d3:e7:64:79:1c:7c:96:a6:fa:b3:12:
13:79:ab:a2:09:7a:c9:a0:66:a3:f6:ac:ba:62:6b:
7d:9a:38:cf:aa:e9:b5:5f:04:21:cf:35:96:d8:d1:
c0:ee:0e:b2:c1:81:c9:59:2e:8c:75:6d:a7:26:79:
b4:a8:45:cd:1e:62:1d:3b:20:3f:47:5f:63:f0:78:
2e:46:92:43:b1:c0:6c:b8:8b:bd:fe:3f:03:67:3e:
71:2e:57:b8:f7:3f:ef:64:1d:83:88:99:7a:3c:96:
60:7a:fa:1a:67:5f:ae:fd:3d:2a:a2:0a:26:5a:8b:
ce:5a:3e:b8:ac:37:c8:00:b6:3a:ae:10:c6:b3:c3:
8a:a2:1c:d9:30:03:90:ca:6f:45:b2:69:e4:d7:f6:
04:2c:82:ab:7d:a4:d6:62:59:9f:bb:f9:81:11:0e:
00:46:67:62:91:47:b5:1c:f3:4b:ee:ca:bf:df:90:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:DA:8B:B3:85:4B:01:BB:E3:BB:97:04:4B:42:56:B5:77:AF:1C
X509v3 Authority Key Identifier:
keyid:10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f8:d5:29:7a:63:a7:26:5e:0d:88:35:96:8b:98:46:5e:9e:
41:5a:43:1d:34:2b:b4:3a:62:1a:1b:c7:3c:b8:00:54:e0:98:
4a:4d:ef:0d:a2:0d:f1:ed:45:5e:f9:1c:d2:98:7c:32:d8:ef:
52:b3:9a:81:05:fc:8b:45:c6:88:35:19:06:17:f6:aa:3e:9f:
cd:f6:a9:29:3a:63:93:ce:11:ed:86:10:88:9a:ec:7d:20:d8:
5d:af:f8:e8:67:98:ba:72:85:2f:01:de:29:37:c5:64:93:83:
4f:9b:1b:c0:66:34:47:bd:ea:02:49:33:5b:96:c3:c9:a0:02:
2f:25:b0:95:74:32:94:ca:0a:c8:ca:14:18:d9:1d:40:d1:66:
af:3f:25:c7:03:a6:cd:70:ba:59:b9:e8:bf:3a:80:5b:a6:0e:
7b:67:70:1f:93:8c:70:ab:f0:0c:8a:5e:5e:d2:f6:22:86:4a:
5b:f4:24:b5:f5:41:74:54:64:94:59:af:58:45:9a:9b:fc:f3:
d3:f5:3a:37:8d:c9:6b:aa:52:86:f2:9a:93:a3:af:63:39:5f:
51:c0:da:db:ca:f3:88:cd:a1:e9:a9:7a:62:3e:d7:1e:c8:32:
7e:e2:d7:18:6d:af:c1:ed:34:ed:cc:d4:ad:e6:c2:46:26:0d:
fc:56:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:47:15 2026 by rpki-client