
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
File: 101B41766786F11711DBC574AEB99665E513B990.mft (raw, json)
Hash identifier: cHtmrBi9S+6o6oIpdkeG1sqWGtQPHchqlHH+fzV5wvw=
Subject key identifier: 04:47:ED:AB:42:69:9D:B4:9A:E0:3B:43:44:FF:1B:A0:50:53:E9:21
Authority key identifier: 10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
Certificate issuer: /CN=101B41766786F11711DBC574AEB99665E513B990
Certificate serial: 113F30892F5AA5756B8E2F6048270CD8209B991C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
Manifest number: F5
Signing time: Mon 26 Oct 2026 11:26:29 +0000
Manifest this update: Mon 26 Oct 2026 11:21:29 +0000
Manifest next update: Tue 27 Oct 2026 11:27:29 +0000
Files and hashes: 1: 101B41766786F11711DBC574AEB99665E513B990.crl (hash: qMhgQz6YucG39ek9ziyVkT7rsuK50przsU+CwzkeWr0=)
2: 3130332e3138352e35332e302f32342d3234203d3e20313339343536.roa (hash: 2/M+qS2XEYEy3c1p2wHiQjRhDZvNqtKYPCMKrPPfKqM=)
3: 3130332e3138352e35322e302f32332d3233203d3e203538383230.roa (hash: MocOMZvXF2Of3ZlngJI7mWGFsuJURJzlMQVT/Y0KRCw=)
4: 3130332e3138352e35322e302f32342d3234203d3e20313339343536.roa (hash: fdgYg9Q61h2vrVunApThGuv0SA3lWQltGycDEahVHCE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 11:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:3f:30:89:2f:5a:a5:75:6b:8e:2f:60:48:27:0c:d8:20:9b:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101B41766786F11711DBC574AEB99665E513B990
Validity
Not Before: Oct 26 11:21:29 2026 GMT
Not After : Oct 27 11:27:29 2026 GMT
Subject: CN=0447EDAB42699DB49AE03B4344FF1BA05053E921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:3d:a5:e3:67:86:98:35:83:cd:ac:2a:df:
14:9e:81:23:89:ba:70:39:bf:d4:6c:3a:2d:53:37:
dc:45:14:cc:2a:08:22:fb:ae:c6:db:40:1c:99:ff:
c8:db:18:28:18:72:8f:18:64:21:01:6e:6f:0a:38:
4e:33:79:fc:a7:1d:03:df:39:49:f2:dc:b1:1f:94:
1c:22:09:68:50:da:01:ac:18:36:14:97:0f:7b:85:
3e:87:69:14:7d:4e:d5:33:11:7a:aa:d9:90:9c:42:
7a:3e:3f:b6:ce:c2:ce:9b:b7:89:7e:03:49:45:f4:
84:90:cb:e5:15:79:78:99:59:6a:9b:a3:af:dc:f2:
4c:12:a8:9e:13:bc:55:28:d7:76:c5:94:76:78:3f:
6e:66:13:85:28:7d:8d:51:85:f9:7f:3f:65:7a:51:
81:b8:a8:56:5a:38:2b:bc:de:f0:8e:c0:1b:c9:10:
f3:a3:cc:8b:c7:39:cc:52:a2:da:91:2c:cb:d6:d1:
dd:d6:0b:2e:dc:0c:d7:dd:9b:87:a2:62:95:fa:56:
f6:25:16:c8:4e:75:0f:35:fc:d4:6c:ca:e5:d2:6c:
89:b2:24:cf:d5:8b:be:8e:32:cb:54:c6:db:18:65:
e5:8c:dd:22:cc:f1:12:a6:32:52:a9:65:c2:79:7c:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:ED:AB:42:69:9D:B4:9A:E0:3B:43:44:FF:1B:A0:50:53:E9:21
X509v3 Authority Key Identifier:
keyid:10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:2f:37:46:af:7b:00:56:73:81:09:5f:88:32:80:7a:f3:
e5:1b:02:12:e3:84:99:ba:a6:bc:fb:3b:c9:21:75:ba:bc:0b:
fc:68:b2:d6:aa:13:25:f4:17:49:6b:83:e0:3b:54:2e:75:51:
ff:92:ba:22:43:b9:bd:74:33:6a:82:78:2a:7d:a5:06:a1:70:
ff:b4:5b:ea:07:dd:1b:07:86:a9:8e:b3:3a:00:3d:2b:c3:56:
1e:85:a8:75:1a:33:92:84:d3:fb:65:9b:2b:b7:6c:f2:8a:d1:
f2:32:15:4c:ec:a8:cc:09:01:9d:d4:7c:6b:56:a6:3a:dc:e5:
d2:c8:55:74:8f:22:4c:4c:b5:9f:b1:56:a3:92:e0:84:33:8f:
9c:e4:a7:a0:b8:7d:e1:28:f7:aa:b7:43:46:ef:99:94:8b:ee:
0b:61:32:74:8d:ce:6a:a5:08:a8:76:e6:46:12:d9:65:95:be:
7c:7e:d8:0e:2a:ff:ff:df:7e:78:c8:26:fe:e4:7c:dd:26:e1:
e4:96:42:a1:37:3c:b3:07:51:fb:16:5c:44:c6:70:31:d2:4e:
2d:02:fb:29:c3:35:8b:62:6a:40:e2:93:a7:4e:48:54:f2:86:
7c:8c:01:7f:9a:f4:1e:32:68:15:45:72:c9:c4:aa:b7:1c:a2:
88:d9:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:11:14 2026 by rpki-client