
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File: CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier: arjMDdNVsyT6mmZh70Dyb1GmNal/ZP1t227Kd2aeI6g=
Subject key identifier: 2D:72:65:71:AC:FB:C4:F0:E0:6D:8D:6E:97:3B:D7:AB:DD:51:F4:36
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial: 484E317E36F2A9DE0B3AA7F1AEA6A63E42BE5514
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 02:42:27 +0000
Manifest this update: Sun 15 Nov 2026 02:37:27 +0000
Manifest next update: Mon 16 Nov 2026 03:17:27 +0000
Files and hashes: 1: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
2: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
3: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
4: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
5: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
6: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
7: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: SM5quRfdxmSzwpvhyN38DzR/BAPWu2OHsI0D7ovQaaU=)
8: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
9: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
10: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
11: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
12: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
13: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
14: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
15: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
16: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
17: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
18: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
19: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 03:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4e:31:7e:36:f2:a9:de:0b:3a:a7:f1:ae:a6:a6:3e:42:be:55:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Validity
Not Before: Nov 15 02:37:27 2026 GMT
Not After : Nov 16 03:17:27 2026 GMT
Subject: CN=2D726571ACFBC4F0E06D8D6E973BD7ABDD51F436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:84:5b:5f:35:1e:bc:2e:98:81:d2:82:ca:
dc:c7:a3:45:94:db:71:ee:c5:db:5c:11:7e:87:5a:
02:e3:08:50:10:37:a4:ad:d7:16:45:a3:c8:b8:85:
0f:88:78:54:5b:59:f1:20:a7:b5:38:4b:45:8d:cd:
79:de:cc:e4:e9:e7:96:ea:f4:b6:9a:5e:21:61:07:
b4:a0:0f:fb:28:39:ce:95:7e:02:69:23:49:9e:17:
b4:88:7a:1f:8b:3f:44:a9:27:4d:cf:e1:65:1e:61:
6b:e1:f5:46:f9:a5:b8:ff:b3:99:0e:80:a0:bc:1d:
c0:69:04:66:41:72:cc:59:06:67:59:71:02:89:cb:
9b:12:be:ab:26:56:ba:fb:1c:31:f4:bd:a8:fc:6b:
c2:06:ff:7f:52:cb:85:de:45:5e:56:ba:85:2b:25:
33:9d:83:37:f2:88:15:68:c5:b5:8f:2c:98:69:b9:
57:48:1a:d3:a1:a0:50:62:2f:2b:f0:c5:6a:a7:69:
d6:8b:e6:7d:86:b0:c3:ee:14:e3:dc:95:11:3c:ab:
8f:f6:6e:f0:bf:52:fe:79:b1:8e:e9:6c:a7:7c:b4:
e8:e9:a2:b2:10:3f:5d:9a:cf:76:bb:a5:6f:4b:88:
91:44:da:0a:61:c0:8f:c0:6a:7c:f3:7e:fa:b9:06:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:65:71:AC:FB:C4:F0:E0:6D:8D:6E:97:3B:D7:AB:DD:51:F4:36
X509v3 Authority Key Identifier:
keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:70:ec:9c:68:22:2b:74:34:29:b9:22:95:bd:09:3e:6b:
da:e3:48:f7:35:83:47:da:91:27:a2:23:1f:41:96:44:25:58:
d6:ef:87:0b:3f:24:40:e0:8b:2f:55:f1:10:f4:f0:a8:b9:77:
2f:f8:83:4a:d8:04:bb:6b:e6:73:3c:e1:f6:b8:a4:1e:1d:a4:
b5:a4:0a:99:c9:d5:72:ab:f0:d4:6e:c2:68:b8:aa:0d:59:5f:
12:5f:8d:5f:d7:20:e4:34:49:05:d8:fd:4d:b1:9b:88:c9:87:
a6:36:9d:05:ee:59:42:96:93:61:5d:f2:de:38:13:0c:73:67:
4c:8d:1a:91:4c:ad:1a:e9:2d:32:1a:4f:71:f1:86:f6:8d:d8:
87:5c:31:cb:62:78:54:3a:11:71:79:a6:c4:63:08:fa:9a:4f:
b2:63:d9:0b:e9:54:14:e9:96:1c:65:76:57:9b:2a:5e:a9:73:
eb:e1:a0:42:fe:d8:de:de:1b:b6:ed:21:69:03:87:72:a5:fd:
62:e8:64:b7:f8:ea:23:9d:b5:d7:e2:46:c3:75:be:8f:a3:71:
6a:c6:13:88:9b:6a:85:24:b7:76:f1:9b:72:21:88:fe:52:62:
ef:b9:67:85:fc:ae:64:f8:05:29:2c:76:f0:76:9d:31:95:4f:
a6:ee:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:28 2026 by rpki-client