
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json)
Hash identifier: Ns5WY1lK4iO8Qw6AQwK+E9y1boMGtwhuH8Kj+sFX910=
Subject key identifier: 51:85:6A:E5:B4:BB:96:2F:5C:E4:0E:AD:1D:84:A8:21:2B:B6:35:01
Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Certificate serial: 038F53EA8547E33897C0F6AC1018A01BE2B8FC62
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
Manifest number: EC
Signing time: Mon 26 Oct 2026 15:39:52 +0000
Manifest this update: Mon 26 Oct 2026 15:34:52 +0000
Manifest next update: Tue 27 Oct 2026 19:13:52 +0000
Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=)
2: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: d0cj/k3KqEZmRIIZLY55Fergv63xNY25kO8hN9geZ3U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8f:53:ea:85:47:e3:38:97:c0:f6:ac:10:18:a0:1b:e2:b8:fc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Validity
Not Before: Oct 26 15:34:52 2026 GMT
Not After : Oct 27 19:13:52 2026 GMT
Subject: CN=51856AE5B4BB962F5CE40EAD1D84A8212BB63501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:f9:53:a9:4d:30:2e:c2:e9:15:5c:f6:66:
de:17:d1:b2:33:5a:48:82:97:3b:05:8e:c2:38:0c:
d8:dd:bd:68:60:04:c4:58:dd:5c:50:7e:af:14:44:
bb:c1:75:e8:ab:a1:bd:ee:fd:6b:7e:b2:32:02:8f:
3c:3b:c2:bf:19:56:f9:cf:6e:48:ac:5a:13:c7:1b:
7b:91:9c:7d:44:57:e8:e8:d9:59:4b:59:87:13:b0:
b7:1c:b0:1a:01:6c:34:35:da:d3:e4:8f:07:90:11:
03:2e:59:eb:6f:dc:27:74:72:32:db:2a:eb:0d:e5:
3a:35:8b:16:18:19:db:61:12:2e:f5:fd:6f:83:59:
bc:5c:69:03:9b:ab:71:b6:ce:55:4e:05:2c:83:78:
ba:15:10:7a:2d:4b:82:3e:0d:b3:1c:08:ee:0b:28:
02:4a:8a:b6:12:e4:bb:4b:36:68:ca:83:30:79:51:
e0:cc:a8:43:20:58:85:80:2c:a4:e6:e5:76:98:e0:
02:a5:b6:d2:38:13:8a:f5:a2:ee:35:1a:29:2b:06:
89:78:09:50:94:e5:8a:60:ab:81:f9:fb:2b:3c:d4:
a5:5d:6f:9e:c0:a0:96:75:e2:b9:e0:59:8a:01:08:
f8:7f:a2:21:81:b1:d6:50:fc:f3:4f:0b:03:75:51:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:85:6A:E5:B4:BB:96:2F:5C:E4:0E:AD:1D:84:A8:21:2B:B6:35:01
X509v3 Authority Key Identifier:
keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2a:1c:14:43:a1:a1:ad:54:b5:c1:af:99:8b:23:1c:fd:15:
d2:28:e0:12:1b:28:c9:69:8b:34:be:5f:a4:42:5f:35:a4:02:
05:99:47:5f:7e:b2:6a:09:18:9c:cd:d8:e4:8f:b3:5e:01:6e:
46:99:36:d0:5d:23:74:22:3e:a5:2f:4d:1f:cd:e0:ab:75:44:
33:d6:dc:50:f8:8e:e8:6c:c3:be:5c:d7:b6:cb:9a:77:a0:00:
6c:58:b5:3d:60:23:b6:5c:73:72:9e:09:62:a6:86:74:a9:56:
70:3e:d4:c5:7e:9e:1c:50:6d:7b:f6:15:38:0c:18:28:d1:ae:
ed:3c:00:de:fc:cb:c0:e8:12:d2:68:9c:f9:26:4e:ee:5e:2a:
2d:70:f1:07:6d:2c:7e:0b:76:bc:1c:b3:ca:03:e1:03:ba:25:
c9:18:bd:2f:e1:f0:b2:4f:7f:53:93:a0:53:8d:4a:85:33:7b:
54:42:1f:f4:86:50:01:85:db:93:a6:6d:3d:95:80:9a:20:a9:
c3:9f:e3:a1:65:df:b5:4a:58:f5:ae:5f:44:66:8e:c6:ce:64:
5b:bd:d9:5b:e4:4b:82:b5:93:54:bd:e8:97:ec:f2:84:00:c1:
56:a2:f3:c5:10:bd:5f:1a:b7:3c:1f:1b:f3:9a:95:92:77:7b:
7c:5a:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:11:28 2026 by rpki-client