
$ rpki-client -vvf rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
File: 3262903B69AE7339AAB9320A98EA5D1800FEC705.mft (raw, json)
Hash identifier: jhlr7/Mc5GDBY7m0UHgLqIslzKqm4Urk2oyUem+GXB4=
Subject key identifier: C1:FE:86:48:2C:02:10:3F:AA:91:6D:20:81:9F:BF:AB:8D:0A:49:D2
Authority key identifier: 32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
Certificate issuer: /CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Certificate serial: 6575EDEB817D95A4FE5E94D48F4F956FEC79999B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 20:29:48 +0000
Manifest this update: Tue 02 Jun 2026 20:24:48 +0000
Manifest next update: Thu 04 Jun 2026 00:07:48 +0000
Files and hashes: 1: 3262903B69AE7339AAB9320A98EA5D1800FEC705.crl (hash: Lm7v0qZo8lQpPt/+ARjLWMO+wmsak6auTR5oC+v8pTc=)
2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: mvp2yuPOBwuKJ3KSamrBGxDk5I0RR5jAQfoIbHtIVlo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 00:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:75:ed:eb:81:7d:95:a4:fe:5e:94:d4:8f:4f:95:6f:ec:79:99:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Validity
Not Before: Jun 2 20:24:48 2026 GMT
Not After : Jun 4 00:07:48 2026 GMT
Subject: CN=C1FE86482C02103FAA916D20819FBFAB8D0A49D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:0b:d3:54:f7:ec:3f:c9:be:f4:f2:ac:e0:
c0:61:6e:3f:8a:fd:8c:0e:81:96:83:b3:fe:9d:d4:
22:e3:11:9e:0e:5e:61:50:87:da:fa:bb:34:66:4a:
1a:9c:84:5f:a8:22:6d:81:88:11:07:e7:5e:74:18:
9e:a3:37:e4:5e:47:76:ad:b3:6d:98:b7:c6:36:38:
72:61:1a:a1:39:77:a6:ce:e9:1d:68:f1:7f:19:30:
65:b4:e5:4e:e0:17:c0:1e:5f:10:e8:57:9b:82:6b:
eb:14:9d:ed:82:8d:98:4c:bd:f5:c0:47:4a:ac:d2:
d0:f2:f3:c0:bb:2d:c5:8b:84:f8:d7:59:fa:d1:15:
c3:52:a5:3a:64:09:f0:61:32:4c:a0:f3:5e:ac:19:
10:01:b0:c4:a7:e0:1f:51:ad:f0:13:ad:1c:a9:3c:
8a:fe:53:23:e2:f8:1e:cf:33:9c:de:7c:a5:9e:a2:
3e:e6:85:b0:b5:f3:fe:2b:b0:02:59:8b:cf:f0:65:
6c:43:77:01:03:05:34:c7:68:0d:1d:ca:ae:46:b8:
be:31:ee:cb:d6:c7:75:60:cc:06:35:e0:67:78:09:
d6:f0:a8:e1:a1:1c:c5:38:7f:f4:01:c8:d9:a5:5d:
14:e2:9d:1e:f0:2a:57:65:4f:1b:f1:94:8b:da:6d:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:86:48:2C:02:10:3F:AA:91:6D:20:81:9F:BF:AB:8D:0A:49:D2
X509v3 Authority Key Identifier:
keyid:32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:51:ab:1d:e1:ad:af:b2:4e:1e:2f:2f:7e:67:13:99:c5:2f:
03:24:b4:43:34:e7:9a:5c:55:2f:c8:59:e8:95:fc:dd:51:eb:
54:8d:de:e0:2d:f4:4a:f9:cb:94:b4:59:8a:49:a7:8f:bf:2f:
0c:2d:68:8f:00:33:0e:74:8b:b5:cb:ee:c4:22:46:7d:cc:b0:
be:ea:4a:b2:93:1c:33:19:f2:3e:c7:43:71:c2:f3:a9:80:3b:
c3:e0:44:63:64:54:26:9c:6a:c5:0b:36:f6:9a:90:ba:d4:c2:
74:78:ce:8c:12:49:1d:2c:10:e2:b2:4c:e0:1c:6b:ab:2c:9a:
c6:ec:5b:9e:63:ff:5b:ef:ec:3d:2d:80:56:48:49:9b:52:ac:
8d:ef:8e:89:fa:61:5c:44:9c:0e:81:f1:e6:38:14:dc:9b:09:
46:f9:a4:ab:46:fc:89:1e:b6:3a:b9:16:e4:88:7a:91:0e:49:
25:bf:1b:4a:0c:20:d5:65:ea:bd:08:89:d6:ab:1f:ad:ad:f9:
4f:a2:55:d3:1a:81:34:a0:90:5d:f1:22:2f:c3:3e:1b:70:b0:
27:71:19:1b:f4:6e:29:3e:40:70:19:76:f2:5b:f3:d2:60:c8:
c6:59:46:fe:b5:c8:b1:83:85:83:7b:be:3d:5f:94:e6:dc:21:
09:10:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:12:17 2026 by rpki-client