
$ rpki-client -vvf rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft
File: 3EBE2E74F0EE59A6395F325E6928084B763824A1.mft (raw, json)
Hash identifier: h3zTJo6pgLdeDi2nct22fcaT40l0kwg51eOOZommm9s=
Subject key identifier: 58:1F:BD:FA:1F:C9:E5:12:20:32:E4:06:25:B1:80:FE:14:7A:6F:17
Authority key identifier: 3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1
Certificate issuer: /CN=3EBE2E74F0EE59A6395F325E6928084B763824A1
Certificate serial: 080DFDC2A235E61DF78EBD08205CBF44642317B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 00:51:54 +0000
Manifest this update: Tue 21 Jul 2026 00:46:54 +0000
Manifest next update: Wed 22 Jul 2026 02:38:54 +0000
Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: Vv6wC/28GD4ZoyK7hWQWrNGkv38OB4xq7yXYGqatH3E=)
2: 3EBE2E74F0EE59A6395F325E6928084B763824A1.crl (hash: p9T4/unuZFwo1kZLygHNva5CVkSrpdC1jepVkddk4II=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl
rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0d:fd:c2:a2:35:e6:1d:f7:8e:bd:08:20:5c:bf:44:64:23:17:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EBE2E74F0EE59A6395F325E6928084B763824A1
Validity
Not Before: Jul 21 00:46:54 2026 GMT
Not After : Jul 22 02:38:54 2026 GMT
Subject: CN=581FBDFA1FC9E5122032E40625B180FE147A6F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:a5:e1:0f:0a:6e:74:00:d8:5d:06:a2:1e:
1d:3d:cb:66:ec:b8:90:ef:4a:d6:11:14:ec:b5:9e:
4d:c6:06:94:e2:15:31:f2:b6:72:35:60:66:5b:c7:
18:a2:32:e0:e8:4d:88:be:74:f4:83:91:99:2d:93:
7c:3b:17:30:0b:dd:79:1d:d3:a4:d6:b3:3f:a6:ae:
02:0d:a6:9f:3c:d1:2a:49:f4:eb:63:5f:e5:cd:bb:
0d:f6:72:10:f2:2f:1c:62:fc:e3:a7:67:7a:ea:6e:
71:c2:b3:a2:0c:e2:10:25:76:c0:5b:43:04:b8:56:
55:d8:0c:f1:98:2f:ea:06:35:91:d1:5f:35:4c:21:
92:13:0a:41:64:5d:c8:d1:2f:31:66:36:84:71:0a:
8d:5f:0e:62:7b:fc:b6:a7:c6:ce:89:0d:80:a2:24:
b4:50:8e:1f:0c:c8:c9:47:2b:b8:ef:57:19:28:8c:
52:66:cb:32:7f:23:4f:71:58:e8:7b:c4:af:63:5c:
0b:d0:f1:98:57:47:ae:76:91:92:8f:ab:0e:f9:a9:
68:22:1d:61:a6:63:96:82:18:4a:36:1b:da:22:91:
9d:ce:6b:63:50:84:88:0d:03:fd:0e:8b:93:8d:4e:
d2:49:48:ae:58:f8:89:f6:79:53:07:47:15:d3:70:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:BD:FA:1F:C9:E5:12:20:32:E4:06:25:B1:80:FE:14:7A:6F:17
X509v3 Authority Key Identifier:
keyid:3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:00:3c:8c:76:2c:6d:bb:8a:ad:d0:b3:dd:a0:84:cb:3c:78:
3d:9d:ad:9b:83:c8:69:43:34:9f:d4:cb:7e:18:88:9d:a8:77:
9f:ff:c0:2c:2b:ab:12:9a:e1:26:d1:55:67:1f:cf:d8:36:9d:
f9:ef:91:63:c9:95:16:28:aa:03:97:49:0b:86:a9:11:7a:d1:
cf:74:7e:a2:6f:a1:bb:1a:bd:7d:c7:d5:27:0e:70:c4:6c:7d:
fd:92:89:64:ad:de:ea:e9:cf:a4:fa:89:b8:4b:92:41:e7:9b:
99:8d:21:ae:37:e8:98:fc:c2:7a:1e:3c:a3:2b:1e:b2:39:d4:
55:e0:96:87:93:4f:1b:dc:8a:a1:55:cc:da:9f:dd:5f:7d:ca:
fd:7c:ad:31:90:b2:34:55:2b:83:54:24:a3:79:ca:a6:ec:87:
09:6f:bb:ef:de:bd:ac:10:16:fa:e8:3e:84:5b:77:2f:7c:04:
1c:ae:18:3c:a0:64:a1:35:67:cb:64:94:86:77:32:4c:2c:5d:
49:54:89:97:4a:3f:5e:a8:53:c1:fd:01:88:62:05:9e:b3:b1:
e5:c0:4e:d2:a4:2d:b9:28:b4:c8:15:75:76:fe:94:b9:06:fd:
7a:42:57:ea:2e:9a:c6:15:c8:46:ac:5b:82:31:0c:98:02:10:
18:c6:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:16 2026 by rpki-client