
$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json)
Hash identifier: +ypaBs5nv8ffyWzt7Gorum42SsvNpqmXX68gSUQta5U=
Subject key identifier: E4:78:ED:34:72:88:B0:42:77:32:A7:2D:5F:F8:82:84:CC:6C:AB:56
Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Certificate serial: 021B4D9CF95B7EFB1704CED33F199A1E2E92618D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 05:37:52 +0000
Manifest this update: Tue 21 Jul 2026 05:32:52 +0000
Manifest next update: Wed 22 Jul 2026 05:55:52 +0000
Files and hashes: 1: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=)
2: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=)
3: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=)
4: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=)
5: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=)
6: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: pM7kTl6V5QFJ/AXYr0kL+OCQKywCedANlRtKpK8dw8s=)
7: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1b:4d:9c:f9:5b:7e:fb:17:04:ce:d3:3f:19:9a:1e:2e:92:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Validity
Not Before: Jul 21 05:32:52 2026 GMT
Not After : Jul 22 05:55:52 2026 GMT
Subject: CN=E478ED347288B0427732A72D5FF88284CC6CAB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:a0:1f:64:95:fb:a0:74:23:5d:d5:96:4d:
93:ca:15:ec:d3:8e:b4:8f:6e:f1:34:b1:70:d5:6e:
ec:25:14:26:55:88:e7:ed:87:c5:aa:22:e1:eb:35:
98:57:8d:ff:0d:ba:fc:1f:d9:6c:63:25:bd:96:a7:
a5:e3:e6:40:e7:71:10:4f:8f:89:d6:01:0e:da:d9:
4c:ed:67:f0:d3:32:b9:0e:be:7a:cc:b3:82:8f:46:
8e:d8:be:dc:b5:9a:1f:2f:3f:e3:02:52:d9:25:aa:
a8:3e:d9:08:a1:a4:8e:9a:ac:2b:03:21:98:4f:95:
15:c0:95:9e:2d:68:35:26:cc:ec:3b:e2:01:2d:0c:
3c:9c:6f:60:99:26:31:6a:31:87:36:76:a5:fa:cf:
09:96:c4:61:28:fd:fe:30:9d:4f:77:69:a2:ad:d6:
e7:5f:58:d0:6f:ee:5a:55:24:06:ad:49:cd:07:5b:
8f:1f:26:13:4c:fb:ac:fa:f4:cc:14:cd:56:85:f9:
7e:74:1b:f4:3e:cc:46:c5:66:77:69:4b:cd:49:18:
83:b8:6e:f1:43:e3:55:54:d5:fd:0d:a7:9d:cd:87:
d3:15:ea:43:8e:e7:f2:21:ae:49:3f:9a:b1:0c:15:
51:31:33:1d:ab:2c:b5:89:e2:cf:72:1b:5d:ce:84:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:78:ED:34:72:88:B0:42:77:32:A7:2D:5F:F8:82:84:CC:6C:AB:56
X509v3 Authority Key Identifier:
keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:69:31:da:e3:d3:6b:65:15:e1:fb:23:a4:6d:cd:ec:a8:4c:
a5:db:a1:38:47:6e:66:5d:a2:96:34:a2:2b:5b:73:da:29:c8:
35:4b:78:ca:c4:21:b5:8e:67:5c:97:a5:69:eb:e4:41:91:27:
49:98:65:c4:d6:7b:af:fd:8b:b6:79:1b:32:bb:8b:18:37:27:
49:3b:cf:2c:64:d9:66:e7:f7:1c:80:95:9c:5c:1b:92:2c:27:
08:3c:85:39:69:cf:d9:79:dc:ab:d1:fc:08:29:fd:13:7e:6d:
ee:3f:24:12:7a:51:e2:f8:ad:e2:e5:b2:c2:90:8c:85:a2:9c:
63:03:ce:8a:d9:67:64:91:79:5c:cb:de:59:6b:4e:ff:63:0c:
d2:3f:52:79:76:8f:b9:e1:33:06:c3:56:f1:98:d0:90:ac:52:
d1:78:bf:dc:70:98:25:ff:02:84:81:d4:ae:0f:4e:c4:59:85:
db:fe:22:2b:18:ed:f4:80:5e:76:70:c8:aa:21:da:32:23:05:
d9:b2:fd:1e:da:2d:d1:fb:69:e6:c4:aa:0d:cb:22:7e:31:c5:
98:1d:c6:5f:56:be:61:82:3c:91:63:2e:4e:56:b7:68:bb:f7:
ab:8c:52:34:3d:e7:1a:0a:5a:cc:37:f0:5c:ed:42:8a:52:2e:
cf:ff:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:41:39 2026 by rpki-client