
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
File: B3243760262DFCFB318CB7BD106063FABC13BAA1.mft (raw, json)
Hash identifier: /27bJtmtqotK7w7C2Ieb1ssO5D6d0nEaPLvtsk4ws8w=
Subject key identifier: 51:54:9F:CC:EB:91:55:D1:B2:5F:6A:6E:16:A9:93:34:BA:48:CD:EC
Authority key identifier: B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
Certificate issuer: /CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Certificate serial: 319A457A1564326C9C50B85C07D69F4B4800EC78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 08:10:04 +0000
Manifest this update: Tue 02 Jun 2026 08:05:04 +0000
Manifest next update: Wed 03 Jun 2026 11:52:04 +0000
Files and hashes: 1: B3243760262DFCFB318CB7BD106063FABC13BAA1.crl (hash: gs0hciXm1mySFvn7esBWJvDiHotCxwo6kqTJ9icB+Ns=)
2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: YqWGfe897PjmJKmuh4iPhAooCf8xQK7zjY5edkVpneA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 11:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9a:45:7a:15:64:32:6c:9c:50:b8:5c:07:d6:9f:4b:48:00:ec:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Validity
Not Before: Jun 2 08:05:04 2026 GMT
Not After : Jun 3 11:52:04 2026 GMT
Subject: CN=51549FCCEB9155D1B25F6A6E16A99334BA48CDEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:31:3d:fa:ad:df:5b:4e:3d:de:8f:1d:ef:
2a:0b:19:03:48:61:9b:13:3e:23:0a:c9:85:78:5a:
67:bb:50:98:dd:9a:81:1a:ca:4e:c3:05:99:8e:97:
29:1b:dd:12:d1:59:62:10:10:09:6f:59:15:d9:b2:
04:11:a3:2d:88:8d:ab:6c:0e:24:9a:01:f1:a8:74:
8a:5d:c3:7a:67:c7:f0:85:2a:b3:ea:7c:33:e9:dc:
49:b8:d3:60:6f:08:a5:e3:a7:64:82:03:9d:2a:d0:
cf:13:13:60:ce:96:13:a5:f7:c1:11:8a:33:44:bd:
2b:f1:ad:d2:64:68:ef:0f:5c:94:5d:4e:97:4f:dc:
65:76:ec:c5:d3:4d:c0:1f:67:1e:48:83:f3:00:43:
00:25:51:c8:7f:2e:f6:29:d8:08:6e:e4:c6:48:95:
18:e0:fb:09:73:7c:f9:3d:c5:35:c9:13:b4:89:22:
5c:3b:24:5d:49:b1:d7:e7:7b:d1:d5:ac:81:b0:10:
c2:47:a3:b3:d8:b6:2a:d5:37:97:e7:1d:97:fe:57:
12:28:af:c7:10:a3:17:cd:7b:81:e9:63:01:8d:99:
17:97:5f:c0:ad:4d:42:9c:6d:ad:e0:fa:b1:85:48:
d3:79:4a:1e:4c:10:94:bb:2f:c4:59:51:ce:f1:60:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:9F:CC:EB:91:55:D1:B2:5F:6A:6E:16:A9:93:34:BA:48:CD:EC
X509v3 Authority Key Identifier:
keyid:B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fd:e8:7f:13:c3:3c:dd:c4:64:e3:c7:b0:24:8a:af:2f:fc:
2d:a0:cf:b0:bd:04:c1:57:20:ee:f4:82:25:f9:95:65:49:5b:
8e:45:3c:a8:1a:5a:d6:44:d7:bb:0b:cb:5e:23:23:ca:7c:43:
ab:aa:d4:07:b6:78:6e:47:41:8b:73:10:5d:58:34:a7:84:31:
f9:9f:18:ef:e0:22:d6:06:cb:22:65:58:82:2d:61:a0:da:4c:
89:7b:2e:b9:7c:71:c3:06:2b:7f:b7:92:2c:a9:bb:f6:8e:7c:
00:aa:e9:22:99:6d:29:d1:d7:8f:04:46:e6:5c:65:52:65:f2:
fb:f5:67:5e:d6:7b:c1:14:a2:bc:17:94:4b:c6:01:3f:c0:22:
bf:88:2b:a3:ec:10:d2:50:9e:0b:62:82:21:f0:33:18:88:fe:
dd:ba:f9:47:98:32:57:b7:47:62:2c:d3:58:8e:45:19:11:ee:
cd:55:8d:09:0f:9c:69:9e:7d:ba:f6:1d:90:49:c9:2c:fb:18:
ca:64:7c:26:49:0c:7f:0d:be:d5:7a:48:b4:1c:2e:57:62:86:
e6:12:86:28:0c:4b:65:3f:8b:ef:d5:ba:b6:fa:34:3b:70:b1:
77:31:82:d1:d5:c0:81:67:53:57:ff:03:66:96:cf:fd:de:df:
ea:e7:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:20:29 2026 by rpki-client