
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
File: 3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json)
Hash identifier: 4rjas4h/tOBLvVOcK2HAPfjaPBc8wp1vjWoKjck4VKs=
Subject key identifier: 8D:63:85:98:73:DF:2C:4B:0D:A2:6C:E7:D1:74:56:51:A5:7E:9A:3E
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 519775735C59657E7DE8C62BB72D2EE587CF8750
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 00:46:49 +0000
Manifest this update: Tue 21 Jul 2026 00:41:49 +0000
Manifest next update: Wed 22 Jul 2026 03:56:49 +0000
Files and hashes: 1: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: TulJqxbw/Yq1iTVNLGWPHi//wdNGPKb6z84Sb3Gr8So=)
2: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=)
3: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=)
4: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:97:75:73:5c:59:65:7e:7d:e8:c6:2b:b7:2d:2e:e5:87:cf:87:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: Jul 21 00:41:49 2026 GMT
Not After : Jul 22 03:56:49 2026 GMT
Subject: CN=8D63859873DF2C4B0DA26CE7D1745651A57E9A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:98:af:4b:dd:33:b0:bb:d0:d1:cd:b4:00:
07:b9:d6:6d:08:14:6a:04:ba:e6:24:6e:73:f9:16:
11:ae:d0:0b:12:c4:68:0d:16:61:79:0a:83:58:3e:
f3:cd:02:0d:71:d5:d4:4d:3a:a1:d2:32:fc:1f:ac:
b4:98:fa:b9:c3:b5:45:00:97:bb:3a:a5:a7:60:53:
32:63:2a:95:2d:71:ef:77:22:26:9c:18:57:5a:75:
b4:66:1b:6e:63:f3:1e:a9:e5:4a:a5:71:eb:10:52:
d4:d4:9f:8f:78:6e:cc:83:b4:2e:79:34:94:73:b2:
2f:a1:d3:35:04:96:c9:6a:8f:bc:60:9a:fb:2a:45:
c1:b2:3b:c6:f4:62:81:70:47:ea:03:57:4a:d5:3a:
f7:5c:70:8b:5d:3d:c9:ec:d4:cc:b4:5b:1c:7e:56:
04:a6:1c:18:d7:62:28:68:dc:1a:1b:bf:18:2b:a6:
d1:09:a6:2e:a6:df:b0:1a:c0:9a:20:01:76:67:b5:
55:d3:d9:3d:ba:cd:ba:8f:be:a8:56:74:03:00:4b:
10:43:f2:75:65:7b:e7:70:a2:04:4d:05:8a:aa:6a:
3c:fb:60:d5:dc:02:45:d1:77:4a:8c:94:1d:51:26:
37:32:b7:5a:03:bb:91:e2:6e:23:1c:b9:9f:f4:12:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:85:98:73:DF:2C:4B:0D:A2:6C:E7:D1:74:56:51:A5:7E:9A:3E
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:47:fd:8a:73:14:b3:ca:45:df:d5:dd:09:55:87:72:b8:d1:
46:68:ef:dc:55:6c:36:85:3d:79:90:3a:c0:c1:0d:46:fe:29:
b3:6d:fa:38:a2:d9:2b:77:b3:d7:56:e8:e0:89:41:f7:13:a0:
16:53:76:22:35:fd:79:0b:0e:f2:f1:70:c5:56:db:28:7c:8a:
ab:c1:63:27:21:1a:63:23:f9:6f:3c:7e:a0:90:ec:21:c9:96:
fd:e7:5a:2f:3f:ba:1b:1c:cd:18:46:6a:30:96:9b:e9:92:f1:
71:3c:28:9e:9c:1b:41:88:2f:b0:1f:ae:08:6d:9a:0e:9a:c1:
c7:70:93:21:4d:59:fb:36:a7:8c:ea:fa:35:48:18:e1:98:db:
06:6d:7f:40:d0:8a:ca:c5:92:a8:07:12:f7:05:b2:0c:07:af:
b0:f6:46:35:6d:8d:52:46:70:a3:5a:ca:f2:4d:41:ae:00:0a:
7f:5e:aa:95:a3:e6:41:c1:7f:6b:83:40:dd:2b:98:6d:d6:8f:
fd:a4:69:92:eb:f2:28:5c:18:e5:d8:ee:fa:02:45:5f:3b:60:
bf:cd:e5:af:fc:ae:35:0b:ac:5f:23:ec:d7:a8:5f:57:43:aa:
35:92:b8:d8:fb:a0:9a:a3:8e:dc:94:56:75:71:21:68:24:82:
ee:cb:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:50 2026 by rpki-client