
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
File: 3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json)
Hash identifier: 7I4ZzWiEYDlOlZPvyfGnAt9Na4udrjEK2yCGmBqLi8s=
Subject key identifier: 96:FB:5E:E7:50:51:3F:80:35:18:C6:FB:AD:23:6B:B3:46:3A:9E:64
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 1F9AD0D63B89FCE6D5E57942B25028099138F58A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 13:57:08 +0000
Manifest this update: Tue 02 Jun 2026 13:52:08 +0000
Manifest next update: Wed 03 Jun 2026 16:45:08 +0000
Files and hashes: 1: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=)
2: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=)
3: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=)
4: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: VjU0+ZevOCSNbkUyTvqLrM8fKMlt9rgbUdUGmxYFiHk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 16:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9a:d0:d6:3b:89:fc:e6:d5:e5:79:42:b2:50:28:09:91:38:f5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: Jun 2 13:52:08 2026 GMT
Not After : Jun 3 16:45:08 2026 GMT
Subject: CN=96FB5EE750513F803518C6FBAD236BB3463A9E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:28:ed:0b:19:ad:3d:ed:7c:af:3a:f2:79:f6:
f3:1e:d1:d7:29:5c:d6:6e:9c:81:bf:46:05:c8:5c:
fe:ff:16:f5:e4:f0:a0:64:98:50:ac:0a:49:43:53:
94:a6:1c:a7:d1:eb:5e:25:71:d2:0d:ac:71:d2:c0:
de:d0:64:64:d9:c6:5f:71:c5:98:7b:64:5f:9d:50:
64:f0:da:b5:91:22:97:21:62:d1:53:79:66:97:25:
4c:30:98:00:f3:b5:4a:e0:48:46:4f:d2:78:2b:38:
e2:0b:94:f8:80:8c:b9:39:4b:2c:39:fa:3e:60:8f:
c2:1e:81:cf:dd:c1:d2:00:03:97:a7:53:fb:f3:30:
bf:cb:39:df:4d:59:66:cf:7f:a6:24:c4:a9:ca:6b:
65:26:61:9b:d4:5e:67:60:bb:ac:76:fe:45:e8:44:
6c:87:84:69:eb:2e:b3:81:64:63:b5:ff:1b:ef:73:
ba:39:91:d2:9f:38:2a:ca:5c:26:70:09:fa:91:e7:
70:3d:be:b3:7d:6c:9d:46:60:2a:62:39:1a:16:d1:
b0:a3:ce:30:d1:39:05:fe:00:f9:7c:de:ea:0e:7f:
7a:21:66:09:ed:2c:61:0c:85:db:fa:bf:2c:85:8b:
9f:21:a7:5e:d4:ff:dc:13:6f:82:06:b6:0c:a0:84:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:5E:E7:50:51:3F:80:35:18:C6:FB:AD:23:6B:B3:46:3A:9E:64
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:13:6f:ab:ea:ee:51:a1:e1:6c:69:20:09:b7:29:9c:da:d9:
fc:88:10:4d:e0:f8:2b:cf:c7:c9:f9:21:52:26:7c:0d:98:a8:
50:8a:22:73:36:d2:9b:39:fe:76:4a:bc:69:ba:49:61:f5:5c:
38:74:18:69:93:79:46:0c:99:ce:a4:89:db:65:b5:a0:0e:91:
c3:db:a7:c4:88:2c:5a:44:ac:90:88:a8:2d:15:ef:3f:23:ea:
04:a8:13:78:f1:60:39:e1:2f:51:3f:b4:55:02:de:ea:2c:aa:
d5:46:19:79:0d:10:70:7d:ec:3a:54:15:d0:8a:37:62:b3:8c:
98:a4:2a:ad:08:11:8f:bd:49:71:be:9e:8c:99:45:5c:aa:7f:
93:be:6e:5d:d7:f7:82:3f:0b:78:21:8d:19:46:c0:0c:a5:5c:
0b:2f:79:e2:c2:c0:4d:c0:81:bf:68:95:97:17:85:3c:95:ea:
41:c3:1d:3e:4f:a8:0b:a9:a8:10:25:da:7d:40:dd:e8:f0:a9:
17:ec:37:47:7f:d5:b2:e8:2e:da:ac:1e:a9:57:04:15:3f:c6:
3a:ec:46:1a:2a:41:14:79:76:6f:2e:a8:33:39:23:eb:9f:ea:
5b:17:0d:49:e3:e4:53:51:b7:d9:11:25:59:87:c2:6f:f4:89:
71:aa:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:12:26 2026 by rpki-client