
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
File: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft (raw, json)
Hash identifier: CJQOhkUuZ2Pp2FvuKP1CVZkJ+29XTWpRrwMJaoWo/pY=
Subject key identifier: 32:A3:7B:15:D3:1C:91:FE:79:25:0C:54:83:C8:A5:FD:83:2B:68:D9
Authority key identifier: 3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9
Certificate issuer: /CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9
Certificate serial: 6B0BEAE3205D47516622CA3CBC299717636B9A4E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 21:58:17 +0000
Manifest this update: Mon 20 Jul 2026 21:53:17 +0000
Manifest next update: Tue 21 Jul 2026 23:19:17 +0000
Files and hashes: 1: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: c5m1jy/LAyjB0nA9ZGi7kHoU7bN15iBSminDikOhk08=)
2: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl (hash: MQDkc38VvzBDi+4am3QEdGuscRxJpE8P9oHfrypn4JE=)
3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: yPTQbXIMPAX5YHFZg3gghjvfBRXpbrPMIjd6u88I2sQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl
rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0b:ea:e3:20:5d:47:51:66:22:ca:3c:bc:29:97:17:63:6b:9a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9
Validity
Not Before: Jul 20 21:53:17 2026 GMT
Not After : Jul 21 23:19:17 2026 GMT
Subject: CN=32A37B15D31C91FE79250C5483C8A5FD832B68D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:25:03:7d:e9:1f:75:68:0d:9d:57:8a:3f:
a0:42:1c:2c:20:4e:8b:b8:97:12:ea:42:8e:01:4d:
1c:1f:cf:81:40:a7:0d:a0:f7:a1:e9:2c:82:6b:37:
8e:b3:55:a0:42:a7:64:63:76:77:98:16:c2:f6:b7:
d9:05:1a:cc:9a:d8:31:a9:e8:17:98:0e:b5:a2:34:
be:8d:0d:f3:e6:03:78:99:4c:41:a3:9d:4f:8e:ce:
63:cf:eb:e3:ff:72:dc:05:96:8f:35:a8:04:fe:c8:
8b:a7:4a:1d:ee:d6:dc:d8:a8:d2:6a:48:68:7f:6d:
d2:29:85:65:b7:03:2e:77:2d:95:a8:7b:fa:23:61:
62:52:83:4b:35:e0:4f:c3:99:51:9e:70:80:bc:a2:
bf:4e:22:b4:04:64:48:7a:89:30:d6:b6:b0:74:23:
8e:13:49:28:0d:fe:66:5a:f4:ad:b2:45:54:64:53:
3c:d2:a5:f7:4a:d3:3c:b4:2f:4c:60:b4:5f:b9:8a:
c7:f2:70:32:4a:84:5a:46:bd:66:41:fe:50:d7:88:
13:89:d8:2f:27:d1:a3:41:ba:93:53:aa:c8:97:34:
77:99:5b:c5:23:da:22:aa:72:2e:2b:1d:2f:e5:af:
ec:18:23:ec:7d:bb:61:19:61:b3:d7:82:2e:07:51:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:7B:15:D3:1C:91:FE:79:25:0C:54:83:C8:A5:FD:83:2B:68:D9
X509v3 Authority Key Identifier:
keyid:3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:0b:65:cc:6b:9f:32:9d:fe:c6:64:56:67:1e:cb:ae:df:
2c:53:bd:7c:9a:7a:3e:e8:20:f9:bf:45:26:ed:b4:44:9e:36:
10:a4:a3:68:dd:3f:78:42:96:00:68:a6:06:06:f3:18:2c:cd:
28:54:97:2c:96:17:c6:57:1c:9d:58:f8:69:05:b2:76:77:43:
19:d0:d1:28:e6:0d:b1:e5:18:57:6e:21:07:3c:e9:56:e8:95:
9e:0a:d7:ff:85:38:3f:ff:e8:e2:98:02:a9:68:ca:a2:92:52:
5e:4c:df:e5:26:63:bd:fb:0b:d6:4c:83:db:b3:c0:62:e2:90:
00:8b:5d:37:e2:e5:b0:ea:1a:46:89:ee:d5:e1:6a:fa:43:4b:
36:74:b7:8d:43:7f:bb:aa:aa:b2:6e:c0:cb:48:6b:fe:41:47:
78:ab:97:12:4f:47:78:98:95:e5:f7:65:47:7e:2e:5f:b0:0a:
cc:e7:17:6a:56:3b:cb:05:43:9e:80:f8:2b:a6:bd:8c:37:92:
0f:33:76:03:61:ec:21:01:66:b4:d3:34:bc:24:6f:48:be:d0:
f8:a6:31:50:ec:a8:69:8f:ad:95:a8:02:bf:42:dc:22:61:2f:
7c:88:1d:e4:b7:cd:f9:04:c5:0f:74:48:02:f3:64:80:4f:70:
64:16:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:01:48 2026 by rpki-client