
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
File: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft (raw, json)
Hash identifier: FaxRW9KLnrGqRbD0oWS1/J93ezmF6C09lEt10WWhxjg=
Subject key identifier: D0:B2:00:40:9D:85:4E:F2:48:1A:D0:1B:37:09:89:CF:69:C9:DD:81
Authority key identifier: 3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9
Certificate issuer: /CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9
Certificate serial: 36B2D7B4322FB02B2216FDC0849F55CE4EFCF3D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
Manifest number: 2C
Signing time: Wed 03 Jun 2026 01:31:35 +0000
Manifest this update: Wed 03 Jun 2026 01:26:35 +0000
Manifest next update: Thu 04 Jun 2026 02:14:35 +0000
Files and hashes: 1: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: yPTQbXIMPAX5YHFZg3gghjvfBRXpbrPMIjd6u88I2sQ=)
2: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl (hash: Uuwp9bp09GhlACybLQzSfaVJskoiKWXSNEb2aZF1w1c=)
3: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: c5m1jy/LAyjB0nA9ZGi7kHoU7bN15iBSminDikOhk08=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl
rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b2:d7:b4:32:2f:b0:2b:22:16:fd:c0:84:9f:55:ce:4e:fc:f3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9
Validity
Not Before: Jun 3 01:26:35 2026 GMT
Not After : Jun 4 02:14:35 2026 GMT
Subject: CN=D0B200409D854EF2481AD01B370989CF69C9DD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:68:75:de:e2:bb:6b:b7:fc:17:b6:f5:10:
a0:07:44:58:76:68:ac:1e:c4:86:64:17:17:46:b9:
a5:41:c0:f1:56:2f:b5:e5:f0:83:ed:ae:0c:e2:ab:
92:6d:cb:f7:a0:61:a8:bf:d8:21:31:40:5e:75:c2:
98:e1:85:11:c6:94:b9:7c:e2:c6:95:11:6a:14:e6:
6c:e5:e5:1d:2e:fa:63:23:3f:bc:4e:d2:a4:c5:b9:
0b:10:22:05:df:fe:5d:2d:fa:40:05:50:f0:34:b1:
a6:63:8f:1b:c6:89:29:44:a4:24:c3:36:63:2a:8e:
92:f6:43:e2:c2:41:c8:2e:4c:75:c2:13:f0:bb:90:
ab:86:9d:ca:59:3d:ce:af:60:0d:8d:10:91:c5:1f:
80:fc:31:b5:48:23:3a:98:8c:8c:2d:34:ce:f2:8a:
2a:c1:a7:b6:68:c3:77:66:8f:08:cf:ee:7f:67:89:
85:bd:aa:ff:c3:17:cb:21:54:0c:71:e7:65:56:59:
74:b6:ec:b2:f0:e4:a8:02:ea:2d:3a:2c:5b:c3:18:
49:1a:2a:e7:cd:4d:cc:97:d8:57:70:4a:d1:95:b3:
14:78:4a:52:84:27:7e:40:03:33:e1:2a:a2:29:2e:
c8:45:40:6f:46:95:6b:9b:3e:79:f4:3f:53:ee:e2:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B2:00:40:9D:85:4E:F2:48:1A:D0:1B:37:09:89:CF:69:C9:DD:81
X509v3 Authority Key Identifier:
keyid:3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:c6:9e:be:7f:0b:da:ad:53:a2:00:94:36:89:69:3c:8a:
0f:3e:44:3f:70:bb:8f:5a:ab:7a:12:90:4a:b5:15:9d:0a:f5:
8e:38:aa:ef:4f:01:9a:34:42:0f:43:11:64:a0:56:05:f1:6e:
44:48:af:ef:76:d9:96:32:c2:7f:4b:9f:0f:ac:af:36:63:7c:
e5:da:f0:0f:3b:af:0d:af:4f:39:64:d2:a0:3a:57:30:a0:66:
fc:83:3d:19:3a:99:4b:d5:01:ab:65:d5:98:0c:78:b8:37:5b:
c3:3c:89:e4:15:83:6d:29:e0:8c:d3:ef:22:c9:5a:e2:8e:9d:
92:20:f2:19:5b:dc:00:98:26:e4:83:fa:94:87:89:f8:24:a0:
28:fb:f1:98:2d:9a:3a:1e:1e:65:66:cb:ae:70:60:1d:ec:47:
ab:b7:b4:29:fa:47:8b:a6:e7:69:ec:35:2d:60:94:6f:04:e3:
f4:6b:d4:c0:51:63:9e:93:a5:46:82:9c:50:c8:63:5d:1f:70:
0a:78:a6:63:37:e2:87:42:47:59:7f:9f:b7:3b:7d:cb:86:28:
2c:53:9d:ca:9b:1c:ff:ae:d6:a1:67:49:7d:1d:71:f1:3b:34:
8c:e4:49:d4:95:6f:33:79:e4:35:91:12:cc:6c:35:8a:23:09:
f6:56:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:09:40 2026 by rpki-client