
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
File: 3B740E02ADF50A090229B5DFEE5D48777D442C83.mft (raw, json)
Hash identifier: N3Kj+xeu5rTOMqafmIzZzuQAlSoQGsFO2cne/9kUMzU=
Subject key identifier: FF:ED:EE:AB:C8:1C:67:E5:2C:36:ED:A5:E0:59:73:4E:E5:2B:E9:B1
Authority key identifier: 3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83
Certificate issuer: /CN=3B740E02ADF50A090229B5DFEE5D48777D442C83
Certificate serial: 391271AB1B9B2B75AD5005C94347A4A7EB325CA7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:43:00 +0000
Manifest this update: Tue 21 Jul 2026 01:38:00 +0000
Manifest next update: Wed 22 Jul 2026 05:06:00 +0000
Files and hashes: 1: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: A64nz+PX97FI4XaYpiwCqqmRUX6++gtRUre5i1lF2QA=)
2: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: t900xpPMJSc/gFkRKXE//s7FBpHQK9U7wVdaIlj2010=)
3: 3B740E02ADF50A090229B5DFEE5D48777D442C83.crl (hash: g7XnHREJZ+1SzHg+F64thgrbkj6cD+fPt7kotHR9GK4=)
4: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: i56VPm8geIM7DmKA6wVbD62/QX+ViWuBIOqGaxDkwxE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl
rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:12:71:ab:1b:9b:2b:75:ad:50:05:c9:43:47:a4:a7:eb:32:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B740E02ADF50A090229B5DFEE5D48777D442C83
Validity
Not Before: Jul 21 01:38:00 2026 GMT
Not After : Jul 22 05:06:00 2026 GMT
Subject: CN=FFEDEEABC81C67E52C36EDA5E059734EE52BE9B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:ca:af:df:d8:0b:56:fd:37:07:f4:23:fb:
cb:ac:98:b0:9f:a5:4b:a3:64:3c:ee:d4:59:23:89:
1e:49:25:09:04:8d:5e:70:8b:58:43:fe:d5:89:72:
cf:b9:92:f1:30:c1:a0:80:5f:40:76:12:8f:31:40:
94:ce:ed:d4:85:61:71:c0:f5:c7:8c:d5:93:1a:b0:
45:6e:bd:7b:e8:28:7e:af:b0:0f:2e:53:c2:48:96:
33:95:2c:c4:6c:9f:86:19:48:e6:a5:22:84:60:9d:
10:93:70:9f:47:ab:eb:4b:a0:ac:23:1e:6e:e0:68:
fb:4c:bd:b5:6e:40:d5:89:10:28:7d:62:c2:3c:40:
f0:f3:7e:39:55:20:7f:1b:93:af:6e:fb:38:67:f9:
60:1e:09:a2:57:cd:7e:52:87:18:72:7f:77:e2:2f:
11:76:64:a1:91:32:ac:60:31:4e:fb:80:17:47:4b:
5c:54:34:4f:19:3f:1d:05:40:26:28:12:4b:dc:10:
c0:9a:6e:cd:2a:e7:31:2a:41:f5:07:1a:31:15:a2:
ac:d5:be:73:ea:90:68:28:2a:d9:4a:d1:38:0e:e9:
3c:ae:2a:9e:52:7f:31:c4:2b:a0:16:9a:01:15:66:
53:5b:0c:fa:91:a9:7f:8c:85:b7:ff:f8:15:f8:29:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:EE:AB:C8:1C:67:E5:2C:36:ED:A5:E0:59:73:4E:E5:2B:E9:B1
X509v3 Authority Key Identifier:
keyid:3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:3d:7b:06:0c:3f:5a:18:cc:4f:91:4f:d4:59:c7:16:04:
a0:e2:d5:0e:1f:41:b3:11:b4:f6:c2:42:6c:2d:cc:61:f3:53:
ba:39:ed:7e:b6:ef:e1:84:bb:fd:b0:bc:33:9b:25:2a:b6:22:
4f:83:8c:a5:75:e4:85:69:2c:17:a8:9c:c5:39:3d:53:ac:b8:
ac:be:a8:56:eb:8d:b2:7e:56:b2:1a:26:1a:d6:3a:da:66:d4:
fb:09:da:49:c0:e7:ec:91:41:92:d9:ad:26:b7:dd:e0:00:77:
f8:aa:46:2f:f7:bf:cc:85:c9:7a:49:98:0b:10:f8:22:1c:e2:
5a:03:ec:6d:19:7e:e9:68:ec:7f:f8:a9:df:78:71:97:bb:cd:
57:14:63:c5:d6:09:b6:eb:0d:f1:88:8e:47:74:63:ca:26:45:
58:fb:46:9f:1c:8a:91:ac:1e:27:08:88:87:ad:00:98:79:07:
f6:72:2b:3f:34:bf:cc:b5:11:62:5f:db:e4:ff:b5:3f:51:69:
75:7c:70:f5:a9:97:de:be:2f:7f:d7:ee:c6:f8:77:9c:07:76:
bb:ea:61:e5:18:d8:54:74:bb:b7:22:0d:85:9c:b6:82:c2:30:
b0:bc:f0:74:b4:be:86:28:6a:16:5d:15:42:d6:ef:68:8d:cd:
d9:f0:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:45:27 2026 by rpki-client