
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft
File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json)
Hash identifier: GweEptZ5JkcVEQc6Ot6hN905lfhuWGQ92ggJCM9brkY=
Subject key identifier: 6E:4B:96:19:3A:4E:84:7A:CC:47:93:11:D7:72:DC:42:BB:37:85:4A
Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA
Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA
Certificate serial: 7F7A5FF34A87B7BE465FC7FD38FCCFA234AA3706
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 17:28:04 +0000
Manifest this update: Mon 20 Jul 2026 17:23:04 +0000
Manifest next update: Tue 21 Jul 2026 20:10:04 +0000
Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=)
2: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: 2uKLl/4mR8GaWsJdy9uT4AxCgCYFy/ibQfexgKMrNNA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl
rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7a:5f:f3:4a:87:b7:be:46:5f:c7:fd:38:fc:cf:a2:34:aa:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA
Validity
Not Before: Jul 20 17:23:04 2026 GMT
Not After : Jul 21 20:10:04 2026 GMT
Subject: CN=6E4B96193A4E847ACC479311D772DC42BB37854A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:18:da:0c:94:14:7e:45:9f:7c:a6:71:22:
81:27:59:5e:94:83:b6:1e:b5:5e:cb:eb:cd:8a:f6:
ce:07:f7:5b:0e:9c:20:90:a7:51:76:2b:79:f2:80:
e6:dc:4e:38:3c:bf:8f:29:61:59:1c:3d:ff:7e:84:
c9:d0:2f:8d:03:89:8c:34:9e:32:98:64:89:f2:66:
0c:c4:0f:73:07:5f:85:47:66:40:e5:f6:b2:5c:e1:
21:49:b3:b5:75:d7:4c:58:09:e1:98:a6:38:72:ce:
d7:bd:b1:b9:66:ec:8e:53:af:fc:86:7a:f7:b1:6c:
e1:6e:9b:00:39:2c:32:ae:3f:9f:93:61:d5:f4:c0:
95:1a:f6:1f:38:49:76:e1:d8:ff:1a:28:fb:c0:65:
8c:53:32:d6:5e:e9:cf:e7:92:47:97:87:48:6a:dc:
43:cd:34:a2:51:bd:14:60:62:32:86:9c:3b:ea:2d:
71:77:05:ff:28:19:7b:c6:f6:02:21:87:51:f4:c9:
a2:b6:45:10:db:36:af:02:fe:b4:ce:e4:53:c1:b0:
d6:1a:4d:0d:2a:20:61:c1:93:04:ef:75:4d:d9:7a:
bc:72:db:ca:39:78:a9:15:e9:f5:32:55:3f:c3:81:
1e:77:51:e0:b8:11:58:39:98:31:82:b9:fc:4d:4a:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:96:19:3A:4E:84:7A:CC:47:93:11:D7:72:DC:42:BB:37:85:4A
X509v3 Authority Key Identifier:
keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:3e:8a:72:e0:38:c6:61:58:f8:50:8e:8b:6e:ff:a0:3e:
77:9f:cb:46:51:68:3a:c1:26:c7:38:d1:a6:d1:76:e5:3c:40:
77:be:b6:cc:08:80:ab:5f:ce:c3:f6:06:9b:c4:53:08:a6:3c:
bd:44:25:1a:7e:aa:74:e3:46:e9:64:52:44:39:d5:c8:af:63:
05:e0:0b:ba:58:2f:be:b6:02:6a:89:e6:cd:8c:9b:91:4d:95:
38:d3:84:eb:16:d8:42:19:37:03:95:3c:5d:06:59:1c:04:c1:
11:45:ee:6d:8e:be:f8:3d:09:e2:f7:52:de:63:75:6a:2e:e2:
41:e1:e1:d6:41:ca:9f:79:d5:26:41:61:d7:e8:95:cb:e7:a4:
ed:32:ff:d7:d5:7c:2b:a0:54:f1:68:a2:be:d8:63:0a:d9:a6:
41:37:1a:a0:9e:7b:09:f5:34:6a:97:99:4d:77:70:98:a3:13:
e4:7b:cb:54:6f:6e:48:05:7c:75:f4:3f:75:84:c8:ad:09:3c:
13:70:fc:2e:ee:1d:38:9e:4c:8d:d6:61:aa:35:4e:70:a0:d3:
50:ee:d1:c9:c6:8c:f0:d0:b4:33:84:a8:83:49:a3:fc:36:98:
b8:af:d6:2a:fc:0e:aa:1d:f0:38:0e:91:d3:dd:37:69:22:ce:
4d:44:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:54:31 2026 by rpki-client