
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json)
Hash identifier: waCbRrfkdaqU9ZADFXuObjaTZ0qm4xpQkMdSD6iG8t8=
Subject key identifier: 55:93:68:75:FA:ED:AA:7B:4D:F8:12:7D:FA:1A:2E:A7:19:67:1D:31
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial: 2C839E90796273A2C4A13AE212FF93A4251096D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
Manifest number: E2
Signing time: Mon 20 Apr 2026 07:51:46 +0000
Manifest this update: Mon 20 Apr 2026 07:46:46 +0000
Manifest next update: Thu 23 Apr 2026 14:32:46 +0000
Files and hashes: 1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: qQ3FexC84VzgFC7YMc/krun2DqEpjqWDduKHQMCaZt8=)
2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 3hoDD7ig6gcP/Yzm1bfTsMAVOt7p/pOGosEJ4Wxm3M0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:83:9e:90:79:62:73:a2:c4:a1:3a:e2:12:ff:93:a4:25:10:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
Validity
Not Before: Apr 20 07:46:46 2026 GMT
Not After : Apr 23 14:32:46 2026 GMT
Subject: CN=55936875FAEDAA7B4DF8127DFA1A2EA719671D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:b6:53:d5:93:67:33:0b:ce:c8:dd:34:a5:
33:b9:47:61:f1:bf:e5:b3:63:ab:cf:5f:d6:a5:b1:
69:81:ac:1f:94:3f:e6:eb:dd:3c:f1:9e:73:2d:cd:
d2:47:68:88:aa:8c:f3:25:54:36:93:dc:55:ac:0a:
7c:e3:a6:04:dd:8d:ad:f6:da:ff:4f:0a:4b:58:02:
37:bd:30:c5:d2:5f:9a:ee:0b:0b:90:f3:a5:0d:76:
9e:19:d7:c7:f8:7c:9a:9a:49:3e:98:c9:3f:ba:d3:
f9:6e:8a:76:dd:ac:9f:86:52:72:42:e7:22:53:fd:
ad:30:5d:d3:08:a9:d7:bc:f1:37:0f:e0:79:33:f2:
0a:7b:a3:57:de:6a:11:58:08:9b:cf:ee:27:ca:f1:
85:35:9e:ec:10:97:32:a7:e8:41:37:81:ec:57:a0:
33:72:67:05:df:e2:87:8d:17:49:d2:42:df:ec:97:
89:8a:b8:60:ef:2f:e4:ec:b6:f1:ea:93:a6:13:89:
16:d1:ed:cb:76:1c:8a:3b:3d:75:94:59:1c:ac:73:
7b:dc:ed:68:fc:97:4d:ba:87:e5:09:5c:76:95:d4:
22:f5:b2:31:59:4a:a1:3e:15:7e:c4:21:38:9d:76:
ff:35:c5:45:bd:0e:d1:8a:ae:3d:c4:d4:fe:40:f0:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:68:75:FA:ED:AA:7B:4D:F8:12:7D:FA:1A:2E:A7:19:67:1D:31
X509v3 Authority Key Identifier:
keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b4:b3:f8:b1:16:0a:1f:c9:c9:d2:38:3a:5d:c9:9f:f4:35:
67:a4:23:e5:79:17:83:87:02:b6:c7:85:a7:10:96:b9:b5:53:
fd:b6:7d:c8:03:2a:e2:2d:53:8a:af:12:c0:26:87:ab:20:0a:
f8:c4:33:ae:f9:26:d0:14:6d:55:83:8f:dd:76:9a:ab:ae:26:
f4:6d:3f:5d:30:03:66:1f:35:2a:b8:9f:27:53:f0:1f:11:f7:
81:59:a1:39:d0:19:e5:7b:ca:3c:5e:db:08:47:2a:b0:9b:96:
28:4b:24:d0:5b:3a:67:88:42:27:86:81:a0:fb:54:d3:3f:82:
32:94:4c:35:b7:94:82:08:83:a9:0f:02:ae:d1:f4:52:92:37:
2a:2f:9f:fa:7f:65:2c:8f:7c:49:b3:d7:f2:06:58:63:54:01:
b5:26:da:89:15:21:84:7b:61:5d:1e:9a:73:91:d6:e9:53:9f:
00:80:3b:91:62:f3:d2:b8:70:d9:ba:9f:19:dc:27:53:0f:bc:
f0:bb:dc:0b:9d:1a:6e:0d:d2:d2:73:3e:2d:48:70:bd:c6:e8:
13:2f:31:9e:86:07:2b:e7:30:4d:56:89:7a:b9:f3:87:6a:a3:
7d:5d:44:17:90:19:93:ea:0c:d6:b1:85:e4:4d:72:9e:fd:71:
07:89:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:54:17 2026 by rpki-client