
$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json)
Hash identifier: DLgLlPAjR7HJUHn2bsqXbIgULoQIaQjr6bEwKuXTXhE=
Subject key identifier: 5E:3E:07:3C:BE:60:6A:64:C3:BA:1B:CE:1C:6E:70:CA:12:3E:93:58
Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04
Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704
Certificate serial: 03A0B5096473B59C8DF30B7E5448E99A07E738EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
Manifest number: 0430
Signing time: Fri 06 Mar 2026 03:20:46 +0000
Manifest this update: Fri 06 Mar 2026 03:15:46 +0000
Manifest next update: Mon 09 Mar 2026 08:35:46 +0000
Files and hashes: 1: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: NfkfGFQir1qqcTGAL4kcF4mlR7la1j2epgiDbTKw/m4=)
2: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 9IhGsQ54tY2/cR1q0Xs6zMzTt5FF9c1oVfoMV5wVdC8=)
3: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=)
4: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl
rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a0:b5:09:64:73:b5:9c:8d:f3:0b:7e:54:48:e9:9a:07:e7:38:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704
Validity
Not Before: Mar 6 03:15:46 2026 GMT
Not After : Mar 9 08:35:46 2026 GMT
Subject: CN=5E3E073CBE606A64C3BA1BCE1C6E70CA123E9358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:60:bf:5d:bd:be:6e:51:e5:5a:58:26:71:
2a:e6:88:66:3e:fe:ae:d0:6f:8f:6a:b7:f0:5e:8d:
b9:4f:8c:8e:6c:7b:fb:fb:dd:7b:7b:24:17:5d:ee:
42:29:cf:30:7f:43:32:81:bd:c4:5a:c1:8a:ab:c4:
53:67:e7:79:e9:0f:4b:6a:25:6a:ed:bf:46:6f:2f:
60:cb:05:c9:58:c2:1c:2c:81:71:5a:1f:09:51:b3:
5f:c0:34:e9:43:0c:ad:85:0e:57:44:6d:05:f5:74:
93:4f:99:e7:be:e7:9a:b4:26:55:60:be:9e:32:a3:
07:bf:47:b5:47:55:b9:5d:22:41:d4:32:de:97:1b:
31:88:62:9f:63:09:f2:d7:19:7c:47:b7:14:af:c0:
07:d3:ee:b5:af:35:4f:a3:4c:f2:91:9f:67:d9:88:
96:02:a0:7b:99:c1:8b:4c:97:99:10:96:f0:c9:b9:
63:2e:30:4c:6b:1f:04:6a:ff:f5:2e:68:16:ec:ec:
1a:5a:cf:fe:27:52:87:95:7e:8e:d7:29:0d:22:7d:
80:ee:6d:62:76:32:7f:5d:e0:31:c0:33:f4:78:58:
f4:c5:4c:de:f7:b1:20:df:3c:03:b5:16:54:5f:37:
5a:90:9d:b5:b3:c2:ec:a1:9e:96:d1:ac:f7:18:c0:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:07:3C:BE:60:6A:64:C3:BA:1B:CE:1C:6E:70:CA:12:3E:93:58
X509v3 Authority Key Identifier:
keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dc:9f:91:78:5f:e4:82:e8:25:9f:88:95:df:1e:80:5b:95:
eb:d9:b8:56:cc:5c:b4:a1:6b:8a:d6:6c:22:3f:a9:36:75:b4:
e7:b6:e8:3b:f7:1c:b4:d6:95:1a:58:42:4e:38:ba:25:a0:80:
9d:eb:e6:49:c0:c0:02:a1:e6:02:9a:15:9d:ca:9f:1e:c8:66:
fc:6d:59:d3:4d:68:c0:a6:39:1d:09:9e:f3:df:e6:25:39:b3:
e9:fe:4d:d6:f2:e4:ff:7e:32:a0:7b:32:24:e1:9b:93:12:34:
e0:ff:ce:14:cb:4e:3b:f7:90:79:84:54:0d:b3:0d:0f:de:88:
99:2c:11:8f:01:18:5d:1e:69:11:a3:af:42:c2:e4:b3:15:ef:
fe:70:6d:94:c5:4d:0b:a5:c7:5e:11:6f:08:91:ac:01:fb:de:
9f:5b:3d:76:d0:22:30:e0:53:27:c1:3d:e0:37:87:60:b5:dd:
0d:a8:04:d2:87:b9:d9:c9:51:0f:33:4c:a6:4e:33:50:60:39:
e3:5d:ee:c7:c9:f5:bc:35:6f:b3:9c:3e:61:21:02:2b:0b:c7:
18:0e:4e:93:a7:73:83:79:28:f5:7e:c1:02:4b:5a:0e:1a:87:
0a:6d:05:4e:e6:22:9b:02:40:f6:e5:d2:35:14:4f:86:c7:14:
51:4c:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:38:46 2026 by rpki-client