
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft
File: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft (raw, json)
Hash identifier: KtZh9Lgh0XmlYg0bSvG2Jhjsb6NX6XYD8qWJil+I/mI=
Subject key identifier: 13:2F:9C:7A:A1:06:E6:A4:35:2B:42:0F:25:B0:24:5D:14:52:F0:09
Authority key identifier: 3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8
Certificate issuer: /CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8
Certificate serial: 66D459D3466A0A117DC380EEE537F3B0218A2D5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 08:48:20 +0000
Manifest this update: Sun 02 Aug 2026 08:43:20 +0000
Manifest next update: Mon 03 Aug 2026 12:15:20 +0000
Files and hashes: 1: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl (hash: TVf5COpsMZZKWPViwsUwaxAO5vt2ThK8SO734UL1lOs=)
2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: ErPUUUg1dRZKVbJQVmVoH6jrv862m0Pddw1XMyfUrjA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl
rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d4:59:d3:46:6a:0a:11:7d:c3:80:ee:e5:37:f3:b0:21:8a:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8
Validity
Not Before: Aug 2 08:43:20 2026 GMT
Not After : Aug 3 12:15:20 2026 GMT
Subject: CN=132F9C7AA106E6A4352B420F25B0245D1452F009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:42:51:7c:c1:5b:ad:39:20:f7:fd:58:dc:
d6:b3:6f:f2:89:cf:c1:b4:2b:12:ce:1c:ce:aa:02:
ed:72:71:a5:19:1b:07:53:56:05:98:59:d2:00:40:
65:6b:eb:cc:64:14:4a:c8:3c:c9:0b:99:b1:a6:09:
71:e0:c7:93:b6:8d:fb:27:7e:46:87:e3:29:08:84:
ce:c1:5b:4f:8a:2e:ef:b0:83:23:ee:32:de:42:b4:
15:32:bf:c2:23:69:e7:3d:31:9b:98:a6:01:ca:ec:
8e:5c:c3:86:d8:02:0d:c3:ca:d4:5c:15:27:df:84:
8d:99:f0:0f:71:09:50:f9:fb:ef:d6:dc:56:7a:db:
44:f5:01:7f:ba:e1:33:7d:55:81:e1:33:01:50:0a:
b5:65:2d:23:ab:82:f8:e5:c1:1e:41:bf:24:95:ce:
d0:e9:80:68:5c:71:17:d0:6a:16:83:88:7f:0d:bc:
80:a0:9f:06:e2:ee:dc:53:99:b0:9c:67:94:b1:95:
35:0d:ee:3b:b1:52:73:f7:51:55:f9:83:9b:a3:bc:
6d:45:b9:f7:42:58:29:f6:8d:4c:bb:e3:79:84:23:
ec:c9:81:d0:88:89:cd:ab:65:60:05:74:af:58:b2:
a1:08:08:c1:82:f6:41:3b:a2:12:f2:e2:0d:9a:4f:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:9C:7A:A1:06:E6:A4:35:2B:42:0F:25:B0:24:5D:14:52:F0:09
X509v3 Authority Key Identifier:
keyid:3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:30:8b:28:b8:62:b9:ea:da:eb:e9:eb:42:12:64:20:cb:22:
c1:50:e9:91:ae:a4:80:56:6f:38:58:eb:d6:c9:1f:c0:73:3f:
88:41:e3:98:11:13:3c:b3:0a:0a:1b:af:b0:32:e8:86:a8:5c:
fe:d5:66:40:da:b9:2a:56:85:a2:76:f7:ca:c4:7d:16:12:df:
10:4a:f7:f3:d5:7a:39:06:d1:f3:2b:e0:2d:22:96:fa:2d:c6:
2f:34:fb:8b:d2:6f:41:8f:40:76:cc:9d:11:58:84:ab:60:1c:
09:2b:26:2a:25:df:06:5d:68:61:c9:bf:c6:b2:21:62:e3:83:
42:b9:a7:32:74:a7:81:a9:e6:62:3e:77:4b:4c:b8:b9:30:0f:
41:76:37:f3:af:f7:27:48:54:58:8f:6c:3d:92:9e:d9:d8:d8:
29:91:0c:4e:9c:10:01:2c:89:41:70:cb:88:94:30:13:b8:3b:
a3:f4:30:9f:22:0a:29:08:56:57:2f:6e:19:46:a1:9c:95:d3:
c9:1d:82:76:4c:57:9d:33:0c:c0:17:07:ec:0b:cf:74:8f:60:
ec:e9:c0:1c:77:99:26:d5:f7:66:ba:07:d3:68:48:d8:c4:2f:
c8:26:79:15:a6:cd:7d:2d:d8:73:ee:eb:0d:da:bf:29:ad:f5:
eb:90:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:52:40 2026 by rpki-client