
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json)
Hash identifier: ElxvAWlG3acOj2/NxOR2I9vDCrHI7IKUFEH5TE0kBL0=
Subject key identifier: 77:15:E2:8A:4A:77:7F:CC:91:62:48:B0:BC:53:69:2D:4E:7C:12:AB
Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Certificate serial: 5BE19DA494819A0123837B0457F0D03DB116DB08
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 21:40:47 +0000
Manifest this update: Wed 16 Sep 2026 21:35:47 +0000
Manifest next update: Thu 17 Sep 2026 22:13:47 +0000
Files and hashes: 1: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=)
2: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=)
3: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: D2ticfuo8yr0sqWzolgFYha7Fgn2in7gZwEU+VDrprA=)
4: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=)
5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=)
6: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=)
7: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e1:9d:a4:94:81:9a:01:23:83:7b:04:57:f0:d0:3d:b1:16:db:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Validity
Not Before: Sep 16 21:35:47 2026 GMT
Not After : Sep 17 22:13:47 2026 GMT
Subject: CN=7715E28A4A777FCC916248B0BC53692D4E7C12AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:58:60:86:64:fd:be:99:40:21:60:7b:52:
39:e3:c7:13:36:08:33:29:7b:72:a3:c1:25:ee:4e:
f9:22:0f:c2:64:41:d2:60:8e:e8:3d:98:6c:2f:56:
54:c0:2b:ba:81:af:94:5f:fc:9a:83:ec:3e:83:5c:
84:d1:fb:f9:eb:c2:9c:19:77:aa:a7:e8:53:d9:e8:
fa:11:0d:98:5b:17:7c:0b:b0:6b:ce:c3:27:a2:4f:
ec:01:04:5e:35:a7:06:fe:e0:99:5f:ce:63:5c:6e:
bc:4d:a9:07:45:e8:ae:0e:cd:ff:b2:57:ea:d0:09:
ab:1f:b0:c4:f0:be:fb:0f:33:e6:ea:24:69:49:0e:
63:77:83:03:d4:2f:a9:b3:27:8d:1e:c7:36:13:a6:
66:92:54:b6:6a:3d:f3:27:aa:a5:cf:1f:aa:46:eb:
ff:71:0a:ec:ba:4e:88:07:91:8d:70:5c:6e:bb:3c:
49:d6:98:f0:0f:0d:6f:1d:63:2b:ae:6c:2e:af:cb:
f7:08:ff:eb:31:c6:95:27:c3:e4:0c:58:48:8d:81:
3a:7b:05:58:c5:d9:bf:4b:f1:2c:d8:85:d2:c3:54:
8c:13:6f:2f:d3:b6:59:fc:2c:4e:91:3e:aa:a8:36:
cc:91:b8:1f:67:fe:ed:91:66:02:84:07:87:6d:c2:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:E2:8A:4A:77:7F:CC:91:62:48:B0:BC:53:69:2D:4E:7C:12:AB
X509v3 Authority Key Identifier:
keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ea:b8:a1:0f:83:ac:a7:79:5a:5d:b8:d1:61:e3:0b:a6:4e:
7f:e2:3b:dd:fe:ff:54:56:65:32:da:01:b8:91:5f:f6:06:3c:
da:af:1c:54:dc:d4:a1:98:d9:21:e9:cd:16:3c:1e:48:b9:4d:
a5:9e:03:7f:49:22:bf:a7:1e:17:ed:e0:7b:ca:3d:f3:b7:19:
ce:af:30:ce:32:ff:fd:4d:62:8a:84:a7:d8:f5:7f:31:66:8f:
79:f5:6f:d2:64:fb:a3:b9:a4:23:85:5f:aa:40:82:da:45:02:
69:e3:3d:01:78:26:cb:85:8d:d1:4b:b0:89:62:b1:77:d9:cb:
2e:98:fb:29:82:77:bb:8c:a6:14:a3:34:b4:f8:db:88:62:f8:
16:3c:b1:50:0a:c4:7c:aa:c6:39:6e:50:89:6e:ca:4c:01:2e:
ec:df:87:57:38:33:da:08:eb:35:12:98:7b:dc:a0:6b:10:81:
b8:91:9b:3a:75:7e:4c:39:ce:e5:a6:39:29:c7:2a:37:de:1a:
fa:9c:20:a6:48:2e:11:ab:35:28:0d:71:0b:1e:f6:19:07:c8:
73:88:21:88:c1:d8:cb:64:25:71:55:79:1d:97:bd:05:ba:a3:
d7:e8:fe:2b:ec:7b:f1:eb:6c:39:0b:23:f4:fb:31:70:23:0f:
12:10:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:48:47 2026 by rpki-client