
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
File: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft (raw, json)
Hash identifier: MtGuMzltOb+nPGLq39u3ERwhUBnZ1us+H9NV/JDAzB0=
Subject key identifier: B5:03:BC:58:F5:DE:69:15:1A:E2:D8:8C:C7:1E:CD:F6:A6:62:6C:74
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial: 3B6845AC88C802D627B26C0630C1DF7FC7864488
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 01:45:40 +0000
Manifest this update: Thu 17 Sep 2026 01:40:40 +0000
Manifest next update: Fri 18 Sep 2026 05:06:40 +0000
Files and hashes: 1: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: dVzU+GqvAS7Wn+MjXVPbLdaACaAzf5gsplbVnIYe7RI=)
2: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: furgG1WGsI/SaHbEkYDIDFe9YchJUqhB/+OGElUaiP4=)
3: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: Y9dwS9JvSaOl4mADQu18dqt11q2d+GtfYQ7OjGf2xvk=)
4: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: 8kncCReHuUftWwxEVQGeXIdZhJBx7PmiqOaqTEDqEqo=)
5: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: Fncw6ejzrq4zIDml7sJv0ARYNNSdP3usP81sr9K6idM=)
6: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 5bkG3r6aOam2UYiAyDRHJLOMYGtAoc4TWZuSkWY6DW8=)
7: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: ZJYJND6cBL2XfAoUPgiKsDkKfS/wfCExUcg8XPfgBm0=)
8: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: S43umrQnayZCpSzQYIAmH2LGDnCAWJ6VcBOOrq/ns7Y=)
9: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: QO5w5W9cp8cI6poTkpuXpM9F3mhiRyQeqAdZ2Rfgw6w=)
10: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: 9Uh4g+j84Dsp+SQG55jiqFV/GXapMzCJHzdMQ8QVMIs=)
11: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl (hash: 0rGs7+mouiE71ffmybt79M+3YNQoBNR5F8/4PY0A0MY=)
12: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=)
13: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: FGw2BZbAPXB424pj8gkt+KyDf13NBMafjHJz1qqtroA=)
14: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: tc07x6I5GlIGtQm74mFDwkPY7veOT+58YPaMpLFuMP8=)
15: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: SZ3yY2r9mzkD9TfHT8RxuOv5AwUhsGvKGPEF8U53ZKI=)
16: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: FPgfsxknLRU1LHc9BebuH01+tHe4lP7NUuhwY6WPhmk=)
17: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=)
18: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: mUUIB+/mtgQYA4ZJFgHA5FD7YbXkeVVQm5wqTm9otqY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:68:45:ac:88:c8:02:d6:27:b2:6c:06:30:c1:df:7f:c7:86:44:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Validity
Not Before: Sep 17 01:40:40 2026 GMT
Not After : Sep 18 05:06:40 2026 GMT
Subject: CN=B503BC58F5DE69151AE2D88CC71ECDF6A6626C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:70:d5:3a:3b:d5:58:0d:5e:d6:83:76:6b:
6b:47:fe:2e:6b:fe:24:83:4c:57:b7:b5:18:cf:36:
ca:85:18:20:d1:37:ff:ae:8f:5c:ab:a0:6f:fc:16:
62:4e:64:12:0b:1d:91:37:34:07:a1:2f:de:13:33:
01:20:c6:62:b0:9c:c0:bf:31:f9:60:8a:f8:d9:de:
56:09:43:d8:12:f0:e7:c0:78:e3:a3:1a:02:c1:05:
dd:df:a7:0d:90:39:3a:c2:18:d0:d9:a9:32:e8:da:
1c:e3:02:57:c7:88:41:5d:e2:3e:2b:d5:5a:e8:59:
bf:1e:33:16:ce:42:00:09:51:59:b6:fa:72:8c:37:
dc:13:1c:b7:26:28:42:88:34:de:ad:0a:a5:2f:58:
45:12:88:47:3d:15:6e:15:30:8e:30:f1:08:08:53:
43:d2:f1:c3:c3:ac:ed:64:de:f6:70:eb:09:b4:f5:
c1:1e:b0:83:a3:5c:91:67:f7:9b:4f:c1:b5:5f:63:
5c:91:f2:41:2f:7e:ee:08:45:63:f6:d9:f3:aa:97:
d5:70:d5:8c:86:40:61:1d:22:a5:41:da:e2:a0:4a:
d4:d2:2c:88:c7:63:44:dd:0e:56:1c:df:66:98:74:
51:17:d1:27:a0:e4:4d:a6:73:9f:3b:3b:75:ab:fa:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:03:BC:58:F5:DE:69:15:1A:E2:D8:8C:C7:1E:CD:F6:A6:62:6C:74
X509v3 Authority Key Identifier:
keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:da:4a:32:80:0f:39:52:f9:1a:ea:33:55:24:3b:39:cc:7a:
f1:de:85:e1:6a:6f:65:3a:48:37:2c:6e:cf:20:37:59:9c:ca:
1a:74:9d:63:9c:e5:b9:b0:ab:2b:1b:a8:cd:4d:e5:42:72:2d:
de:02:d1:1d:06:3c:63:c4:a0:19:c9:8c:f1:17:24:af:0c:5c:
1e:2c:63:7b:71:db:83:db:02:5f:1c:4a:04:c2:d1:40:b9:4c:
31:64:59:ed:d3:57:9b:1d:b3:f0:af:0f:63:17:b1:ce:6c:0b:
42:d1:8b:a0:eb:89:1d:1d:99:e9:c8:fc:46:b7:c2:87:49:13:
cb:31:eb:68:a0:03:95:50:6f:ff:99:31:f3:b4:fb:54:da:dc:
8b:4f:d6:69:2b:e0:85:6b:7f:2d:9d:ff:cc:02:99:28:6a:f5:
de:06:fc:81:d5:76:5b:96:a8:4e:44:f8:97:5f:b4:4c:98:f9:
12:98:aa:74:9d:f8:c6:c9:27:1b:3d:31:1d:a5:38:8b:9d:e4:
83:bc:85:7c:76:a3:b0:fa:40:4f:f3:b6:fe:b2:46:eb:84:36:
58:b5:ed:a2:c0:60:2b:09:cd:cf:37:63:49:76:40:7c:00:c6:
0d:96:f0:ce:54:89:4e:44:e4:a3:ab:44:6b:17:21:86:5e:fa:
d5:96:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:36:13 2026 by rpki-client