
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json)
Hash identifier: D8/F3vu+GYJt++HV/AzYPh3Z9Hwgov82U0ZnWu8ZiaI=
Subject key identifier: E4:0F:BA:5B:55:FE:03:2A:24:43:7C:E9:91:30:05:17:A0:78:55:04
Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22
Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
Certificate serial: 6CE5F266D90396A1E3088012CAF9D9E733E5148D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 07:01:07 +0000
Manifest this update: Sun 02 Aug 2026 06:56:07 +0000
Manifest next update: Mon 03 Aug 2026 07:39:07 +0000
Files and hashes: 1: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=)
2: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: pdsSWYDuI8QPFD6veB1R6Ur01CTHxP60b+cnC8Dl/V4=)
3: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=)
4: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl
rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e5:f2:66:d9:03:96:a1:e3:08:80:12:ca:f9:d9:e7:33:e5:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
Validity
Not Before: Aug 2 06:56:07 2026 GMT
Not After : Aug 3 07:39:07 2026 GMT
Subject: CN=E40FBA5B55FE032A24437CE991300517A0785504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:98:31:6f:66:c1:5c:69:c3:ab:0e:bd:16:
03:9b:9f:0e:d2:33:40:78:fd:0b:0c:d4:cf:a6:e7:
72:0b:54:6d:2b:93:01:24:27:f8:90:f3:e3:84:40:
ca:4b:39:d2:e5:ed:1f:70:36:37:1f:b1:ed:85:22:
4a:60:64:19:72:5f:c2:98:d3:4a:83:7d:21:6e:0b:
0b:43:f9:52:0f:dc:8c:90:5a:41:ca:e5:77:31:95:
2f:3c:ce:e3:8a:ab:23:fd:a9:e5:0b:0c:ac:80:87:
45:57:2f:75:eb:2c:4f:76:05:1b:0b:90:ff:ce:ce:
bf:b0:23:c6:b7:11:9d:ee:f9:da:9a:5b:52:ea:52:
87:8a:c5:5b:ee:3c:0a:2e:62:15:85:4f:88:6f:69:
5c:7c:54:5f:13:34:2f:3e:f3:29:25:45:38:fd:78:
99:9a:fd:57:52:ba:07:28:e7:73:ec:4f:22:5d:01:
d5:48:78:a7:cc:bd:cb:ae:ae:ed:e7:d3:24:f7:21:
e7:ee:e5:76:c8:0a:28:49:90:3b:87:68:b8:65:fe:
90:d2:55:72:16:46:23:b1:4d:ab:95:5c:6e:e0:47:
87:2e:6a:6c:c7:fc:f0:9a:4e:e5:e9:1f:51:0d:d9:
bc:f0:b7:25:18:62:b7:a7:da:93:33:f9:97:ae:3a:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:BA:5B:55:FE:03:2A:24:43:7C:E9:91:30:05:17:A0:78:55:04
X509v3 Authority Key Identifier:
keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:97:20:75:cb:a1:19:ac:2c:e3:db:ad:c2:5e:ba:5d:65:
a9:d6:2d:7e:28:b7:c9:7f:4e:58:f2:3d:6b:f3:55:28:eb:25:
a8:16:7c:e3:22:f3:a3:67:69:c2:18:92:be:52:f5:ba:13:31:
c2:6b:82:26:4d:6f:04:3b:2f:4f:42:26:cc:f8:bb:4b:a9:f5:
5b:37:81:1a:86:ef:51:d0:f3:28:5a:93:90:86:73:12:42:9b:
2e:98:19:e4:ef:00:fc:96:ca:44:ab:25:af:67:70:80:db:39:
a9:39:50:04:68:08:c4:0a:f5:ec:44:48:96:af:af:69:cf:8e:
2e:5b:9d:97:db:05:b3:aa:40:ab:64:a4:46:92:54:f8:63:ee:
7a:34:de:8b:8a:ea:01:ab:8e:a8:42:ed:ee:b5:f6:29:31:cd:
22:e0:5f:93:c4:b4:bd:28:06:60:bd:f7:8a:a7:04:ab:2e:54:
da:a7:12:45:1c:fd:db:59:6a:4f:c4:2f:6d:77:47:e0:22:56:
44:78:87:3d:4a:02:50:2c:f7:02:5b:93:9d:55:e5:5f:bc:b8:
3d:b8:f5:47:c4:5f:ea:17:fd:fa:d9:9a:e9:5a:80:86:4c:6d:
1e:20:db:5a:8a:08:42:32:fd:04:cf:ce:ce:ab:39:e0:0c:d0:
1d:75:17:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbOXyZtkDlqHjCIASyvnZ5zPlFI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1
ODRDQjkyMjAeFw0yNjA4MDIwNjU2MDdaFw0yNjA4MDMwNzM5MDdaMDMxMTAvBgNV
BAMTKEU0MEZCQTVCNTVGRTAzMkEyNDQzN0NFOTkxMzAwNTE3QTA3ODU1MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjpgxb2bBXGnDqw69FgObnw7S
M0B4/QsM1M+m53ILVG0rkwEkJ/iQ8+OEQMpLOdLl7R9wNjcfse2FIkpgZBlyX8KY
00qDfSFuCwtD+VIP3IyQWkHK5XcxlS88zuOKqyP9qeULDKyAh0VXL3XrLE92BRsL
kP/Ozr+wI8a3EZ3u+dqaW1LqUoeKxVvuPAouYhWFT4hvaVx8VF8TNC8+8yklRTj9
eJma/VdSugco53PsTyJdAdVIeKfMvcuuru3n0yT3Iefu5XbICihJkDuHaLhl/pDS
VXIWRiOxTauVXG7gR4cuamzH/PCaTuXpH1EN2bzwtyUYYren2pMz+ZeuOjTTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5A+6W1X+AyokQ3zpkTAFF6B4VQQwHwYDVR0j
BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1
MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC
OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh
OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy
RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACnvlyB1y6EZrCzj263CXrpdZanWLX4ot8l/
TljyPWvzVSjrJagWfOMi86NnacIYkr5S9boTMcJrgiZNbwQ7L09CJsz4u0up9Vs3
gRqG71HQ8yhak5CGcxJCmy6YGeTvAPyWykSrJa9ncIDbOak5UARoCMQK9exESJav
r2nPji5bnZfbBbOqQKtkpEaSVPhj7no03ouK6gGrjqhC7e619ikxzSLgX5PEtL0o
BmC994qnBKsuVNqnEkUc/dtZak/EL213R+AiVkR4hz1KAlAs9wJbk51V5V+8uD24
9UfEX+oX/frZmulagIZMbR4g21qKCEIy/QTPzs6rOeAM0B11Fz4=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:58 2026 by rpki-client