
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft
File: 3FB91A5366225ED818B1E745D18CD5555C3F9180.mft (raw, json)
Hash identifier: GpPQDY/eoEb69N+xX6ubH7Vqe+wGtLcW91Y3bKAXzi4=
Subject key identifier: B6:5F:24:24:D6:E1:7E:F5:A7:92:C0:65:13:35:B6:11:B4:C1:98:54
Authority key identifier: 3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80
Certificate issuer: /CN=3FB91A5366225ED818B1E745D18CD5555C3F9180
Certificate serial: 35D0C0BE4F6219BC0C47DC299FC92DF88AAC75C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft
Manifest number: 47
Signing time: Wed 24 Jun 2026 07:39:42 +0000
Manifest this update: Wed 24 Jun 2026 07:34:42 +0000
Manifest next update: Thu 25 Jun 2026 07:57:42 +0000
Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: CSG0H/DZBA3s6AGv8lPFFy0HS/2QV2mwHN4jVwXK0hQ=)
2: 3FB91A5366225ED818B1E745D18CD5555C3F9180.crl (hash: dP1ckYc5c2Ph0kNLJAx4+S8qBeEC6O9QBeYKYj9o9uI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl
rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 06:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d0:c0:be:4f:62:19:bc:0c:47:dc:29:9f:c9:2d:f8:8a:ac:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FB91A5366225ED818B1E745D18CD5555C3F9180
Validity
Not Before: Jun 24 07:34:42 2026 GMT
Not After : Jun 25 07:57:42 2026 GMT
Subject: CN=B65F2424D6E17EF5A792C0651335B611B4C19854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:22:4b:aa:f8:88:ba:1e:95:47:2f:18:03:
50:a1:cf:5e:d6:63:f3:4b:ba:c7:45:6b:ba:ca:63:
7a:13:02:12:80:75:c4:eb:7e:69:8e:7d:de:05:7c:
79:5a:32:29:d7:1f:53:ca:2f:91:c5:80:b7:7e:bf:
ed:5b:04:19:9b:79:f6:7a:bd:d1:dc:e9:de:52:5a:
4e:e0:eb:14:55:18:46:88:13:b4:a2:5d:9f:31:e2:
55:f8:c4:90:4b:5a:23:00:bd:2c:47:85:d9:d5:1d:
02:ef:87:e0:a4:99:bc:1f:f6:58:f8:89:73:c1:d9:
14:cd:16:ea:2b:7f:4b:d6:32:74:20:ed:c1:40:f8:
90:52:a3:96:b7:47:80:9f:04:7b:9b:f8:65:a1:d0:
be:ab:60:32:b1:40:84:57:68:d4:ff:85:be:94:c1:
75:32:d2:89:18:1d:fc:62:ef:68:81:10:30:22:2c:
66:00:63:4c:b6:23:77:14:0d:81:93:72:8d:2e:67:
a7:02:6f:1d:a5:5c:53:29:fd:ec:a9:13:36:ce:ef:
bc:4a:d5:c1:4a:88:49:df:2d:3d:54:2d:ca:6f:11:
f0:21:d6:11:83:e2:e0:e6:2f:aa:80:5d:c1:94:67:
b4:f1:f8:66:f5:65:86:89:ee:4f:22:b6:28:92:66:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5F:24:24:D6:E1:7E:F5:A7:92:C0:65:13:35:B6:11:B4:C1:98:54
X509v3 Authority Key Identifier:
keyid:3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:f2:f9:66:49:45:41:f0:9c:24:8d:e0:cf:ba:a6:03:91:
3a:99:be:08:ee:03:99:be:e7:b8:d6:3c:d9:18:1e:f9:61:32:
8c:25:69:b7:ae:5a:c9:5a:62:b1:fe:cb:c6:62:da:27:b3:05:
99:1c:fd:04:53:ae:5b:5c:51:19:79:64:ed:8a:cb:3c:d8:83:
4b:2a:67:40:c6:1a:f1:0e:e8:91:5b:9b:af:39:8b:86:52:8d:
a6:7a:97:ff:1f:69:4b:d7:6d:7c:88:89:8c:9d:80:45:fd:37:
95:d8:82:53:36:91:4d:a3:f6:b0:bc:4d:2d:ba:b4:be:cc:42:
29:53:d5:2b:9a:18:9b:a0:22:42:e1:88:3b:c5:36:58:af:e0:
88:8a:3d:27:0d:66:55:1a:c6:78:f1:cf:3a:80:9f:a4:9f:65:
d1:96:8d:cb:9b:f7:72:e4:32:3d:b2:77:34:f0:78:47:6f:24:
52:1b:f7:a5:d4:be:7e:50:dd:e7:6b:8b:7f:cb:37:f3:a7:bd:
26:c8:72:37:e6:04:43:5d:c2:01:21:29:f0:4e:70:3f:62:1f:
3a:c7:fd:b2:cf:d9:6d:04:df:63:e4:74:48:4d:98:eb:5a:0a:
32:3b:5e:c5:7f:e3:b6:c3:ed:14:45:ad:02:9c:04:9b:d0:ef:
1b:13:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:22:44 2026 by rpki-client