
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json)
Hash identifier: dtpZcR6UfZRJ1Sb2mjUyoW4gZrK+8G/r4svVQazM+mo=
Subject key identifier: 13:AC:83:ED:72:B4:C4:D1:30:2E:37:EC:C6:30:BD:16:00:9E:F1:2D
Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C
Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C
Certificate serial: 7A6CEFB28E6E42060353BA72970F3B2922AE24C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 03:32:48 +0000
Manifest this update: Thu 17 Sep 2026 03:27:48 +0000
Manifest next update: Fri 18 Sep 2026 05:59:48 +0000
Files and hashes: 1: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: xDNmME8PrF5t9sq84B/wzRIbNxC10f3ekrHwDX/fyaI=)
2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=)
3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl
rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6c:ef:b2:8e:6e:42:06:03:53:ba:72:97:0f:3b:29:22:ae:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C
Validity
Not Before: Sep 17 03:27:48 2026 GMT
Not After : Sep 18 05:59:48 2026 GMT
Subject: CN=13AC83ED72B4C4D1302E37ECC630BD16009EF12D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:f1:b8:d2:25:c7:76:5a:6a:5a:11:e6:ce:
30:5a:93:11:e1:73:d1:22:26:b5:5a:21:dd:b8:51:
42:0a:5f:be:ff:f2:9d:34:f1:9b:5f:16:8f:c2:f9:
7c:52:d2:fb:e1:27:f7:22:ed:d4:d1:04:96:22:e4:
bd:3e:59:d2:c4:1c:b4:87:db:b4:96:7c:e1:d7:5f:
46:89:c7:c3:68:c0:d1:64:aa:56:9c:55:85:27:74:
28:49:93:8d:e3:3c:32:9e:ff:9f:22:e4:d8:59:96:
e8:e3:72:b4:29:39:27:22:33:13:25:b0:f1:f8:09:
f1:2f:54:3c:80:52:8a:97:e5:4d:4c:73:ba:60:88:
f0:c1:b1:3d:74:e1:df:8f:86:36:5a:50:6f:36:12:
79:3b:b8:ed:0f:d5:c6:a3:61:46:d7:e6:4a:fe:99:
25:08:0f:ec:83:a8:4f:fe:93:82:f5:32:7e:3c:1f:
32:79:ab:97:0f:e6:6d:1a:2f:0c:5c:b9:e5:b9:ca:
c2:55:2b:ce:3c:84:94:84:9b:37:3e:56:2d:a0:cb:
5f:4b:c6:66:ab:95:f8:ad:42:6d:d2:56:a3:f6:15:
99:4e:5a:2f:ac:36:e0:43:26:fb:b3:ed:1c:d6:cf:
c1:7c:a3:64:92:0f:e8:3d:08:5e:fe:44:87:91:dc:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:83:ED:72:B4:C4:D1:30:2E:37:EC:C6:30:BD:16:00:9E:F1:2D
X509v3 Authority Key Identifier:
keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:9d:78:05:4c:b3:3c:90:88:68:33:a3:6a:0f:ff:aa:bd:
7a:84:06:da:d9:9c:49:b3:29:47:64:d1:49:06:e6:12:ff:ec:
4e:08:71:16:9e:37:ac:d8:8d:03:0e:9d:8d:2c:dc:ea:54:0a:
c8:e0:10:1d:23:87:bc:b2:59:a5:7f:84:01:f6:1e:a5:0c:6c:
16:23:bb:b4:0f:cd:c1:d8:fd:a3:ad:2b:b4:99:22:ff:3b:6f:
5d:63:11:f8:20:cd:70:a7:70:41:05:35:1e:86:9c:c1:94:3c:
a9:54:fa:fd:e4:8e:12:9a:48:3d:cb:65:fb:a5:d7:72:83:9f:
74:c9:0d:6e:ab:ab:21:e9:21:30:b7:f2:83:fa:cb:e5:39:c6:
9b:3f:5e:39:5c:59:1a:4f:8d:39:9e:5e:26:db:58:bb:2a:e6:
1e:28:66:c0:73:21:b3:8d:b4:c0:b0:67:c5:10:1d:3c:c3:3b:
5c:be:7f:34:10:4a:2a:23:63:25:f0:65:e5:97:c4:ea:aa:6e:
e0:35:34:c2:51:53:27:88:4c:39:91:63:2e:c0:f6:3a:19:8a:
96:d4:ea:37:20:19:d8:6d:02:60:75:1b:0d:34:5e:48:af:cc:
fb:97:61:4c:c5:dc:72:ae:8c:1e:ea:bb:be:8d:b4:f3:24:bd:
e2:af:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:38 2026 by rpki-client