
$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json)
Hash identifier: 1M9TNBJPkiL/Pf+yPSAgID2i9tv+MXFGz2jSlUDJkr8=
Subject key identifier: D9:62:57:9C:AE:6F:03:51:EB:04:00:46:C3:6B:76:95:64:8E:D9:91
Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C
Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C
Certificate serial: 487F3ADDAECA3D3E89D38507396BC1D7114DBE98
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
Manifest number: 66
Signing time: Fri 17 Jul 2026 12:43:39 +0000
Manifest this update: Fri 17 Jul 2026 12:38:39 +0000
Manifest next update: Sat 18 Jul 2026 14:17:39 +0000
Files and hashes: 1: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=)
2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: 5N+2sFP2Dbh0akw9Kyxq2KvXEOFEB96R+j1y/81saP0=)
3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=)
4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl
rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 14:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7f:3a:dd:ae:ca:3d:3e:89:d3:85:07:39:6b:c1:d7:11:4d:be:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C
Validity
Not Before: Jul 17 12:38:39 2026 GMT
Not After : Jul 18 14:17:39 2026 GMT
Subject: CN=D962579CAE6F0351EB040046C36B7695648ED991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:01:71:6d:18:d0:70:4c:aa:7a:2c:4f:c4:
e8:49:6f:cb:bf:e6:63:d2:b3:dc:ec:80:6b:96:ae:
a8:ad:c2:fa:d3:87:f8:b9:57:6a:ca:f8:b9:53:fe:
14:82:87:93:4f:fc:d6:28:c2:a3:5a:8c:97:ac:0c:
42:c6:e4:be:f5:d0:73:49:d8:39:ba:96:13:1d:62:
4a:94:73:30:96:83:f2:dd:ff:af:ac:02:be:6e:7b:
4d:48:17:92:75:23:f7:13:34:c4:6f:fb:38:ca:a8:
70:7e:52:fb:20:07:fe:8b:ee:65:6e:6e:d5:de:64:
e3:4a:dd:e7:40:30:43:83:8b:94:c2:24:dd:ce:73:
fb:fb:4f:9b:71:c9:34:82:92:d0:57:0b:4e:52:44:
9c:c1:ba:43:e7:91:36:d0:14:c7:77:02:9b:ef:2e:
b6:08:83:e0:aa:58:fb:c6:a2:06:64:7f:07:4f:54:
b1:35:18:80:90:65:e2:ff:ca:a3:d5:9f:93:f1:5c:
ce:a5:a3:b3:a3:6d:44:88:e2:0d:07:70:ca:47:01:
ce:6f:c0:c5:68:a3:16:17:d1:52:f3:2b:c1:8a:09:
79:ea:6c:d0:8d:b4:a8:13:44:05:9f:60:d3:2e:8d:
a6:6e:b5:81:a9:0b:16:7f:a9:3d:ce:b8:ea:91:e6:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:57:9C:AE:6F:03:51:EB:04:00:46:C3:6B:76:95:64:8E:D9:91
X509v3 Authority Key Identifier:
keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:62:41:b1:0f:1a:a3:93:67:e1:bc:72:e0:e1:b1:d0:0d:82:
0c:74:e5:43:49:d4:1d:dd:7f:89:0d:ff:a6:50:fc:83:e7:7c:
b4:fa:ac:b5:35:c2:75:19:94:d1:bd:dd:22:03:0b:73:1b:0e:
c5:13:28:05:94:9c:92:cf:51:a2:f8:5d:d5:77:4a:c5:e8:3c:
d0:01:4a:1a:d1:27:9a:1a:c7:66:49:db:5f:61:13:d0:c5:1d:
da:99:79:22:17:83:4d:d9:84:56:b1:df:47:d9:f0:81:01:8e:
73:43:3d:d6:3a:c5:f8:99:92:36:e0:ae:49:f2:d2:e3:82:eb:
53:29:24:2c:19:a4:5a:e2:5a:7d:f8:72:e9:f8:91:03:21:1a:
0c:48:76:01:c6:03:1f:75:6a:aa:43:09:ce:d7:4b:06:82:df:
2d:9d:16:ba:07:05:22:68:bc:8e:f9:77:09:ba:1e:a0:cb:97:
ec:97:cb:3f:1b:de:d9:26:f3:cc:87:6a:4b:de:8d:f1:a9:e9:
0c:64:d9:5b:bb:55:f0:45:29:0c:dc:e8:27:a2:8a:74:26:c7:
ab:d2:b7:4c:c6:ad:ad:e7:01:a4:66:3b:1c:b5:2d:e0:e2:ce:
8e:b8:7f:4e:8e:a0:b3:3c:ff:1c:d8:b8:9c:fa:22:65:18:64:
b9:70:d1:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSH863a7KPT6J04UHOWvB1xFNvpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx
MjczMDUzQzAeFw0yNjA3MTcxMjM4MzlaFw0yNjA3MTgxNDE3MzlaMDMxMTAvBgNV
BAMTKEQ5NjI1NzlDQUU2RjAzNTFFQjA0MDA0NkMzNkI3Njk1NjQ4RUQ5OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQQFxbRjQcEyqeixPxOhJb8u/
5mPSs9zsgGuWrqitwvrTh/i5V2rK+LlT/hSCh5NP/NYowqNajJesDELG5L710HNJ
2Dm6lhMdYkqUczCWg/Ld/6+sAr5ue01IF5J1I/cTNMRv+zjKqHB+UvsgB/6L7mVu
btXeZONK3edAMEODi5TCJN3Oc/v7T5txyTSCktBXC05SRJzBukPnkTbQFMd3Apvv
LrYIg+CqWPvGogZkfwdPVLE1GICQZeL/yqPVn5PxXM6lo7OjbUSI4g0HcMpHAc5v
wMVooxYX0VLzK8GKCXnqbNCNtKgTRAWfYNMujaZutYGpCxZ/qT3OuOqR5gNzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2WJXnK5vA1HrBABGw2t2lWSO2ZEwHwYDVR0j
BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB
QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw
NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi
ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1
OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKJiQbEPGqOTZ+G8cuDhsdANggx05UNJ1B3d
f4kN/6ZQ/IPnfLT6rLU1wnUZlNG93SIDC3MbDsUTKAWUnJLPUaL4XdV3SsXoPNAB
ShrRJ5oax2ZJ219hE9DFHdqZeSIXg03ZhFax30fZ8IEBjnNDPdY6xfiZkjbgrkny
0uOC61MpJCwZpFriWn34cun4kQMhGgxIdgHGAx91aqpDCc7XSwaC3y2dFroHBSJo
vI75dwm6HqDLl+yXyz8b3tkm88yHakvejfGp6Qxk2Vu7VfBFKQzc6CeiinQmx6vS
t0zGra3nAaRmOxy1LeDizo64f06OoLM8/xzYuJz6ImUYZLlw0fk=
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:08 2026 by rpki-client