
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json)
Hash identifier: tZ1Rs5FUjoBLPjUF4y+UHRSbD/nDEoP7LrOE5pERbUw=
Subject key identifier: 3E:0C:C8:15:8D:56:AE:40:8C:C6:A1:3F:ED:EE:2F:BE:FC:08:91:1F
Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Certificate serial: 3221F6B702BFA8722E61BDA1D7F8EBC032F0720C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
Manifest number: EB
Signing time: Sat 24 Oct 2026 15:02:52 +0000
Manifest this update: Sat 24 Oct 2026 14:57:52 +0000
Manifest next update: Sun 25 Oct 2026 16:19:52 +0000
Files and hashes: 1: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: 55u6B0j0t7UcNMd+ANlbXcxHnIH+PL3vyaTsq4+mWmQ=)
2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:21:f6:b7:02:bf:a8:72:2e:61:bd:a1:d7:f8:eb:c0:32:f0:72:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Validity
Not Before: Oct 24 14:57:52 2026 GMT
Not After : Oct 25 16:19:52 2026 GMT
Subject: CN=3E0CC8158D56AE408CC6A13FEDEE2FBEFC08911F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:3c:f6:3b:72:25:40:0d:59:a1:a4:30:c4:
3c:6c:cc:b1:58:08:a1:77:ca:c3:45:d5:0a:c6:c2:
94:44:a5:c1:ba:40:f1:bc:b5:37:1d:7d:98:eb:7a:
b2:85:57:72:b3:15:b7:f8:a0:9b:c0:4d:17:21:66:
88:38:1c:7c:fa:ac:19:38:6e:e5:23:7e:26:fe:7d:
55:bf:1e:0e:55:88:25:bb:30:56:bf:aa:2d:28:6b:
98:e6:fa:ee:c4:13:6e:ec:a2:92:97:ad:aa:32:4e:
e3:f4:9d:5a:0d:ad:92:3e:c3:44:68:88:ce:eb:1b:
d5:59:bd:98:2a:f0:96:c5:49:0a:8f:83:94:80:f7:
7b:33:19:85:96:8a:6b:fb:46:2d:e9:c4:09:76:53:
86:90:b1:86:d8:38:ad:03:2c:d0:74:c4:5b:8c:ae:
6e:d2:93:d3:8c:a3:e9:73:20:2e:2d:bb:82:9e:f7:
9c:1f:6a:4d:67:61:84:b1:03:a1:05:8a:66:d2:61:
db:43:ee:42:41:67:25:02:9d:f3:53:2b:e0:09:3b:
35:4a:4f:cf:2f:f0:9d:fd:82:5a:76:1a:7b:99:6c:
b0:f4:80:c1:95:e7:c9:c2:85:88:f0:3f:ed:b1:6f:
82:8a:a6:f2:a0:84:32:2b:21:57:fb:d2:34:4e:a9:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:C8:15:8D:56:AE:40:8C:C6:A1:3F:ED:EE:2F:BE:FC:08:91:1F
X509v3 Authority Key Identifier:
keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:54:5b:89:33:0d:c0:13:cb:79:f9:f3:00:ea:5c:9e:b8:0f:
97:f0:b8:a6:6a:b2:d4:c9:67:2f:bc:b5:f7:e8:b9:7a:46:c6:
24:f5:9a:31:ca:72:99:a0:13:1a:9c:ff:5f:24:cb:c8:57:49:
82:c7:b2:6b:86:fe:b0:b9:7f:7f:96:a8:74:2f:ed:0b:a9:9b:
9c:7f:46:da:f0:f7:df:ff:79:c6:66:ab:9d:0a:74:81:94:1e:
4a:6d:b3:b6:fb:22:76:0f:fd:de:d1:23:2b:b6:26:8b:b1:6c:
dd:ee:e7:97:d6:5d:d0:23:6f:8a:60:40:c3:d1:2b:3e:e6:53:
d6:d7:cb:a1:2f:42:19:20:8c:fd:1e:44:b2:9c:28:43:17:f5:
59:92:4d:73:7f:55:2e:26:92:e4:0c:04:2d:62:be:18:a9:47:
20:d6:8b:92:c0:23:45:62:26:45:6f:0e:a1:ce:e7:8c:9c:77:
d9:f1:5e:f2:a5:7e:81:21:ac:b3:02:34:a3:49:30:cf:d4:f7:
38:f9:c9:2d:a9:98:7b:9f:7d:ff:f7:50:f5:9d:38:06:1b:1b:
b6:76:4d:6d:e6:48:1e:d3:b0:eb:48:da:ee:62:51:49:c2:ce:
79:3f:1f:34:63:2e:cd:aa:ae:cf:bc:14:bc:30:7d:58:1c:fc:
da:36:ad:94
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMiH2twK/qHIuYb2h1/jrwDLwcgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkzQUI4
MTkyMjE1MTAeFw0yNjEwMjQxNDU3NTJaFw0yNjEwMjUxNjE5NTJaMDMxMTAvBgNV
BAMTKDNFMENDODE1OEQ1NkFFNDA4Q0M2QTEzRkVERUUyRkJFRkMwODkxMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oTz2O3IlQA1ZoaQwxDxszLFY
CKF3ysNF1QrGwpREpcG6QPG8tTcdfZjrerKFV3KzFbf4oJvATRchZog4HHz6rBk4
buUjfib+fVW/Hg5ViCW7MFa/qi0oa5jm+u7EE27sopKXraoyTuP0nVoNrZI+w0Ro
iM7rG9VZvZgq8JbFSQqPg5SA93szGYWWimv7Ri3pxAl2U4aQsYbYOK0DLNB0xFuM
rm7Sk9OMo+lzIC4tu4Ke95wfak1nYYSxA6EFimbSYdtD7kJBZyUCnfNTK+AJOzVK
T88v8J39glp2GnuZbLD0gMGV58nChYjwP+2xb4KKpvKghDIrIVf70jROqUqjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPgzIFY1WrkCMxqE/7e4vvvwIkR8wHwYDVR0j
BBgwFoAUw83vwdQtvFJolLSTgtaTq4GSIVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTVkZjUxMmYtMGQxYS00YjA5LWI5YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFE
NDJEQkM1MjY4OTRCNDkzODJENjkzQUI4MTkyMjE1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DM0NERUZDMUQ0MkRCQzUyNjg5NEI0OTM4MkQ2OTNBQjgxOTIy
MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5
YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkz
QUI4MTkyMjE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEVUW4kzDcATy3n58wDqXJ64D5fwuKZqstTJ
Zy+8tffouXpGxiT1mjHKcpmgExqc/18ky8hXSYLHsmuG/rC5f3+WqHQv7Qupm5x/
Rtrw99//ecZmq50KdIGUHkpts7b7InYP/d7RIyu2JouxbN3u55fWXdAjb4pgQMPR
Kz7mU9bXy6EvQhkgjP0eRLKcKEMX9VmSTXN/VS4mkuQMBC1ivhipRyDWi5LAI0Vi
JkVvDqHO54ycd9nxXvKlfoEhrLMCNKNJMM/U9zj5yS2pmHufff/3UPWdOAYbG7Z2
TW3mSB7TsOtI2u5iUUnCznk/HzRjLs2qrs+8FLwwfVgc/No2rZQ=
-----END CERTIFICATE-----
Generated at Sat Oct 24 18:48:02 2026 by rpki-client