
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
File: 3B15BA656D26B1B7E87FC6809B5DC98888377711.mft (raw, json)
Hash identifier: j+oFSobgIdrD/+UEsV1LB+ecyTpFep7WvaOW2ur9kDw=
Subject key identifier: 08:2C:A1:27:93:0C:D1:98:88:8F:9A:11:8E:90:90:BE:0F:78:C1:F3
Authority key identifier: 3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11
Certificate issuer: /CN=3B15BA656D26B1B7E87FC6809B5DC98888377711
Certificate serial: 065FFC058D75297FD35DD759D621677CA1A24CE0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 23:07:31 +0000
Manifest this update: Wed 16 Sep 2026 23:02:31 +0000
Manifest next update: Fri 18 Sep 2026 00:10:31 +0000
Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: ORkadPFDAal3pRKFSqyDMiG09OIpPciiMF7Guuyi4C0=)
2: 3B15BA656D26B1B7E87FC6809B5DC98888377711.crl (hash: 0uVGhm3wIE0dKrsFr+VZJLGDXGsj8Pekdx5zTD3XUCw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl
rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5f:fc:05:8d:75:29:7f:d3:5d:d7:59:d6:21:67:7c:a1:a2:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B15BA656D26B1B7E87FC6809B5DC98888377711
Validity
Not Before: Sep 16 23:02:31 2026 GMT
Not After : Sep 18 00:10:31 2026 GMT
Subject: CN=082CA127930CD198888F9A118E9090BE0F78C1F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:95:f6:cd:52:a4:9e:8e:a4:b4:aa:dc:6e:
27:ec:44:9d:a6:3a:24:0d:a1:9d:a7:7e:4f:40:29:
ee:7b:e5:45:63:ce:ae:50:d1:9b:ee:0f:1b:2a:c6:
c5:c0:1c:67:dc:59:4c:48:61:69:9d:fc:a8:46:8d:
5d:90:8a:fb:c9:80:b2:3d:e8:16:23:11:3b:0e:5f:
76:3a:87:a5:c3:be:5e:e1:65:6f:d5:da:b7:13:a0:
89:ba:3e:21:9b:c5:3f:dc:92:72:0f:12:bf:a6:1e:
2a:38:d0:5a:d3:2b:f9:0e:d0:3a:65:90:9a:39:7c:
65:d7:4a:16:3f:2c:c3:9f:8b:3f:fa:12:f0:a7:ee:
78:94:11:c7:c1:b9:75:32:8a:75:a2:c2:67:da:ac:
e6:76:d7:2c:cb:42:0e:bd:a5:a9:3a:2a:31:d3:03:
88:65:3e:34:ec:27:57:09:a7:f7:11:05:c6:ed:84:
89:c8:c4:d5:31:03:a5:ad:29:0f:ad:45:1b:1e:f6:
68:11:00:63:18:41:be:42:71:39:7d:e1:e1:db:8e:
bf:5a:f3:7d:e1:29:35:1c:0f:9f:65:4b:32:7d:cf:
e2:73:3e:1d:24:e7:22:b8:62:fa:23:50:fc:c5:09:
e4:79:d1:05:98:65:2e:00:74:75:af:d9:0d:cc:98:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2C:A1:27:93:0C:D1:98:88:8F:9A:11:8E:90:90:BE:0F:78:C1:F3
X509v3 Authority Key Identifier:
keyid:3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:4a:8a:64:f9:af:23:3c:4a:48:b2:5f:35:ed:b7:6c:21:
00:0d:d0:43:07:1d:6c:89:0a:d0:fd:dd:a6:d7:30:a0:a6:0a:
27:4b:ac:43:c4:2a:3b:58:6d:a2:8b:9b:9a:ee:6c:16:1d:ef:
d3:67:0b:7d:b9:c4:34:d1:d7:9d:a0:fb:c8:65:e4:9a:37:c7:
0f:e1:c1:3d:12:52:70:d3:1c:eb:66:8c:6d:13:cb:8c:ba:e4:
e5:c9:e3:01:b7:a4:c9:fb:9a:20:1f:13:1e:5e:a5:aa:da:07:
b9:e7:d8:8a:29:91:a9:03:fa:db:ca:7a:8b:4a:45:1e:79:3b:
69:a6:53:45:01:57:45:ee:1e:c3:cd:52:d6:06:ec:23:81:65:
a8:7d:27:51:36:9f:47:9e:b1:7f:19:47:6e:d1:1b:c6:23:05:
6e:bb:31:e5:f7:17:35:d2:90:e6:99:c0:e0:1f:4f:6d:df:ad:
2d:54:b0:cb:b2:81:84:24:1a:43:7f:d3:68:7a:75:e7:dc:b6:
a9:e2:0d:ea:e5:85:aa:68:1a:90:10:52:a9:52:58:15:44:3b:
66:38:3f:d8:25:bb:9f:81:c1:01:55:40:92:e7:83:73:75:00:
a0:fe:1e:bb:02:e6:19:bd:92:68:f6:02:1b:b1:96:19:a5:79:
3d:07:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:43:34 2026 by rpki-client