
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json)
Hash identifier: uC6StAAm6VvzlfGbovxViUEXl6oblH27iFILJQ2tE2U=
Subject key identifier: 18:7B:A7:1A:98:2A:B0:0D:9D:FB:11:30:EF:F4:BC:40:2E:2B:82:EF
Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8
Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8
Certificate serial: 7C4DB3C460B616E8CCD63F8C25967B5AE3C169DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 06:39:40 +0000
Manifest this update: Sun 25 Oct 2026 06:34:40 +0000
Manifest next update: Mon 26 Oct 2026 07:25:40 +0000
Files and hashes: 1: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: 7KTcvLEfwbZrv9dzKPXFeJ7GrVPMm4JRyukgt32lbVw=)
2: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl
rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 07:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4d:b3:c4:60:b6:16:e8:cc:d6:3f:8c:25:96:7b:5a:e3:c1:69:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8
Validity
Not Before: Oct 25 06:34:40 2026 GMT
Not After : Oct 26 07:25:40 2026 GMT
Subject: CN=187BA71A982AB00D9DFB1130EFF4BC402E2B82EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:32:71:25:97:48:40:b5:7a:df:53:3f:d7:
59:ed:4a:2e:f9:c3:5c:b0:ed:b3:1e:8e:9e:d1:da:
a2:19:22:67:26:33:39:c4:64:1a:5a:16:28:88:38:
c0:05:e6:8f:6b:a8:20:d8:2e:ca:6d:8b:8f:aa:15:
8a:5c:12:4b:21:c6:66:a9:a9:bc:df:d2:aa:9e:e4:
e3:b9:39:56:4a:e8:e0:7d:70:a6:38:c8:db:06:96:
93:89:48:1c:89:1d:c5:7f:b3:1e:26:9e:48:ae:e5:
af:06:66:ba:37:19:88:ad:6c:4c:f7:f0:9f:53:c1:
2b:75:fd:05:9b:b9:56:9d:25:47:1d:92:0c:5a:84:
a3:77:8a:9b:71:17:f4:f9:92:18:15:75:4c:cf:b5:
f1:8f:37:fb:42:0b:6f:c7:05:c3:72:93:2f:14:41:
0f:c5:e3:df:ad:ad:8a:ae:51:af:00:7b:24:b8:55:
fc:da:4d:69:9a:c5:07:bb:ce:1a:c8:0e:57:79:c6:
0a:67:ed:64:2c:a1:bf:40:fe:62:83:8f:16:20:3f:
4c:5a:49:06:ad:12:96:10:0c:fb:30:1f:65:93:ee:
29:e0:03:dd:7c:dd:2f:2a:73:02:2b:a1:3a:9b:c4:
d8:76:96:f1:a6:6f:15:dd:d8:59:a1:02:82:87:7a:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:A7:1A:98:2A:B0:0D:9D:FB:11:30:EF:F4:BC:40:2E:2B:82:EF
X509v3 Authority Key Identifier:
keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cd:79:b5:41:b7:95:23:2f:a0:e4:2f:3e:f1:03:0b:d9:f2:
60:bc:28:ba:bd:a5:bd:a8:2f:eb:1b:6c:a0:05:92:53:86:90:
81:25:81:31:05:8a:da:e9:9a:64:de:bb:e9:77:c3:da:02:9c:
0b:ca:7e:d4:c2:71:71:83:d9:ff:34:50:90:89:51:db:bc:bd:
94:de:9e:d2:94:9d:f4:43:a2:98:b3:fa:4f:cb:45:b7:9f:58:
6d:0a:26:26:b8:55:89:24:f0:3a:ef:71:af:e9:b4:a3:e9:b3:
f0:44:45:58:25:93:16:b6:a7:d5:0b:ae:14:3b:61:50:d0:b9:
d7:be:ef:52:a0:0b:bd:84:6d:ad:17:81:e8:d5:b2:c4:2c:40:
4a:fa:0f:7c:61:9a:f9:bb:34:8a:6f:fe:e1:16:99:b6:74:06:
0a:eb:92:86:95:ff:d6:ee:80:f1:de:82:29:2d:57:25:2c:39:
09:2f:4c:bf:a0:7a:91:78:d7:d1:63:7e:ea:ca:61:b0:95:90:
cc:60:e2:a1:a4:4d:14:40:7d:88:a6:7a:da:67:de:9a:0a:62:
5e:38:79:34:fa:44:28:35:5a:1a:49:75:43:ae:5e:76:cd:55:
c1:48:0b:96:77:8a:51:dd:e7:a0:fc:d4:e6:7d:08:2e:36:e8:
58:27:8e:78
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfE2zxGC2FujM1j+MJZZ7WuPBadwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5
QTVGOTREODAeFw0yNjEwMjUwNjM0NDBaFw0yNjEwMjYwNzI1NDBaMDMxMTAvBgNV
BAMTKDE4N0JBNzFBOTgyQUIwMEQ5REZCMTEzMEVGRjRCQzQwMkUyQjgyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqwjJxJZdIQLV631M/11ntSi75
w1yw7bMejp7R2qIZImcmMznEZBpaFiiIOMAF5o9rqCDYLspti4+qFYpcEkshxmap
qbzf0qqe5OO5OVZK6OB9cKY4yNsGlpOJSByJHcV/sx4mnkiu5a8GZro3GYitbEz3
8J9TwSt1/QWbuVadJUcdkgxahKN3iptxF/T5khgVdUzPtfGPN/tCC2/HBcNyky8U
QQ/F49+trYquUa8AeyS4VfzaTWmaxQe7zhrIDld5xgpn7WQsob9A/mKDjxYgP0xa
SQatEpYQDPswH2WT7ingA9183S8qcwIroTqbxNh2lvGmbxXd2FmhAoKHemkxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGHunGpgqsA2d+xEw7/S8QC4rgu8wHwYDVR0j
BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE
QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5
NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj
MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3
NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFDNebVBt5UjL6DkLz7xAwvZ8mC8KLq9pb2o
L+sbbKAFklOGkIElgTEFitrpmmTeu+l3w9oCnAvKftTCcXGD2f80UJCJUdu8vZTe
ntKUnfRDopiz+k/LRbefWG0KJia4VYkk8Drvca/ptKPps/BERVglkxa2p9ULrhQ7
YVDQude+71KgC72Eba0XgejVssQsQEr6D3xhmvm7NIpv/uEWmbZ0BgrrkoaV/9bu
gPHegiktVyUsOQkvTL+gepF419FjfurKYbCVkMxg4qGkTRRAfYimetpn3poKYl44
eTT6RCg1WhpJdUOuXnbNVcFIC5Z3ilHd56D81OZ9CC426Fgnjng=
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:45:25 2026 by rpki-client