
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json)
Hash identifier: mUx+CxXraqud4GYmeU1hURL7Em+i5h15GU8lB8k69Io=
Subject key identifier: A0:57:71:CB:3B:06:80:AC:8A:06:60:8B:61:9D:69:24:19:8D:C9:67
Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Certificate serial: 692EE6E7E44EABCCCAFFF741C9CC55EAD8039ADA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
Manifest number: A3
Signing time: Tue 01 Sep 2026 03:07:40 +0000
Manifest this update: Tue 01 Sep 2026 03:02:40 +0000
Manifest next update: Wed 02 Sep 2026 07:05:40 +0000
Files and hashes: 1: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: I2yVHCypUtryW8zVwgXkB/m+CfjPqblAwjvnV/dT4LU=)
2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 02:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2e:e6:e7:e4:4e:ab:cc:ca:ff:f7:41:c9:cc:55:ea:d8:03:9a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Validity
Not Before: Sep 1 03:02:40 2026 GMT
Not After : Sep 2 07:05:40 2026 GMT
Subject: CN=A05771CB3B0680AC8A06608B619D6924198DC967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:50:d2:47:03:61:2c:61:8f:b0:b4:42:0f:
36:1a:3a:60:f9:09:dc:cb:66:ae:55:97:74:42:62:
ec:4d:45:ca:83:d1:2f:49:d0:a2:bb:3c:97:7a:07:
ef:8a:69:0e:6c:10:f4:ed:a5:c4:d4:8d:75:b7:c0:
30:39:7b:28:7a:9d:40:49:96:e6:e9:97:21:cf:f5:
55:9d:1b:cd:84:0f:8f:61:8b:40:12:66:33:a2:26:
c3:fb:fe:95:ba:78:35:fc:03:cc:ba:da:3a:45:d7:
e4:76:8b:74:0e:ae:89:67:48:73:aa:df:6d:02:e9:
73:4d:5c:8d:75:89:f3:19:0e:05:81:22:60:57:e2:
52:f1:3b:f6:3a:a3:ca:76:94:c6:5d:bc:9a:63:11:
8f:22:db:87:c8:74:24:4e:2f:22:18:a2:ac:4a:6a:
e4:10:0f:d1:5a:08:dc:01:a1:d6:1c:4d:b1:c7:5f:
29:53:4f:15:c6:4c:11:22:43:e9:22:ec:2b:44:b7:
4b:fd:e6:93:fe:92:ba:c9:17:1e:a4:87:40:20:23:
8b:87:01:bb:80:8e:4e:dd:8a:c8:e7:59:0d:c8:05:
f5:73:46:5c:8a:7b:21:3e:d2:d2:92:1c:22:31:a1:
43:b1:a0:99:40:8d:2f:e1:6f:b1:8f:c5:95:ab:2a:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:71:CB:3B:06:80:AC:8A:06:60:8B:61:9D:69:24:19:8D:C9:67
X509v3 Authority Key Identifier:
keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:aa:24:95:4f:79:d3:cd:f8:ad:bc:ae:e4:46:a1:99:98:
9a:ba:40:5e:b2:36:b7:ba:8c:7b:a3:57:cc:f5:f5:0c:18:99:
f7:fb:a3:bb:de:af:05:8d:e1:cd:00:ac:25:90:43:f1:0a:0e:
a7:9f:89:88:b7:bb:92:41:d9:90:c7:46:d0:54:c0:d5:2c:3a:
a2:c4:45:52:24:61:4d:55:0a:a6:41:9f:77:0f:41:fe:5b:73:
27:b4:cc:07:f4:8e:68:89:34:9c:6e:0a:b6:93:8f:7e:6c:48:
63:16:27:e2:ba:ba:e1:81:5b:b0:5e:30:38:d9:93:15:c9:20:
92:8b:82:19:5b:fd:e5:0c:21:17:5e:95:c7:01:de:c0:2f:bf:
d4:fe:02:3c:38:4c:ce:29:d2:bc:15:99:1b:0f:57:d0:77:b4:
0d:35:dd:87:d2:fd:fb:99:26:7a:64:37:71:63:2e:b8:2e:fd:
1d:ff:86:e3:61:73:21:dd:2d:35:9d:9c:62:a6:32:e6:47:49:
e1:7f:03:26:d3:49:45:60:6e:db:73:e1:8a:15:c0:0b:dd:ea:
c4:b2:b6:be:19:73:f6:b9:9d:52:79:a7:fc:cd:6a:99:d8:68:
18:f0:a8:64:75:ac:5f:71:52:2f:d6:01:8a:60:0c:0e:5b:05:
bf:87:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:21:51 2026 by rpki-client