
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
File: 3262903B69AE7339AAB9320A98EA5D1800FEC705.mft (raw, json)
Hash identifier: 8DsToo2CITZkBZK6MHuGQxy6avJATxz0OPLq5IPg71U=
Subject key identifier: EF:DD:37:A6:72:A7:5E:8B:BA:7E:DB:37:DB:9A:9A:DB:68:60:78:08
Authority key identifier: 32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
Certificate issuer: /CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Certificate serial: 1E6E448FF237B3685A647EB4A1CDB778672CC4A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 15:24:49 +0000
Manifest this update: Thu 24 Sep 2026 15:19:49 +0000
Manifest next update: Fri 25 Sep 2026 15:56:49 +0000
Files and hashes: 1: 3262903B69AE7339AAB9320A98EA5D1800FEC705.crl (hash: odwy5ZO+FTRKJX4nDZ1Q7kJRHr6uxNrMNnjmpdRhHOE=)
2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: mvp2yuPOBwuKJ3KSamrBGxDk5I0RR5jAQfoIbHtIVlo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6e:44:8f:f2:37:b3:68:5a:64:7e:b4:a1:cd:b7:78:67:2c:c4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Validity
Not Before: Sep 24 15:19:49 2026 GMT
Not After : Sep 25 15:56:49 2026 GMT
Subject: CN=EFDD37A672A75E8BBA7EDB37DB9A9ADB68607808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:09:96:7e:22:8e:75:bd:77:b7:18:3b:df:
63:e8:98:37:1b:57:d6:64:1e:dd:6d:92:d0:eb:7a:
8a:b8:2e:b4:20:2c:10:d8:15:f3:0a:e7:d1:93:b5:
88:61:99:be:3b:c2:71:40:cc:c6:2b:8c:77:20:83:
64:a0:00:91:90:24:d5:3e:4d:9b:98:eb:70:e9:b5:
b1:48:af:f3:dd:97:71:d6:b6:05:73:af:f4:3e:21:
d6:10:19:5b:ac:14:d1:65:47:88:91:22:46:3c:a3:
12:dc:76:e0:46:f0:41:51:aa:60:d6:ad:17:5a:56:
43:a5:17:dc:2f:6c:35:c9:b6:42:0a:36:53:e6:b2:
52:94:2f:00:98:18:cb:5e:40:c9:56:3f:71:f9:39:
ce:fc:45:f9:a4:d5:e2:01:d1:97:79:ca:ed:1e:44:
09:fa:fb:9f:db:3a:1b:ab:64:a4:05:82:3c:74:1d:
5b:ee:10:6d:77:f9:22:60:68:96:fd:e6:a9:a4:e5:
05:6a:ef:8a:fb:62:f3:31:01:f9:22:62:a1:83:ea:
27:e9:f6:92:96:ae:59:29:4d:0b:da:85:ac:da:43:
16:ee:89:9f:80:6a:59:7e:d1:8a:56:71:4a:af:21:
e1:b8:b7:3f:b1:00:18:db:a8:d4:7b:11:fe:4f:12:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:37:A6:72:A7:5E:8B:BA:7E:DB:37:DB:9A:9A:DB:68:60:78:08
X509v3 Authority Key Identifier:
keyid:32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1b:fc:14:eb:f2:8e:51:fa:65:48:82:25:a2:b6:b1:7c:92:
33:8b:ea:06:81:7a:df:b2:34:34:2e:a2:33:2b:09:7a:23:1d:
36:16:89:86:c2:dc:58:b5:cc:cc:8c:4d:02:f8:33:81:28:9d:
b0:3f:db:fb:91:d4:8f:e5:e0:a1:8d:f0:f7:1b:25:68:07:3d:
41:3d:31:bc:08:68:ac:8e:d1:84:d5:76:c7:ee:99:39:f8:1e:
2d:f4:4f:88:ed:4a:62:c0:81:9b:b4:37:a4:10:5b:24:6e:14:
ce:e8:bc:32:99:9b:06:cd:43:36:7e:b2:92:6c:9e:a6:fd:3c:
ae:93:45:48:04:ed:57:8e:ce:31:34:55:71:29:52:72:17:5a:
8b:d8:95:de:4e:be:d0:3d:05:6c:12:7a:9f:e6:2e:ad:f4:90:
ad:87:6d:45:2a:0e:0f:67:c5:7a:ea:08:93:3e:48:62:f7:b1:
29:79:c4:4c:7d:06:1f:37:eb:fa:58:7f:6f:cd:90:0a:23:d9:
cf:3f:cd:1d:4c:84:62:47:68:a6:a9:71:1d:86:d5:3b:75:15:
8d:66:77:8b:7c:0d:dd:6b:da:03:75:ab:96:69:d0:ca:43:bb:
86:2d:3c:95:aa:cc:3e:70:61:fe:cc:5e:70:83:13:31:09:58:
42:f5:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:09:36 2026 by rpki-client