
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json)
Hash identifier: MBNjPdp4EGdcQUUXm8NfHTUpyw4nh3zSGsRtVjxMXnw=
Subject key identifier: 50:C4:5F:5E:CF:E2:EF:72:9F:1D:F0:86:2A:A0:DC:41:EF:C8:49:77
Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1
Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1
Certificate serial: 29E8E8FE034DFE0000EC38BA50CB4EECBDD1E6F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:36:07 +0000
Manifest this update: Tue 12 May 2026 05:31:07 +0000
Manifest next update: Wed 13 May 2026 09:04:07 +0000
Files and hashes: 1: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: L2hK5VKxKRXdc1okCb6R4VOgcNdLkz1HHFpgOc2gBQY=)
2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl
rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e8:e8:fe:03:4d:fe:00:00:ec:38:ba:50:cb:4e:ec:bd:d1:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1
Validity
Not Before: May 12 05:31:07 2026 GMT
Not After : May 13 09:04:07 2026 GMT
Subject: CN=50C45F5ECFE2EF729F1DF0862AA0DC41EFC84977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:8c:3e:19:38:a9:ec:72:ff:cc:26:fe:47:
93:a0:65:3f:b1:c6:33:7d:55:3b:30:fa:a0:32:39:
4d:92:dd:a1:bf:62:09:3a:80:48:b2:e6:e1:3a:7b:
21:20:00:6c:52:65:d7:ec:4a:08:a6:d9:05:7c:51:
7e:23:e2:f7:34:0f:11:8b:4e:fe:26:78:6c:8b:38:
a6:a8:f0:82:5e:7e:e2:24:d1:e2:95:85:63:67:ca:
84:dc:bb:b0:7a:0c:0b:10:e7:5a:f4:7a:86:38:29:
bf:68:30:bd:07:56:a7:53:3f:3c:1f:19:a1:2c:7e:
19:8f:bb:f2:27:55:90:f2:90:d2:f9:e6:86:e8:6b:
7b:1b:4d:38:02:d8:bc:00:5b:ce:ea:f6:f8:6d:22:
e9:bd:49:ef:8b:5c:da:3a:c5:7e:64:84:e0:d2:7c:
fd:08:b9:6a:be:58:16:c8:e2:a3:8b:fd:87:a8:66:
d6:04:3e:54:68:20:90:84:5c:0b:fd:2b:2c:3c:3d:
e8:3b:c4:86:9c:5f:a8:b0:c4:42:ec:2f:41:74:46:
53:f1:71:7d:3c:da:a4:0c:ef:5c:b1:f6:f4:cc:ff:
02:f8:47:63:91:25:34:d1:9e:d1:b8:d3:35:7e:9d:
85:f6:7a:8f:77:6d:a8:0d:9a:0c:5c:04:a6:4e:db:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C4:5F:5E:CF:E2:EF:72:9F:1D:F0:86:2A:A0:DC:41:EF:C8:49:77
X509v3 Authority Key Identifier:
keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:9a:97:c5:d7:45:04:14:6c:10:b8:ff:df:6d:99:50:7e:
f6:5b:83:e7:9a:e7:f9:ae:72:b9:15:5f:bd:0b:51:94:ed:24:
b7:31:79:1e:4d:bf:73:20:1d:33:1e:37:f4:8a:6a:fb:89:41:
55:10:95:a5:11:b9:d4:bf:08:5a:91:05:ed:91:32:79:34:24:
55:14:a4:49:90:66:0c:db:f5:c2:c8:b8:d2:19:b1:cc:33:0f:
36:a4:8b:64:d1:a4:72:ba:76:d6:fc:e1:d9:71:a6:a1:13:59:
37:05:eb:0d:cf:86:ae:78:c9:a2:b5:93:6f:70:e6:77:1c:17:
1e:e7:a7:1b:ae:fb:05:3b:58:de:53:75:e1:17:a4:bd:e1:65:
2e:e4:a9:e2:28:d6:2c:7a:1c:4d:d5:07:4e:fa:1c:c9:6e:73:
e1:5b:f4:8e:4a:66:47:f4:25:4e:9b:80:e1:ef:ad:2e:7d:f6:
10:2c:fc:81:1a:f5:8e:bf:f9:19:91:6b:8f:13:50:57:1f:e5:
1b:9d:30:a2:a6:6f:3e:1f:cc:b2:a4:32:56:a4:58:dd:6c:6b:
57:66:a0:ab:01:17:1f:03:c8:9c:79:8a:26:2a:6e:a1:c8:ff:
5a:ad:88:87:bf:8c:1f:7d:8d:7e:70:5d:8c:e3:83:00:dd:64:
a8:85:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:14 2026 by rpki-client