
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft
File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json)
Hash identifier: z03E4ia1J7YhKQwTsDJG2DH/Yrp+l+PXnKJDhNhamPU=
Subject key identifier: 04:82:74:F2:03:9F:D3:43:E9:EC:C0:AA:44:90:E5:29:35:C0:A8:C2
Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E
Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E
Certificate serial: 19EBADE772C454D5D8DA353152E404790C48CDD9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 23:04:07 +0000
Manifest this update: Thu 24 Sep 2026 22:59:07 +0000
Manifest next update: Fri 25 Sep 2026 23:48:07 +0000
Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: JtOKi3+iLb1mJVj3/jzZcmgjA0trwLtX853fWkfCPd4=)
2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl
rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 23:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:eb:ad:e7:72:c4:54:d5:d8:da:35:31:52:e4:04:79:0c:48:cd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E
Validity
Not Before: Sep 24 22:59:07 2026 GMT
Not After : Sep 25 23:48:07 2026 GMT
Subject: CN=048274F2039FD343E9ECC0AA4490E52935C0A8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:24:3f:06:12:17:2f:9e:34:d1:d9:29:d3:
9f:bb:2d:02:0e:bc:11:2f:0c:b7:70:b6:eb:38:e2:
86:da:60:da:8e:8e:29:ee:85:ff:cd:e8:07:80:87:
9c:24:3f:2e:20:9a:37:15:01:c0:20:ca:67:25:cb:
1a:b4:5d:e1:32:ae:7b:47:e9:b9:fb:ab:e8:00:fa:
e2:ab:24:f9:cc:d9:4c:f9:8b:5e:0e:c9:0b:7c:5d:
27:2d:73:4b:fd:6c:ce:1f:82:d7:bd:0a:3c:e3:22:
84:33:77:61:ba:d0:c6:a7:6f:14:70:c4:63:60:7b:
a8:66:0b:1b:b8:b0:71:a3:cd:fb:96:73:6d:98:18:
dc:54:45:56:f7:d8:d6:ac:0d:bd:0c:64:8c:c3:33:
a2:05:6c:62:0b:c7:b3:c3:df:7c:d1:fd:dc:79:3f:
22:89:bd:94:b0:6c:1c:c5:15:08:a0:dd:1d:f2:83:
36:89:34:af:f7:27:91:25:53:9d:a3:19:9b:ad:f5:
c6:52:3d:b8:57:e4:64:b1:6e:cf:a2:b9:b0:ce:75:
20:8b:87:bb:70:4d:3d:3a:42:ea:e0:d5:de:61:f7:
0c:19:dd:d4:c1:a2:e0:14:6d:c1:7a:4c:dc:64:02:
51:5f:65:dd:90:63:43:5f:63:67:92:dd:4e:55:03:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:74:F2:03:9F:D3:43:E9:EC:C0:AA:44:90:E5:29:35:C0:A8:C2
X509v3 Authority Key Identifier:
keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:70:23:b6:d4:b6:c9:79:f9:e3:12:08:35:14:1a:ad:a0:5a:
e5:28:dd:f6:d2:a0:ac:7e:75:16:8d:f7:ac:34:c9:e8:c9:eb:
2a:9b:3c:d6:b1:c9:9f:de:1e:a0:07:3e:92:25:11:bf:13:f0:
9b:31:cb:65:49:e9:df:83:81:de:f4:79:1a:3c:d4:f0:3a:a9:
f6:16:f7:0d:bf:d1:10:78:31:53:e1:27:9b:00:ad:dc:13:65:
eb:84:94:88:85:ca:db:39:ad:95:07:f3:75:8d:78:c0:1f:60:
a0:b3:e5:3b:d8:81:eb:7b:0c:03:0d:be:98:ce:a8:e3:03:17:
49:f1:94:1e:21:95:18:3a:52:46:9c:a2:b4:9d:29:75:25:40:
55:9a:c3:30:ae:9b:67:1e:15:61:3a:a5:cc:f6:2f:e0:55:9b:
7b:23:fc:67:0d:12:d1:25:61:bb:a0:bd:e4:8a:e2:9e:f0:ac:
52:d0:0b:3c:57:1c:34:cd:d0:7b:ed:e6:e1:1f:85:2b:72:14:
89:74:ba:21:23:9a:4b:dc:d4:30:1c:ad:67:c7:4a:ec:fe:d6:
45:d0:54:00:49:a7:0b:bd:fa:e2:01:1c:af:4a:10:77:a9:ed:
94:ee:ec:66:09:20:51:ef:c8:ba:9d:48:7a:f8:3e:09:05:3d:
40:12:a4:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGeut53LEVNXY2jUxUuQEeQxIzdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx
QzdGNjUxRTAeFw0yNjA5MjQyMjU5MDdaFw0yNjA5MjUyMzQ4MDdaMDMxMTAvBgNV
BAMTKDA0ODI3NEYyMDM5RkQzNDNFOUVDQzBBQTQ0OTBFNTI5MzVDMEE4QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKSQ/BhIXL5400dkp05+7LQIO
vBEvDLdwtus44obaYNqOjinuhf/N6AeAh5wkPy4gmjcVAcAgymclyxq0XeEyrntH
6bn7q+gA+uKrJPnM2Uz5i14OyQt8XSctc0v9bM4fgte9CjzjIoQzd2G60ManbxRw
xGNge6hmCxu4sHGjzfuWc22YGNxURVb32NasDb0MZIzDM6IFbGILx7PD33zR/dx5
PyKJvZSwbBzFFQig3R3ygzaJNK/3J5ElU52jGZut9cZSPbhX5GSxbs+iubDOdSCL
h7twTT06Qurg1d5h9wwZ3dTBouAUbcF6TNxkAlFfZd2QY0NfY2eS3U5VA/5VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBIJ08gOf00Pp7MCqRJDlKTXAqMIwHwYDVR0j
BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0
QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2
NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5
MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG
OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAExwI7bUtsl5+eMSCDUUGq2gWuUo3fbSoKx+
dRaN96w0yejJ6yqbPNaxyZ/eHqAHPpIlEb8T8Jsxy2VJ6d+Dgd70eRo81PA6qfYW
9w2/0RB4MVPhJ5sArdwTZeuElIiFyts5rZUH83WNeMAfYKCz5TvYget7DAMNvpjO
qOMDF0nxlB4hlRg6UkacorSdKXUlQFWawzCum2ceFWE6pcz2L+BVm3sj/GcNEtEl
YbugveSK4p7wrFLQCzxXHDTN0Hvt5uEfhStyFIl0uiEjmkvc1DAcrWfHSuz+1kXQ
VABJpwu9+uIBHK9KEHep7ZTu7GYJIFHvyLqdSHr4PgkFPUASpPM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:42 2026 by rpki-client