
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft
File: 3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft (raw, json)
Hash identifier: vJ9L2U5Kjc2UA85R20EKqxIdOV8bQnF0OFYpQNbO9uA=
Subject key identifier: 61:89:0F:78:A9:EF:A7:D4:15:00:98:15:AB:9F:DD:8B:DD:C2:98:0C
Authority key identifier: 30:13:F8:63:B7:24:65:F2:3D:BE:01:F2:D4:82:B7:AC:D5:CB:21:02
Certificate issuer: /CN=3013F863B72465F23DBE01F2D482B7ACD5CB2102
Certificate serial: 7FFB15B8CE24A0D8B04D5402A071F0FB06EA6B59
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3013F863B72465F23DBE01F2D482B7ACD5CB2102.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 15:34:59 +0000
Manifest this update: Thu 24 Sep 2026 15:29:59 +0000
Manifest next update: Fri 25 Sep 2026 17:49:59 +0000
Files and hashes: 1: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: 96xn4Z4fHNhe//Bx3elNei7tFB+vdRhBVoho694JstE=)
2: 3013F863B72465F23DBE01F2D482B7ACD5CB2102.crl (hash: 3jTAPfAQ3CSS27yZlm6gfzu5RjvkKE/nJf+Ty2WuPzg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.crl
rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3013F863B72465F23DBE01F2D482B7ACD5CB2102.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fb:15:b8:ce:24:a0:d8:b0:4d:54:02:a0:71:f0:fb:06:ea:6b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3013F863B72465F23DBE01F2D482B7ACD5CB2102
Validity
Not Before: Sep 24 15:29:59 2026 GMT
Not After : Sep 25 17:49:59 2026 GMT
Subject: CN=61890F78A9EFA7D415009815AB9FDD8BDDC2980C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:70:67:d1:e0:3d:a0:22:66:ac:59:24:00:
af:79:73:b7:65:55:f9:bb:aa:bc:fb:82:6e:cd:7a:
37:da:ba:b3:bb:6b:5e:67:f9:b0:4c:08:90:9d:18:
57:fd:18:43:5b:66:b5:f9:d8:26:72:85:fa:3e:1b:
6a:d7:4e:00:03:b0:ad:c0:53:2b:a4:fd:53:8b:41:
f1:cb:65:ec:0c:cd:63:f8:9f:e6:29:91:98:a6:49:
8b:8a:05:f8:8c:a8:b4:79:43:b3:9d:88:ee:04:3d:
c6:4f:d6:dc:65:03:3b:fe:56:22:ab:27:91:86:66:
60:c2:f2:50:91:5e:8c:b3:c1:f3:d4:76:0b:70:42:
5a:40:70:9f:3c:ec:90:e8:e5:9d:d6:16:4d:b4:2c:
ca:e3:94:06:d8:28:be:e1:a2:e3:c4:7b:ce:22:39:
83:3d:ed:45:ad:0e:6d:d0:42:a7:18:ae:3f:2a:e9:
1a:4d:76:03:5e:e8:3c:76:f7:93:33:24:f9:cf:85:
e0:f3:41:b1:b8:ae:ed:b1:4c:06:e0:df:7d:1c:e4:
3a:a6:d3:74:98:14:6a:c8:2f:f6:74:90:66:d2:50:
1c:2e:4c:ef:fe:e9:19:3b:59:d1:e3:98:d3:9f:11:
3d:55:f6:1f:23:ed:41:71:bb:e3:89:2a:02:f8:cd:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:89:0F:78:A9:EF:A7:D4:15:00:98:15:AB:9F:DD:8B:DD:C2:98:0C
X509v3 Authority Key Identifier:
keyid:30:13:F8:63:B7:24:65:F2:3D:BE:01:F2:D4:82:B7:AC:D5:CB:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3013F863B72465F23DBE01F2D482B7ACD5CB2102.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:09:ab:dd:a1:ba:18:ea:aa:1a:92:2c:4c:33:4f:28:fb:
6a:7c:c3:1a:e5:c5:8b:56:73:e9:45:e4:da:bd:1e:c7:14:6e:
ee:fa:2d:b8:04:a1:9c:df:f3:b2:21:6b:29:52:b8:ab:26:00:
b1:7b:5e:5e:d2:3e:b8:d1:07:b1:ac:52:e3:e3:cf:42:4d:28:
92:13:09:aa:20:54:96:82:25:cd:4f:ef:68:f2:ff:35:1e:15:
3e:45:69:39:9b:dd:6e:da:5d:51:bc:f4:ca:94:b9:5a:b8:77:
04:ef:f3:5a:4e:d5:ea:a2:3c:07:fd:55:c2:aa:10:8f:85:59:
32:c5:1b:45:16:50:4d:bd:cf:5d:26:34:cb:47:33:e2:e0:2f:
6d:ad:c6:55:69:b5:f0:a0:e3:f3:ef:09:ac:8a:71:9b:08:55:
8f:03:c2:d8:81:0e:96:43:a9:f0:05:35:c3:da:e7:77:d9:40:
65:f5:a3:2b:e8:48:75:05:68:f6:27:04:6e:08:34:86:78:9d:
d3:49:0f:71:54:30:2e:53:ea:cb:84:6c:a7:14:de:29:61:b0:
a9:9d:df:b3:bc:ad:74:a2:09:f1:a5:2b:14:2c:d9:27:d4:4d:
e8:09:3e:87:9d:64:b7:22:2e:78:4d:75:aa:ca:31:14:73:b7:
4d:2d:3d:4d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf/sVuM4koNiwTVQCoHHw+wbqa1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxM0Y4NjNCNzI0NjVGMjNEQkUwMUYyRDQ4MkI3QUNE
NUNCMjEwMjAeFw0yNjA5MjQxNTI5NTlaFw0yNjA5MjUxNzQ5NTlaMDMxMTAvBgNV
BAMTKDYxODkwRjc4QTlFRkE3RDQxNTAwOTgxNUFCOUZERDhCRERDMjk4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnHBn0eA9oCJmrFkkAK95c7dl
Vfm7qrz7gm7NejfaurO7a15n+bBMCJCdGFf9GENbZrX52CZyhfo+G2rXTgADsK3A
Uyuk/VOLQfHLZewMzWP4n+YpkZimSYuKBfiMqLR5Q7OdiO4EPcZP1txlAzv+ViKr
J5GGZmDC8lCRXoyzwfPUdgtwQlpAcJ887JDo5Z3WFk20LMrjlAbYKL7houPEe84i
OYM97UWtDm3QQqcYrj8q6RpNdgNe6Dx295MzJPnPheDzQbG4ru2xTAbg330c5Dqm
03SYFGrIL/Z0kGbSUBwuTO/+6Rk7WdHjmNOfET1V9h8j7UFxu+OJKgL4zYcrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYYkPeKnvp9QVAJgVq5/di93CmAwwHwYDVR0j
BBgwFoAUMBP4Y7ckZfI9vgHy1IK3rNXLIQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzZlNDBhOTgtOTNlZi00YWY4LWE0MzYtNDY5NzQwMTU0NzgyLzAvMzAxM0Y4NjNC
NzI0NjVGMjNEQkUwMUYyRDQ4MkI3QUNENUNCMjEwMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMDEzRjg2M0I3MjQ2NUYyM0RCRTAxRjJENDgyQjdBQ0Q1Q0Iy
MTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0
MzYtNDY5NzQwMTU0NzgyLzAvMzAxM0Y4NjNCNzI0NjVGMjNEQkUwMUYyRDQ4MkI3
QUNENUNCMjEwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHJmCavdoboY6qoakixMM08o+2p8wxrlxYtW
c+lF5Nq9HscUbu76LbgEoZzf87IhaylSuKsmALF7Xl7SPrjRB7GsUuPjz0JNKJIT
CaogVJaCJc1P72jy/zUeFT5FaTmb3W7aXVG89MqUuVq4dwTv81pO1eqiPAf9VcKq
EI+FWTLFG0UWUE29z10mNMtHM+LgL22txlVptfCg4/PvCayKcZsIVY8DwtiBDpZD
qfAFNcPa53fZQGX1oyvoSHUFaPYnBG4INIZ4ndNJD3FUMC5T6suEbKcU3ilhsKmd
37O8rXSiCfGlKxQs2SfUTegJPoedZLciLnhNdarKMRRzt00tPU0=
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:42 2026 by rpki-client