
$ rpki-client -vvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft
File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json)
Hash identifier: Dn98+T/CRRGB3uwkVffJQhRe6S8GkDYX5FRDS67mzxQ=
Subject key identifier: C2:7E:47:32:8F:8C:89:84:3D:B4:BE:EB:17:7A:A0:00:BA:2C:C2:23
Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3
Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3
Certificate serial: 7B348C53EE4F873A7C124546453BDBFA655CEC8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 08:09:52 +0000
Manifest this update: Thu 23 Jul 2026 08:04:52 +0000
Manifest next update: Fri 24 Jul 2026 11:44:52 +0000
Files and hashes: 1: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=)
2: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: yBim6GCXxV2BPZYft6lWewfrMw9xud5cuCbVG9VIAeI=)
3: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=)
4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl
rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 11:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:34:8c:53:ee:4f:87:3a:7c:12:45:46:45:3b:db:fa:65:5c:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3
Validity
Not Before: Jul 23 08:04:52 2026 GMT
Not After : Jul 24 11:44:52 2026 GMT
Subject: CN=C27E47328F8C89843DB4BEEB177AA000BA2CC223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:90:c2:35:c1:6d:a3:03:e5:e2:34:10:ff:cd:
2e:cd:cc:b6:68:c9:ba:c3:93:c3:00:91:00:53:08:
69:24:0a:30:00:14:53:96:33:85:0a:bc:27:6d:03:
ab:dd:20:a0:07:3e:0c:4f:a2:5b:d2:70:5f:1f:2b:
9b:28:7f:8d:81:61:83:c7:57:76:97:59:86:a8:6c:
d5:96:02:d4:8e:28:0e:81:37:52:c2:b0:9d:64:59:
3c:5a:a7:7b:94:23:cb:60:8d:a6:ef:f0:40:df:e5:
eb:0d:6a:da:05:63:dc:79:d6:47:97:da:5c:e5:7b:
4f:78:25:af:cd:2a:2f:48:34:3d:d2:d7:35:46:c4:
e6:16:b9:59:84:f9:ec:ee:f3:ea:43:6c:1f:04:86:
56:8e:8c:09:ff:2e:b2:47:04:c3:a1:41:54:bd:1b:
b3:2d:40:8c:39:9c:eb:60:98:9e:9f:d9:3f:08:ec:
49:78:0e:2f:92:c9:d5:ec:18:92:f3:15:53:cd:42:
20:f8:48:ca:70:c2:62:f4:9c:b4:d1:f6:75:05:ea:
8d:8d:6e:d3:e9:54:c5:20:da:5f:31:59:ad:ac:70:
55:00:e1:b1:b8:24:24:9a:f6:4b:aa:6b:8b:1b:56:
f6:5d:96:36:cf:f5:1b:73:36:91:10:2b:8c:65:82:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:47:32:8F:8C:89:84:3D:B4:BE:EB:17:7A:A0:00:BA:2C:C2:23
X509v3 Authority Key Identifier:
keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b1:47:d5:cf:84:6f:29:d1:5a:8b:6a:e9:4d:6c:22:42:a6:
df:8c:0d:b0:53:51:36:b7:af:d0:9e:2b:43:79:b1:36:4a:98:
8a:7b:7d:38:97:07:a9:6d:0a:57:cc:45:96:c5:bd:aa:8f:22:
00:f5:e2:5c:55:f5:43:34:fb:63:7b:6c:c1:cb:6d:64:8c:d2:
3e:82:08:b1:ef:cb:92:ab:a9:c4:27:08:7e:b7:14:82:55:4a:
ce:0d:43:87:78:bb:12:d8:41:50:37:33:7e:2c:4c:46:7d:6d:
c6:f0:62:05:3a:b9:f2:92:87:df:62:46:87:e4:32:8c:69:e3:
ca:2c:b8:6b:69:20:f9:8b:ce:4b:0f:5a:38:57:e4:10:c1:64:
60:7b:3c:fb:f9:00:a9:5f:f9:3f:1b:ba:a1:2d:7f:a9:f8:82:
11:1e:38:ed:a9:61:75:79:fc:47:eb:ef:53:2e:2b:f5:fa:b1:
93:30:f4:36:e6:41:dc:4b:81:f7:80:66:ff:b5:f9:8f:df:08:
25:d4:ae:f1:af:8c:bb:ec:d8:4a:4c:df:4c:50:53:34:2c:c9:
ff:fe:ab:91:9e:70:32:f7:81:0c:38:e8:3c:27:85:fd:ba:f3:
38:2f:3f:f2:0a:68:a5:e0:51:26:9d:3e:2b:b8:45:89:6f:87:
54:d9:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:13:54 2026 by rpki-client