
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json)
Hash identifier: I1PBAtHoonkgHQAN88QBmbj/M3h4Q2hfZQFdzqUH+Zs=
Subject key identifier: 74:C2:48:74:01:36:09:C1:10:8F:3C:98:56:2D:2C:AF:07:EF:90:57
Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Certificate serial: 4EEF862833734DDCF707D3785558355DD3E6B4D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:08:31 +0000
Manifest this update: Wed 13 May 2026 00:03:31 +0000
Manifest next update: Thu 14 May 2026 03:27:31 +0000
Files and hashes: 1: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=)
2: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=)
3: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=)
4: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=)
5: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=)
6: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: B6tcikiQIfVl2ctM+WN2AqiJVx4nYq8h8VUujnWZjbk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ef:86:28:33:73:4d:dc:f7:07:d3:78:55:58:35:5d:d3:e6:b4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Validity
Not Before: May 13 00:03:31 2026 GMT
Not After : May 14 03:27:31 2026 GMT
Subject: CN=74C24874013609C1108F3C98562D2CAF07EF9057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:c5:a5:5f:bc:c1:4a:b0:a8:07:ab:e7:27:
96:94:3e:56:e2:8e:49:a8:a0:91:a8:56:10:a1:96:
6d:7d:a5:e6:9f:a7:ef:28:c9:f7:68:af:12:2e:98:
19:67:0b:54:65:29:c8:a2:45:f1:d0:a7:74:e5:21:
b6:78:15:c8:47:fb:65:92:e0:d7:ab:c6:36:26:ff:
ab:d2:e5:00:5f:d6:b1:a6:fb:02:ee:8e:a8:d8:97:
95:4c:8b:38:89:2d:9b:a8:66:c1:cf:7a:47:bc:de:
7d:7a:93:82:60:19:28:cc:41:3b:05:4f:00:9d:3b:
4d:dc:ef:5f:41:05:5c:05:dd:3d:8a:26:0f:37:09:
e0:e0:e3:de:c4:e2:2d:12:f3:1a:67:ae:09:72:83:
01:66:60:4d:a6:bd:3d:66:76:25:68:01:8b:83:26:
cd:d1:fc:6b:c0:20:47:fa:52:aa:12:79:77:6e:f6:
aa:2d:0c:b3:e9:8c:39:a6:04:6c:38:e4:4b:57:dd:
e4:8d:2f:aa:a6:c2:24:26:3e:74:3a:20:d8:ff:4f:
e7:1c:99:a6:ee:23:94:bd:e4:47:a3:6f:01:e5:eb:
f8:24:5d:4e:e3:29:9a:2c:8a:8f:ad:34:42:38:27:
09:be:82:36:c8:86:c5:54:22:e3:6c:4b:58:aa:aa:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:48:74:01:36:09:C1:10:8F:3C:98:56:2D:2C:AF:07:EF:90:57
X509v3 Authority Key Identifier:
keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:b1:e1:31:10:a0:8b:ae:94:ee:f5:c4:f3:d3:39:5c:d9:
9e:00:c3:d3:ba:3d:2a:04:db:85:a4:0a:cf:30:ec:c5:90:b7:
8e:6d:01:05:e6:70:42:cd:09:28:29:ca:1e:bb:3d:bb:41:24:
f5:02:6d:64:a9:93:66:d3:fe:22:e0:63:80:83:c0:51:4c:df:
2f:12:e8:b9:a2:4e:e7:75:34:11:94:f6:7e:1f:4b:8b:e4:e1:
f2:92:9a:a1:bf:f1:81:6f:59:57:30:8b:0f:b0:ee:c6:9c:96:
53:cc:ac:47:7f:38:e7:ff:a0:56:b2:f1:70:e2:d8:b9:90:27:
4c:aa:65:df:e4:a0:b3:f6:1a:96:08:fd:63:93:71:2f:4a:b7:
3a:2b:93:89:5c:3c:9f:e7:02:c8:78:df:97:cf:33:94:e1:b3:
8e:76:36:43:dc:b1:e6:9b:64:6f:15:de:93:57:fc:48:31:eb:
4e:13:0d:bb:b7:d0:c9:a2:bf:aa:92:c7:a6:80:06:eb:c7:5f:
4f:2b:1a:f5:f5:36:d1:03:08:18:c7:e9:a1:33:73:07:4d:5b:
0b:25:1a:5b:fc:01:03:58:58:64:ab:cc:ad:71:0b:f9:0f:50:
9e:42:30:93:05:4c:fd:a7:42:d3:9e:9b:d5:c1:e9:df:4b:ca:
90:40:70:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTu+GKDNzTdz3B9N4VVg1XdPmtNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1
ODJDQ0UxMTAeFw0yNjA1MTMwMDAzMzFaFw0yNjA1MTQwMzI3MzFaMDMxMTAvBgNV
BAMTKDc0QzI0ODc0MDEzNjA5QzExMDhGM0M5ODU2MkQyQ0FGMDdFRjkwNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rsWlX7zBSrCoB6vnJ5aUPlbi
jkmooJGoVhChlm19peafp+8oyfdorxIumBlnC1RlKciiRfHQp3TlIbZ4FchH+2WS
4NerxjYm/6vS5QBf1rGm+wLujqjYl5VMiziJLZuoZsHPeke83n16k4JgGSjMQTsF
TwCdO03c719BBVwF3T2KJg83CeDg497E4i0S8xpnrglygwFmYE2mvT1mdiVoAYuD
Js3R/GvAIEf6UqoSeXdu9qotDLPpjDmmBGw45EtX3eSNL6qmwiQmPnQ6INj/T+cc
mabuI5S95EejbwHl6/gkXU7jKZosio+tNEI4Jwm+gjbIhsVUIuNsS1iqquZ1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdMJIdAE2CcEQjzyYVi0srwfvkFcwHwYDVR0j
BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4
NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND
RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm
OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0
MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAV8seExEKCLrpTu9cTz0zlc2Z4Aw9O6PSoE
24WkCs8w7MWQt45tAQXmcELNCSgpyh67PbtBJPUCbWSpk2bT/iLgY4CDwFFM3y8S
6LmiTud1NBGU9n4fS4vk4fKSmqG/8YFvWVcwiw+w7sacllPMrEd/OOf/oFay8XDi
2LmQJ0yqZd/koLP2GpYI/WOTcS9Ktzork4lcPJ/nAsh435fPM5Ths452NkPcseab
ZG8V3pNX/Egx604TDbu30Mmiv6qSx6aABuvHX08rGvX1NtEDCBjH6aEzcwdNWwsl
Glv8AQNYWGSrzK1xC/kPUJ5CMJMFTP2nQtOem9XB6d9LypBAcOg=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:55 2026 by rpki-client