
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
File: 3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json)
Hash identifier: mpVTuM34LaJE+3U3YaQEI8AbHSxiT8/ZGAaAyn0etAc=
Subject key identifier: E3:4F:D2:73:76:DA:F6:98:86:65:56:72:87:57:FD:7B:88:5E:2E:A4
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 4F17494F5A1797769497B77FC04C990E4634A219
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:09:18 +0000
Manifest this update: Fri 24 Jul 2026 00:04:18 +0000
Manifest next update: Sat 25 Jul 2026 01:58:18 +0000
Files and hashes: 1: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: 4xudhzN8N2A+uI37M8njweMuuMzYg35Zg7bEMBje4xE=)
2: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=)
3: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=)
4: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:17:49:4f:5a:17:97:76:94:97:b7:7f:c0:4c:99:0e:46:34:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: Jul 24 00:04:18 2026 GMT
Not After : Jul 25 01:58:18 2026 GMT
Subject: CN=E34FD27376DAF698866556728757FD7B885E2EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:44:ee:95:b9:3f:58:ec:4b:55:7a:81:b9:
72:54:33:cc:7d:a2:14:82:ec:b6:4f:35:25:f3:88:
3c:9b:8e:9d:41:10:84:8e:f5:bd:fe:12:6f:81:3c:
0b:0c:f5:20:28:30:a8:3a:5f:e1:f9:86:ab:29:ba:
4a:a5:ad:f0:64:97:2a:7d:73:6b:4f:3f:2b:2b:8d:
ee:54:97:88:01:ec:46:e6:d3:82:0a:5e:b7:37:8e:
7c:6f:9c:bb:2e:1d:89:8b:3a:1a:94:2b:05:ee:45:
43:58:f0:93:1c:fd:f7:d6:0b:e8:c3:67:eb:b2:03:
be:d2:bd:63:79:26:41:8a:e7:1f:8c:a9:f2:ce:5e:
ad:aa:7a:f4:33:5b:28:75:e2:0d:3f:79:68:d2:f1:
6d:14:c2:ad:c9:3e:87:1b:d0:01:d4:c7:1f:8d:43:
b1:07:5d:82:73:c8:da:68:da:cd:f2:38:c3:a1:b9:
11:f2:88:2a:ae:d4:73:6b:b3:ed:e1:bd:9f:31:a0:
6e:1c:37:80:3a:3a:bb:4d:df:b1:37:96:22:86:0e:
66:90:6a:04:8d:25:c4:ad:b4:98:3e:b1:27:dd:46:
ff:5f:4e:96:11:98:d3:f5:2e:78:5e:03:a8:91:d9:
48:93:12:c9:57:e8:12:c6:76:24:15:bd:4f:0d:20:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:D2:73:76:DA:F6:98:86:65:56:72:87:57:FD:7B:88:5E:2E:A4
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:e1:00:bc:02:65:c4:e0:ee:14:56:ee:a2:2c:ac:9e:0a:
b2:b1:da:91:78:d0:05:3c:53:3b:a2:2f:bc:c7:b9:7f:95:8a:
3c:5d:dd:c4:ce:f8:b0:45:8c:e4:46:f7:0c:7b:0f:12:1a:c6:
fc:c4:66:4b:82:9c:47:59:28:a2:3a:ea:0f:e2:40:1d:cf:5c:
18:0a:4f:00:cc:8d:21:22:e3:b7:30:38:19:3d:2a:dd:9b:24:
f2:5d:b2:28:d8:9c:d1:b4:99:80:35:34:7e:3b:02:ed:be:72:
da:70:bd:0d:ad:78:bd:e1:2f:45:32:5d:06:d1:d7:53:0a:f0:
e1:ee:aa:b4:8d:43:0f:82:69:a7:e0:3a:ba:fa:7e:75:e1:a9:
11:c0:ab:ce:7f:b8:70:a2:63:e2:cd:d3:99:36:b4:84:01:ed:
be:d4:9f:06:1a:33:f7:e3:72:04:94:73:1a:8b:75:b3:b3:6c:
1a:f0:14:e0:64:61:59:62:4d:b9:92:58:d3:04:7f:8c:75:8e:
9d:b3:7d:ed:e4:8a:23:c5:e3:95:d8:7c:56:81:f3:73:b4:1f:
9c:df:04:bf:bf:ea:4a:41:76:93:18:c5:c7:22:c5:b2:62:24:
d5:2c:74:42:91:85:c4:3d:e5:b5:d8:38:ed:b3:3c:85:47:1d:
f9:25:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:52:40 2026 by rpki-client