
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
File: 3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json)
Hash identifier: HfGs1XKrhdk6RDlkw/pJhrwF7vlbIuIyAtmewRSpKQE=
Subject key identifier: DF:5C:52:FC:D4:A0:2E:0F:75:41:A4:52:6B:66:EF:29:5D:24:57:66
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 1B30075339DEECF2A2AEE31D8CCD1CF35BB12EDD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
Manifest number: 10
Signing time: Wed 13 May 2026 05:48:58 +0000
Manifest this update: Wed 13 May 2026 05:43:58 +0000
Manifest next update: Thu 14 May 2026 08:37:58 +0000
Files and hashes: 1: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=)
2: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: TBq9jzMlheuhdsodUZ5n3dn29Crmmf+gujjgGRI9KuQ=)
3: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=)
4: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:30:07:53:39:de:ec:f2:a2:ae:e3:1d:8c:cd:1c:f3:5b:b1:2e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: May 13 05:43:58 2026 GMT
Not After : May 14 08:37:58 2026 GMT
Subject: CN=DF5C52FCD4A02E0F7541A4526B66EF295D245766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:79:e6:26:86:49:ae:3c:69:3f:17:cc:16:
41:66:40:6c:a6:56:01:f2:d6:be:61:fc:3b:12:99:
07:ae:c7:d1:b6:f8:f4:01:a3:ec:7b:fe:8e:25:90:
e5:d8:5e:c2:6d:e3:95:e4:69:5a:4f:71:a6:c4:ab:
2c:a4:20:7f:ab:a1:d1:23:04:87:b2:5e:94:6d:c6:
c8:24:4d:1b:17:5f:cc:f0:d3:46:eb:53:1f:b1:72:
7c:ee:74:2d:c3:61:36:60:f9:d1:e0:74:23:39:6a:
99:d1:49:84:89:44:fe:86:f0:38:ba:28:47:ee:4c:
2b:e3:c0:c1:0f:e5:7e:66:64:3b:e5:9d:e6:72:dd:
03:55:e3:0b:c5:b8:09:2d:4b:d5:8e:89:1d:12:cd:
ee:4a:ca:24:43:9c:ab:3b:0b:d0:97:74:53:19:27:
75:68:3b:c1:5b:fa:18:b8:00:b6:64:de:ed:90:50:
6f:02:fc:4a:46:a1:cb:e3:da:bf:dd:6e:37:7d:65:
9a:b6:de:8c:6b:2f:74:12:27:b2:00:c0:df:6c:30:
3d:44:1d:8f:ed:72:2d:c5:3d:e6:e5:03:c6:75:b1:
e5:10:b7:39:99:b4:7d:38:8e:f9:55:22:55:51:d9:
6b:b6:31:0a:02:2b:05:54:b6:e5:ce:5e:fe:c9:c9:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:52:FC:D4:A0:2E:0F:75:41:A4:52:6B:66:EF:29:5D:24:57:66
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:99:65:6e:49:61:9f:60:1f:6d:12:4b:32:dd:67:96:f7:bf:
9b:09:a9:1e:92:64:fb:4c:69:2d:dd:cf:74:bd:b2:ab:e8:bd:
54:59:0b:1f:13:74:75:b9:d9:41:44:00:0a:30:6d:48:be:f0:
65:18:4f:c0:6c:85:22:37:48:aa:5a:09:b2:8a:dd:72:d1:50:
f6:a8:5b:19:b6:0f:ef:08:73:83:a4:d7:0c:db:21:16:34:60:
21:b4:12:e7:af:4b:63:d4:d0:84:2f:c6:54:8f:65:1c:36:7c:
89:9f:a0:b6:20:b2:bc:7e:17:e3:99:75:79:22:0d:f8:1e:80:
65:e3:59:99:ea:32:d9:8c:28:e3:82:db:1f:76:0e:9d:4f:b2:
51:c0:78:00:00:4e:3a:c3:b1:b6:82:e2:24:2b:24:d6:5b:e3:
3d:5f:71:db:13:98:39:2e:9d:6e:fb:5a:40:16:98:35:22:d3:
ab:69:00:2d:5f:79:fc:18:9e:fe:05:be:ed:6f:c9:cb:48:34:
55:78:35:5b:53:cb:b0:87:40:21:32:f6:25:8f:98:a5:2a:b1:
24:c0:db:ee:bc:c8:e1:ad:65:13:64:30:f2:cd:b5:d7:d2:5d:
72:38:6f:01:ce:0b:3b:a4:85:6b:fb:b0:5e:5c:9a:d5:f4:7d:
e7:f8:fa:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGzAHUzne7PKiruMdjM0c81uxLt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyRjZCRjBENDAzNTg4MzAyMjg2NjcwQkY4NDhBNzhD
QkRGQ0MwMzAeFw0yNjA1MTMwNTQzNThaFw0yNjA1MTQwODM3NThaMDMxMTAvBgNV
BAMTKERGNUM1MkZDRDRBMDJFMEY3NTQxQTQ1MjZCNjZFRjI5NUQyNDU3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39nnmJoZJrjxpPxfMFkFmQGym
VgHy1r5h/DsSmQeux9G2+PQBo+x7/o4lkOXYXsJt45XkaVpPcabEqyykIH+rodEj
BIeyXpRtxsgkTRsXX8zw00brUx+xcnzudC3DYTZg+dHgdCM5apnRSYSJRP6G8Di6
KEfuTCvjwMEP5X5mZDvlneZy3QNV4wvFuAktS9WOiR0Sze5KyiRDnKs7C9CXdFMZ
J3VoO8Fb+hi4ALZk3u2QUG8C/EpGocvj2r/dbjd9ZZq23oxrL3QSJ7IAwN9sMD1E
HY/tci3FPeblA8Z1seUQtzmZtH04jvlVIlVR2Wu2MQoCKwVUtuXOXv7JyQalAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU31xS/NSgLg91QaRSa2bvKV0kV2YwHwYDVR0j
BBgwFoAUPi9r8NQDWIMCKGZwv4SKeMvfzAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzZlZTdhNWYtNTEyMS00MTgxLWE2MzUtMTIxYjZlNjlhZDU5LzAvM0UyRjZCRjBE
NDAzNTg4MzAyMjg2NjcwQkY4NDhBNzhDQkRGQ0MwMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRTJGNkJGMEQ0MDM1ODgzMDIyODY2NzBCRjg0OEE3OENCREZD
QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2
MzUtMTIxYjZlNjlhZDU5LzAvM0UyRjZCRjBENDAzNTg4MzAyMjg2NjcwQkY4NDhB
NzhDQkRGQ0MwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAECZZW5JYZ9gH20SSzLdZ5b3v5sJqR6SZPtM
aS3dz3S9sqvovVRZCx8TdHW52UFEAAowbUi+8GUYT8BshSI3SKpaCbKK3XLRUPao
Wxm2D+8Ic4Ok1wzbIRY0YCG0EuevS2PU0IQvxlSPZRw2fImfoLYgsrx+F+OZdXki
DfgegGXjWZnqMtmMKOOC2x92Dp1PslHAeAAATjrDsbaC4iQrJNZb4z1fcdsTmDku
nW77WkAWmDUi06tpAC1fefwYnv4Fvu1vyctINFV4NVtTy7CHQCEy9iWPmKUqsSTA
2+68yOGtZRNkMPLNtdfSXXI4bwHOCzukhWv7sF5cmtX0fef4+oI=
-----END CERTIFICATE-----
Generated at Wed May 13 09:57:50 2026 by rpki-client