
$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json)
Hash identifier: hLXKphb5ybjxoQxvCtJs13WpPZcyA4Sb5gAE8QinXLY=
Subject key identifier: 34:1F:4F:85:04:BF:A4:89:71:8F:F8:46:6E:B1:5F:34:C8:36:C5:D4
Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C
Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C
Certificate serial: 5EA58023BE5348BC451CE38B582C893AD3AA06CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 12:09:59 +0000
Manifest this update: Thu 23 Jul 2026 12:04:59 +0000
Manifest next update: Fri 24 Jul 2026 13:25:59 +0000
Files and hashes: 1: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=)
2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: ym60F4yjp2BcF6ViLYDXfYmTZP4FFutoN11dcsJ75Vk=)
3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=)
4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl
rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a5:80:23:be:53:48:bc:45:1c:e3:8b:58:2c:89:3a:d3:aa:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C
Validity
Not Before: Jul 23 12:04:59 2026 GMT
Not After : Jul 24 13:25:59 2026 GMT
Subject: CN=341F4F8504BFA489718FF8466EB15F34C836C5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:2f:d7:d3:51:2a:5b:6b:b7:13:cf:4e:0d:
66:2a:21:c9:4a:84:b8:52:cf:83:af:df:ce:d4:ca:
9d:df:48:36:34:2c:2c:a0:67:88:2f:4e:84:23:5f:
a7:eb:46:c5:89:d5:67:9d:e2:dd:54:cc:46:f0:91:
a6:94:14:bb:46:87:7b:8d:ae:dc:ac:d7:4c:32:84:
0b:12:21:99:ca:b9:72:6a:70:f1:da:ff:13:3b:78:
f6:7b:19:69:ce:82:3a:a4:24:c1:5f:e8:e1:4d:d9:
23:28:c4:d6:02:c1:5d:9a:51:0e:88:40:02:92:72:
78:2f:5d:06:a0:25:00:e9:25:80:be:20:46:eb:92:
b2:08:8f:7c:d0:b5:77:44:a3:55:b1:30:f9:5c:72:
23:1d:f7:0c:96:da:62:f2:81:e7:8a:e3:4f:e0:82:
eb:2e:00:23:e5:c2:78:3a:b1:84:a5:38:12:32:d6:
f1:aa:5e:2b:62:d8:95:30:00:29:22:47:05:d5:b5:
fe:ee:cd:24:55:34:3e:7d:78:35:99:3d:f8:0a:46:
49:d1:42:c7:ea:06:ed:e7:87:b2:2e:ff:fd:ed:09:
f9:f9:9b:88:28:01:cd:00:0b:df:c6:70:ef:48:6b:
82:36:26:39:c5:8b:04:97:bf:a2:d3:28:49:4d:ab:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1F:4F:85:04:BF:A4:89:71:8F:F8:46:6E:B1:5F:34:C8:36:C5:D4
X509v3 Authority Key Identifier:
keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:7d:98:34:65:39:27:9a:f1:26:83:b4:a8:12:60:07:54:
56:c1:ba:b3:89:7a:75:19:4a:1d:47:80:b4:93:6a:7a:2e:f6:
e2:5d:a5:a2:88:fa:77:d7:ef:87:e8:49:ce:68:20:5a:56:26:
9d:a1:0b:ad:70:7c:36:6f:09:a1:67:2b:bd:5f:95:9f:25:73:
79:7d:3c:e9:26:ad:3f:66:f4:a5:66:4a:29:32:34:af:f2:86:
ff:2e:ef:17:23:c7:a1:51:c9:a7:5f:23:05:14:d6:c5:bd:9d:
ed:95:b8:77:08:98:0a:71:87:7b:d0:3b:05:4e:58:48:dc:9f:
69:fa:7d:a3:40:d6:39:42:df:33:7e:f3:ce:1a:7e:49:66:40:
39:73:b6:02:86:ba:ef:9e:19:2c:54:40:2a:43:a6:2e:16:48:
8e:c3:50:43:4c:bf:ed:b2:90:19:1e:75:8b:9c:17:18:cc:0e:
67:ac:6c:75:3c:1f:97:6e:ea:6e:cc:e2:2e:35:c1:e9:56:cd:
10:13:8d:89:b9:f9:6c:ad:e7:c8:37:1b:d8:cf:d9:cb:24:2e:
03:19:f2:6d:ee:6a:8a:f6:58:91:2c:62:39:7b:a2:c2:43:43:
45:e4:7b:ce:6c:12:98:45:1d:70:a0:09:1f:cc:12:2d:78:40:
07:14:4a:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXqWAI75TSLxFHOOLWCyJOtOqBsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx
MjczMDUzQzAeFw0yNjA3MjMxMjA0NTlaFw0yNjA3MjQxMzI1NTlaMDMxMTAvBgNV
BAMTKDM0MUY0Rjg1MDRCRkE0ODk3MThGRjg0NjZFQjE1RjM0QzgzNkM1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wS/X01EqW2u3E89ODWYqIclK
hLhSz4Ov387Uyp3fSDY0LCygZ4gvToQjX6frRsWJ1Wed4t1UzEbwkaaUFLtGh3uN
rtys10wyhAsSIZnKuXJqcPHa/xM7ePZ7GWnOgjqkJMFf6OFN2SMoxNYCwV2aUQ6I
QAKScngvXQagJQDpJYC+IEbrkrIIj3zQtXdEo1WxMPlcciMd9wyW2mLygeeK40/g
gusuACPlwng6sYSlOBIy1vGqXiti2JUwACkiRwXVtf7uzSRVND59eDWZPfgKRknR
QsfqBu3nh7Iu//3tCfn5m4goAc0AC9/GcO9Ia4I2JjnFiwSXv6LTKElNq56jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNB9PhQS/pIlxj/hGbrFfNMg2xdQwHwYDVR0j
BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB
QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw
NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi
ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1
OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG8sfZg0ZTknmvEmg7SoEmAHVFbBurOJenUZ
Sh1HgLSTanou9uJdpaKI+nfX74foSc5oIFpWJp2hC61wfDZvCaFnK71flZ8lc3l9
POkmrT9m9KVmSikyNK/yhv8u7xcjx6FRyadfIwUU1sW9ne2VuHcImApxh3vQOwVO
WEjcn2n6faNA1jlC3zN+884afklmQDlztgKGuu+eGSxUQCpDpi4WSI7DUENMv+2y
kBkedYucFxjMDmesbHU8H5du6m7M4i41welWzRATjYm5+Wyt58g3G9jP2cskLgMZ
8m3uaor2WJEsYjl7osJDQ0Xke85sEphFHXCgCR/MEi14QAcUSjU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:37:48 2026 by rpki-client