
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
File: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json)
Hash identifier: A7zTnCVuT8mPO82mf/cDhUwcPk6sZuehgBJSvBeSHFY=
Subject key identifier: 2C:31:00:D8:59:67:7F:C1:F6:6E:12:82:AA:89:47:D8:B9:E1:E0:95
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial: 2A2D3B0EFF5197001F5BD9063A60BC8E2CFB241E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 21:53:07 +0000
Manifest this update: Wed 23 Sep 2026 21:48:07 +0000
Manifest next update: Fri 25 Sep 2026 01:52:07 +0000
Files and hashes: 1: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=)
2: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=)
3: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=)
4: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=)
5: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=)
6: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=)
7: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=)
8: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=)
9: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=)
10: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=)
11: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=)
12: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: tpSxFPfvB+QUbMpIjjg4z4oOdwmNexeqDTDULqok/Ig=)
13: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=)
14: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=)
15: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=)
16: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2d:3b:0e:ff:51:97:00:1f:5b:d9:06:3a:60:bc:8e:2c:fb:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Validity
Not Before: Sep 23 21:48:07 2026 GMT
Not After : Sep 25 01:52:07 2026 GMT
Subject: CN=2C3100D859677FC1F66E1282AA8947D8B9E1E095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:e2:be:40:4e:00:0a:87:9e:c1:5e:2c:6d:
77:ae:68:63:bd:a6:6f:99:ef:f5:4e:93:4c:8e:dd:
a2:ff:be:09:21:0b:6a:0c:30:ec:95:aa:42:53:65:
8f:fe:15:4b:34:0c:fc:e7:de:21:14:5b:53:28:fa:
83:c6:bc:2f:b0:85:fa:39:9b:e6:00:28:1c:bc:9d:
fb:ef:42:8d:22:25:07:d6:95:5e:15:2b:4d:70:05:
fe:d7:72:5d:f1:4e:c0:29:37:67:b2:29:d6:0a:57:
0c:9a:b5:22:bd:5b:27:4f:25:c3:b4:7e:49:5c:e6:
f5:ca:cf:d3:d2:fd:4b:83:e8:3d:67:32:5b:22:67:
0b:59:aa:50:07:cb:58:0b:fe:6a:44:e1:83:21:97:
db:4b:7a:08:ca:c2:9e:b4:0b:03:53:65:8b:c4:74:
8b:40:b5:6e:df:8b:f5:b2:bd:42:40:94:bc:a5:9f:
7f:4c:d0:95:4c:67:54:e3:8b:48:2b:ad:dd:a6:1e:
5f:25:b1:9a:5e:2a:cd:c3:d1:4e:43:27:d8:c6:af:
17:25:96:e6:43:36:b8:6d:e0:f8:66:d8:47:9e:bb:
a1:79:26:e2:06:50:24:ff:69:a8:a1:c9:d8:df:fd:
4f:84:09:ee:a2:96:17:fb:5f:21:15:90:40:c9:49:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:00:D8:59:67:7F:C1:F6:6E:12:82:AA:89:47:D8:B9:E1:E0:95
X509v3 Authority Key Identifier:
keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:eb:33:1c:e2:1d:84:2c:00:e6:f8:1b:7f:c0:0c:39:a5:54:
76:18:1a:71:c1:09:db:a0:c2:b6:80:6b:76:38:3a:bf:e9:78:
83:db:fc:41:89:6b:ee:be:18:a7:24:65:f0:67:15:b2:32:ba:
88:12:4b:a1:de:13:7a:7b:23:7c:a8:3c:6e:fe:cb:42:59:ad:
0d:ae:29:90:d9:4e:33:f1:78:92:73:4e:57:eb:c3:ed:a4:83:
9d:39:4c:d0:bc:3e:02:ef:77:82:c9:48:3c:95:91:ec:cd:02:
e6:65:e8:fb:90:fd:5b:17:be:2c:bc:98:1d:03:da:97:a2:2a:
e4:20:3e:14:be:f8:85:cd:65:a4:0c:c6:d1:ab:bb:2a:82:7c:
49:a5:1b:b6:91:cd:c8:19:9c:cf:e1:30:d6:96:2b:10:78:42:
d7:ba:02:f2:93:ae:e0:d7:1a:66:33:bc:a7:fb:3f:79:91:05:
98:d4:19:6a:1f:61:28:76:58:1d:44:de:d5:f4:a4:d9:e1:94:
3d:46:51:87:6e:33:f9:6d:64:13:07:e2:63:09:e6:7d:9b:6b:
e7:b9:b4:ef:c7:f4:f7:e5:f2:e0:c4:bd:c4:d0:3f:8e:4b:86:
d7:f7:c3:d1:9c:5f:03:b0:91:58:61:f2:29:bb:38:c8:bb:a2:
88:ae:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:50 2026 by rpki-client