
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
File: 3B740E02ADF50A090229B5DFEE5D48777D442C83.mft (raw, json)
Hash identifier: 4BLjGrROM/JkmBheWD8Sv18o7q9tfK6mTMxHHjte4Wk=
Subject key identifier: 74:FB:29:ED:E7:B8:A1:F6:35:CF:85:1D:3B:22:74:A4:7B:4A:48:32
Authority key identifier: 3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83
Certificate issuer: /CN=3B740E02ADF50A090229B5DFEE5D48777D442C83
Certificate serial: 7F60A9002E1DF94D5A955C42A6729BA14B943B86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:06:53 +0000
Manifest this update: Fri 24 Jul 2026 02:01:53 +0000
Manifest next update: Sat 25 Jul 2026 03:49:53 +0000
Files and hashes: 1: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: i56VPm8geIM7DmKA6wVbD62/QX+ViWuBIOqGaxDkwxE=)
2: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: t900xpPMJSc/gFkRKXE//s7FBpHQK9U7wVdaIlj2010=)
3: 3B740E02ADF50A090229B5DFEE5D48777D442C83.crl (hash: lJ/5F96k2PEjaha9/LoUVC2Egl8+6um8jXe4nHdr8F0=)
4: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: A64nz+PX97FI4XaYpiwCqqmRUX6++gtRUre5i1lF2QA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl
rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:60:a9:00:2e:1d:f9:4d:5a:95:5c:42:a6:72:9b:a1:4b:94:3b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B740E02ADF50A090229B5DFEE5D48777D442C83
Validity
Not Before: Jul 24 02:01:53 2026 GMT
Not After : Jul 25 03:49:53 2026 GMT
Subject: CN=74FB29EDE7B8A1F635CF851D3B2274A47B4A4832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:2e:04:13:fc:e4:ca:81:bb:bf:55:df:bb:
9b:f1:9c:7f:12:49:2f:19:ef:c4:15:1e:41:95:89:
98:94:aa:f4:db:a7:a9:a7:11:01:43:a2:18:d2:3c:
5e:57:f2:6d:d8:73:c4:72:6d:d7:b7:a5:38:94:da:
82:94:4b:9a:34:f6:08:3f:4f:25:87:05:a9:b8:d3:
7b:31:da:8e:cc:a9:d5:d9:bc:3a:56:b6:ea:ff:e2:
3b:96:5b:51:ae:04:9d:6f:ec:aa:c9:9e:04:f5:7c:
07:69:5d:31:ba:36:85:e0:9a:60:ea:32:ff:fb:98:
9e:8c:61:5c:77:76:54:4f:5d:bd:b7:20:50:e5:5c:
00:aa:04:1f:f0:7b:47:24:40:4b:d5:0f:82:a8:a8:
ea:4a:09:3f:f7:fc:3e:35:e7:33:a3:3e:28:3d:8b:
c1:38:42:9b:69:c8:44:49:81:3d:3c:ea:1a:d2:c3:
14:2b:ac:b0:23:8a:d8:43:42:1a:7e:71:36:7e:d3:
49:1a:d1:ab:57:3b:29:db:e8:42:90:ca:87:35:22:
c9:b4:e2:af:45:34:a6:53:69:6d:82:bd:2b:ed:a8:
e2:c9:77:95:f6:e9:84:5b:fc:21:c6:5d:d4:2b:37:
39:fb:6c:0c:2d:f5:ee:90:e8:56:a5:fa:d6:0a:f4:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:29:ED:E7:B8:A1:F6:35:CF:85:1D:3B:22:74:A4:7B:4A:48:32
X509v3 Authority Key Identifier:
keyid:3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:99:72:ff:13:bf:bd:a6:aa:fc:d5:a0:69:60:b6:6d:45:05:
34:6b:aa:17:e6:c7:81:01:5a:e6:3b:ca:65:6a:95:d8:f2:63:
3c:15:bf:fd:d0:f7:15:c4:f9:5e:3c:e5:3c:91:93:50:75:29:
35:f0:ce:94:24:fc:5c:e3:af:b3:45:c5:8b:3b:69:09:73:6a:
3c:6a:49:6b:d2:bc:5a:26:e4:37:af:40:72:32:09:6f:95:d8:
d6:53:2b:30:e4:d8:94:4c:95:77:df:5d:31:dd:70:c2:d5:eb:
42:79:4c:5d:d7:d7:b0:c2:34:28:fe:d0:ce:20:86:b5:90:63:
c2:17:b2:a5:43:00:ab:18:d5:fe:73:d5:da:85:f4:37:33:21:
6a:c5:db:a9:a8:7f:0d:e9:10:20:c0:b4:ee:4c:a6:8a:64:b1:
20:cc:fb:6e:57:25:04:ec:52:96:24:a2:d2:61:38:eb:a0:6f:
c3:81:7c:9c:52:be:56:2d:5b:e4:70:f4:b0:13:a5:20:f9:cb:
fd:69:66:23:47:6c:e9:58:95:b5:3b:50:3a:e3:7e:5b:d6:f0:
c1:82:36:96:97:8e:cf:0d:77:86:fd:4a:60:0b:1a:04:80:5c:
09:08:c9:ab:2e:83:cb:00:04:f7:9b:8a:5d:a9:b0:06:83:b2:
1c:26:3e:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf2CpAC4d+U1alVxCpnKboUuUO4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3
RDQ0MkM4MzAeFw0yNjA3MjQwMjAxNTNaFw0yNjA3MjUwMzQ5NTNaMDMxMTAvBgNV
BAMTKDc0RkIyOUVERTdCOEExRjYzNUNGODUxRDNCMjI3NEE0N0I0QTQ4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2S4EE/zkyoG7v1Xfu5vxnH8S
SS8Z78QVHkGViZiUqvTbp6mnEQFDohjSPF5X8m3Yc8Rybde3pTiU2oKUS5o09gg/
TyWHBam403sx2o7MqdXZvDpWtur/4juWW1GuBJ1v7KrJngT1fAdpXTG6NoXgmmDq
Mv/7mJ6MYVx3dlRPXb23IFDlXACqBB/we0ckQEvVD4KoqOpKCT/3/D415zOjPig9
i8E4QptpyERJgT086hrSwxQrrLAjithDQhp+cTZ+00ka0atXOynb6EKQyoc1Ism0
4q9FNKZTaW2CvSvtqOLJd5X26YRb/CHGXdQrNzn7bAwt9e6Q6Fal+tYK9BzhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdPsp7ee4ofY1z4UdOyJ0pHtKSDIwHwYDVR0j
BBgwFoAUO3QOAq31CgkCKbXf7l1Id31ELIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2MwZDQwYmMtOTNjOC00MTViLWI2YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJB
REY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3RDQ0MkM4My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQjc0MEUwMkFERjUwQTA5MDIyOUI1REZFRTVENDg3NzdENDQy
QzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2
YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4
Nzc3RDQ0MkM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFKZcv8Tv72mqvzVoGlgtm1FBTRrqhfmx4EB
WuY7ymVqldjyYzwVv/3Q9xXE+V485TyRk1B1KTXwzpQk/Fzjr7NFxYs7aQlzajxq
SWvSvFom5DevQHIyCW+V2NZTKzDk2JRMlXffXTHdcMLV60J5TF3X17DCNCj+0M4g
hrWQY8IXsqVDAKsY1f5z1dqF9DczIWrF26mofw3pECDAtO5MpopksSDM+25XJQTs
UpYkotJhOOugb8OBfJxSvlYtW+Rw9LATpSD5y/1pZiNHbOlYlbU7UDrjflvW8MGC
NpaXjs8Nd4b9SmALGgSAXAkIyasug8sABPebil2psAaDshwmPlk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:02 2026 by rpki-client