
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft
File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json)
Hash identifier: W5W++wpwsN8gR7tJIB1ndem9vaPSGg8oqwtE8Slk3Nw=
Subject key identifier: 35:9A:B4:8F:DB:1A:F4:89:E2:47:61:C4:09:42:96:96:3A:BF:3B:27
Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27
Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27
Certificate serial: 7448A2AEE7B4BF1BAA1C105FF4D242AA49EB28F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 04:55:27 +0000
Manifest this update: Fri 24 Jul 2026 04:50:27 +0000
Manifest next update: Sat 25 Jul 2026 08:48:27 +0000
Files and hashes: 1: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: 24At3uNXlnNqoCc2Mfcs2H+E5RMmyjRbApPf+Jhictw=)
2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=)
3: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl
rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:48:a2:ae:e7:b4:bf:1b:aa:1c:10:5f:f4:d2:42:aa:49:eb:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27
Validity
Not Before: Jul 24 04:50:27 2026 GMT
Not After : Jul 25 08:48:27 2026 GMT
Subject: CN=359AB48FDB1AF489E24761C4094296963ABF3B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:1c:fc:50:9c:15:a6:0b:97:ec:4b:0a:ca:
e8:b6:b6:17:aa:5b:a0:ad:2a:3f:c1:65:83:2b:e0:
73:78:9e:59:c6:b1:0f:d0:ed:11:39:f6:70:41:05:
84:3c:be:10:d8:7d:eb:51:d4:00:26:82:7a:e4:5d:
48:e0:f8:f4:07:38:9e:72:3c:2e:6a:d9:91:33:9e:
c2:ee:38:6c:0e:4e:42:d3:ef:bc:31:37:40:8a:cf:
1d:81:a7:d9:e5:cb:02:f5:87:5c:62:14:8e:12:a7:
6e:09:27:5b:45:82:7e:54:05:5d:a7:6c:38:ca:54:
fa:32:10:88:d7:9b:fe:19:bd:99:0d:cd:c2:d2:91:
f6:2d:6e:5c:17:89:12:da:f0:22:9c:6f:9a:be:11:
91:38:81:64:28:bc:ed:63:8c:2a:bd:3c:81:45:ea:
71:1d:9c:37:1b:57:3f:80:33:d3:1b:33:12:1d:e0:
97:1d:09:d2:0b:cf:97:0f:f5:89:42:dc:83:57:20:
84:37:1d:cb:d8:c2:e2:80:df:ad:e7:3e:bb:22:92:
f8:0c:c0:71:d6:d1:ef:14:7a:0e:05:ee:57:47:03:
eb:fc:34:c0:de:33:94:cf:e1:a5:07:ca:04:ac:1b:
a2:e0:b9:18:31:9d:62:ce:46:f6:a4:37:a6:03:ac:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:B4:8F:DB:1A:F4:89:E2:47:61:C4:09:42:96:96:3A:BF:3B:27
X509v3 Authority Key Identifier:
keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f7:ac:41:f5:e3:bb:fa:d9:0e:98:55:d3:29:32:8b:a3:41:
03:61:ec:dd:ae:3b:eb:41:3b:74:45:17:b2:eb:b0:e9:4f:5a:
f4:00:23:58:10:74:c6:1f:ce:a9:98:32:40:65:b9:ea:7c:96:
ea:4e:5b:ed:63:74:06:a6:82:d9:ed:e3:ee:9a:ce:14:02:95:
41:ad:47:05:8b:c1:84:29:d0:0d:eb:54:57:eb:20:66:64:83:
99:30:0d:10:e9:7d:3f:41:63:70:c9:01:c7:a2:6a:a9:68:85:
62:ee:97:f5:d6:d3:f1:ec:75:32:87:65:ac:95:18:f8:c6:66:
d0:08:9a:e2:5b:09:34:b3:d3:d1:8a:80:10:fd:16:1e:a1:5d:
82:fc:cb:e6:2a:b0:ef:6b:0d:51:1b:37:ab:64:28:38:c5:03:
4d:ba:22:21:d6:ad:b8:21:00:01:61:03:2c:a8:b2:cd:bc:83:
31:40:f5:1d:cc:09:69:c4:ba:13:c7:db:bf:99:dd:29:36:9c:
1d:69:a5:f9:6b:94:71:e8:73:73:aa:22:5a:6d:fd:9d:b1:8e:
cf:d8:a1:ed:29:8c:f1:00:c5:9c:07:ec:00:a3:9f:5e:78:e8:
aa:e5:88:68:ca:f6:49:5b:c4:4b:a9:1c:d6:fd:89:02:93:54:
71:b8:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:09 2026 by rpki-client