
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
File: 3B15BA656D26B1B7E87FC6809B5DC98888377711.mft (raw, json)
Hash identifier: nAHZG9kG5tn7WWK6cFj2kR87V0y7/uL/d+GtUOHNSUI=
Subject key identifier: 07:14:E7:5A:23:EF:F3:DB:F1:E5:49:A2:2A:38:19:73:97:BE:B0:9F
Authority key identifier: 3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11
Certificate issuer: /CN=3B15BA656D26B1B7E87FC6809B5DC98888377711
Certificate serial: 63700EFF2BCBA0B33ACA1E056AB4477390623756
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:11:59 +0000
Manifest this update: Thu 23 Jul 2026 22:06:59 +0000
Manifest next update: Fri 24 Jul 2026 22:44:59 +0000
Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: ORkadPFDAal3pRKFSqyDMiG09OIpPciiMF7Guuyi4C0=)
2: 3B15BA656D26B1B7E87FC6809B5DC98888377711.crl (hash: mNbRLSuf31wfO1CyeROTfX73OQtl5UStZbc2uU5LLRM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl
rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:70:0e:ff:2b:cb:a0:b3:3a:ca:1e:05:6a:b4:47:73:90:62:37:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B15BA656D26B1B7E87FC6809B5DC98888377711
Validity
Not Before: Jul 23 22:06:59 2026 GMT
Not After : Jul 24 22:44:59 2026 GMT
Subject: CN=0714E75A23EFF3DBF1E549A22A38197397BEB09F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:7c:20:59:9f:bb:4a:49:3f:7b:d0:5d:bf:
5b:a4:d3:59:c6:8b:dc:77:99:4f:ee:8a:15:e3:95:
e6:7c:b2:56:96:aa:63:48:70:71:ce:d0:bf:80:fb:
1d:20:1e:ec:1d:26:c3:f0:bd:c4:f2:3e:19:74:6a:
09:f9:29:16:c8:16:e2:23:58:6d:b9:4c:6b:ad:24:
41:b8:b2:65:a1:9a:4d:d4:3a:0a:b9:cc:c9:93:94:
cf:c9:d4:11:c8:f9:ec:df:f2:c2:c8:08:75:89:cb:
19:d1:69:8f:d6:a6:81:6c:9b:98:1d:7f:37:90:15:
a0:b3:f9:7c:f8:bf:2b:62:f5:9d:b5:b8:4d:e5:56:
ed:7b:0f:fe:65:63:99:98:70:cd:2c:07:3f:d3:de:
0f:65:1d:cc:db:1d:3a:3d:6d:43:d7:e6:4c:da:4c:
39:09:9a:b1:e4:ef:f7:ca:f1:d7:25:53:62:dc:3d:
0a:af:40:98:1f:2f:e7:ad:6e:d0:c6:c3:30:64:56:
47:55:74:07:44:5a:10:2f:9e:f3:f1:ef:31:83:59:
e1:de:48:5f:88:ef:c7:8e:14:be:4d:4d:ca:bb:18:
a0:d3:ff:dd:ee:14:f9:22:e0:71:35:6a:8b:30:42:
30:a4:7e:de:7e:28:37:61:7c:b2:80:b4:6c:1e:81:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:E7:5A:23:EF:F3:DB:F1:E5:49:A2:2A:38:19:73:97:BE:B0:9F
X509v3 Authority Key Identifier:
keyid:3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:13:77:94:8f:1d:7c:7a:d5:9e:5c:43:80:dd:34:32:c0:
d3:ce:bd:60:9e:29:cf:de:41:a7:49:59:73:e8:77:60:63:8f:
41:51:6a:d1:8e:25:15:2c:6f:f3:46:96:df:e6:b3:62:16:d0:
1a:e8:e1:dc:7a:56:f3:c5:77:06:58:59:72:30:40:7e:10:83:
d5:f2:80:c8:85:0c:15:54:f9:d9:ed:cb:d0:48:2d:fc:6e:9a:
e7:77:ca:74:96:0b:a9:99:77:87:6a:7f:32:87:9f:62:73:6f:
d6:d1:ad:01:19:e9:f9:7e:3a:dc:fe:6d:d0:01:ef:e5:a8:23:
90:9b:21:d0:1f:4d:40:db:5f:3a:63:8e:9e:32:72:46:6c:25:
3c:64:7f:c5:57:41:b5:69:e5:c9:ba:40:0d:a6:18:ae:1b:7c:
64:24:16:f4:05:ec:7a:14:83:1d:50:74:7a:e6:9e:e6:33:f4:
b9:c5:15:f3:d2:c7:cf:a6:c5:a2:36:eb:68:8e:d8:32:b1:6d:
8f:57:f8:f6:f6:a0:6f:93:d7:25:a5:8e:38:af:45:da:0d:a4:
1b:61:50:f7:77:e7:59:2a:72:de:f7:aa:b4:25:92:98:08:59:
13:c1:47:17:99:d4:4c:48:ae:07:6d:96:27:aa:46:cb:a8:d1:
bc:a4:52:4d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY3AO/yvLoLM6yh4FarRHc5BiN1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IxNUJBNjU2RDI2QjFCN0U4N0ZDNjgwOUI1REM5ODg4
ODM3NzcxMTAeFw0yNjA3MjMyMjA2NTlaFw0yNjA3MjQyMjQ0NTlaMDMxMTAvBgNV
BAMTKDA3MTRFNzVBMjNFRkYzREJGMUU1NDlBMjJBMzgxOTczOTdCRUIwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs33wgWZ+7Skk/e9Bdv1uk01nG
i9x3mU/uihXjleZ8slaWqmNIcHHO0L+A+x0gHuwdJsPwvcTyPhl0agn5KRbIFuIj
WG25TGutJEG4smWhmk3UOgq5zMmTlM/J1BHI+ezf8sLICHWJyxnRaY/WpoFsm5gd
fzeQFaCz+Xz4vyti9Z21uE3lVu17D/5lY5mYcM0sBz/T3g9lHczbHTo9bUPX5kza
TDkJmrHk7/fK8dclU2LcPQqvQJgfL+etbtDGwzBkVkdVdAdEWhAvnvPx7zGDWeHe
SF+I78eOFL5NTcq7GKDT/93uFPki4HE1aoswQjCkft5+KDdhfLKAtGwegb8/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBxTnWiPv89vx5UmiKjgZc5e+sJ8wHwYDVR0j
BBgwFoAUOxW6ZW0msbfof8aAm13JiIg3dxEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDUzZTRhZjUtYWFmNS00NmNlLWIxMTktZDdlNzZkYWUyMGI4LzAvM0IxNUJBNjU2
RDI2QjFCN0U4N0ZDNjgwOUI1REM5ODg4ODM3NzcxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQjE1QkE2NTZEMjZCMUI3RTg3RkM2ODA5QjVEQzk4ODg4Mzc3
NzExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx
MTktZDdlNzZkYWUyMGI4LzAvM0IxNUJBNjU2RDI2QjFCN0U4N0ZDNjgwOUI1REM5
ODg4ODM3NzcxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF5iE3eUjx18etWeXEOA3TQywNPOvWCeKc/e
QadJWXPod2Bjj0FRatGOJRUsb/NGlt/ms2IW0Bro4dx6VvPFdwZYWXIwQH4Qg9Xy
gMiFDBVU+dnty9BILfxumud3ynSWC6mZd4dqfzKHn2Jzb9bRrQEZ6fl+Otz+bdAB
7+WoI5CbIdAfTUDbXzpjjp4yckZsJTxkf8VXQbVp5cm6QA2mGK4bfGQkFvQF7HoU
gx1QdHrmnuYz9LnFFfPSx8+mxaI262iO2DKxbY9X+Pb2oG+T1yWljjivRdoNpBth
UPd351kqct73qrQlkpgIWRPBRxeZ1ExIrgdtlieqRsuo0bykUk0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:38 2026 by rpki-client