
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
File: 3B6C011787F4528DAFAEE19B8408D9405F030E61.mft (raw, json)
Hash identifier: Baf2gocomlEcg3rpq5WBbwy6AuHLUS3myqyOPf9pWHc=
Subject key identifier: 44:1F:58:8A:E7:B3:CD:A0:F0:0E:84:13:44:D5:7B:37:29:DF:4D:28
Authority key identifier: 3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
Certificate issuer: /CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
Certificate serial: 678EEC962F3593EF3BB97B6A94AF8AD6D745ACC0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
Manifest number: 09
Signing time: Fri 27 Feb 2026 22:42:36 +0000
Manifest this update: Fri 27 Feb 2026 22:37:36 +0000
Manifest next update: Tue 03 Mar 2026 07:49:36 +0000
Files and hashes: 1: 3B6C011787F4528DAFAEE19B8408D9405F030E61.crl (hash: 0+3CkCgT1Uu9FRN4s6K64LvnkBxEB4TQIWfhbiqxH7o=)
2: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: qF7ZyvBLQXU0z6sQinAxqtICo9LN6FDZ9IqqCQLq5zI=)
3: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: rTSV+CqWgDbyB0T8+UwJX4nONp+OV7Tlp7vmg3QUH/0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl
rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 07:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8e:ec:96:2f:35:93:ef:3b:b9:7b:6a:94:af:8a:d6:d7:45:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B6C011787F4528DAFAEE19B8408D9405F030E61
Validity
Not Before: Feb 27 22:37:36 2026 GMT
Not After : Mar 3 07:49:36 2026 GMT
Subject: CN=441F588AE7B3CDA0F00E841344D57B3729DF4D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:ec:cb:05:e6:58:b0:5d:a7:06:97:f4:bb:
c7:15:f4:91:54:b0:d5:31:6d:10:9f:d5:ea:4d:82:
ec:e0:9c:57:3f:71:55:88:ca:67:c0:5e:f5:4c:01:
b4:0b:07:a8:f6:71:53:15:6c:68:e1:3e:6a:eb:30:
54:90:a0:e1:fa:aa:c5:a1:22:03:e8:57:c1:d9:9f:
4b:bd:a3:c8:58:7b:46:a1:24:9c:e7:b2:4c:b3:ca:
dc:a4:3a:ee:f9:08:39:1c:4e:ce:93:3b:5a:66:09:
b7:d6:2f:ff:18:40:29:90:22:74:f8:18:99:3c:1c:
11:58:13:18:0a:c0:98:7d:eb:51:7d:66:17:5e:24:
48:56:d5:c1:0a:f4:8a:7d:93:09:79:ba:1a:1d:78:
58:c4:92:47:87:08:25:b2:d0:1a:96:fa:32:80:99:
5a:6f:19:7b:c3:94:ad:4a:fe:2e:09:21:bb:f1:3a:
be:5d:36:9a:31:43:39:3a:c7:39:88:b9:e3:c2:2d:
32:1d:4f:5e:bd:f4:ac:d5:68:eb:3b:8d:36:13:25:
3d:44:ff:5e:31:9d:3d:d5:1a:d9:fc:71:3f:82:8c:
73:87:12:cb:99:eb:4f:4d:18:06:4d:b6:7c:0c:fe:
30:4a:c0:3f:4d:86:2d:79:83:92:42:54:51:89:6a:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:58:8A:E7:B3:CD:A0:F0:0E:84:13:44:D5:7B:37:29:DF:4D:28
X509v3 Authority Key Identifier:
keyid:3B:6C:01:17:87:F4:52:8D:AF:AE:E1:9B:84:08:D9:40:5F:03:0E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B6C011787F4528DAFAEE19B8408D9405F030E61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3B6C011787F4528DAFAEE19B8408D9405F030E61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:c4:5a:47:a5:c6:4a:45:7b:82:a3:f4:94:0f:25:e1:2c:
1c:87:fe:5c:c8:c9:69:82:6f:cc:9a:1f:16:1e:0c:77:10:19:
0b:77:92:5b:58:c2:f0:81:7d:83:74:78:25:bd:92:aa:73:62:
99:b4:e0:05:13:b6:a0:80:83:bf:74:57:49:49:9b:92:aa:1c:
b6:01:ac:f7:e6:67:d7:05:d6:5d:4c:9e:81:6f:c2:1b:5f:c3:
41:aa:1a:db:b9:b3:93:4d:df:a2:48:3b:a0:1e:8d:a4:04:5d:
6e:ee:66:ae:d6:31:99:aa:fb:2c:04:22:fd:2d:9c:67:03:a7:
32:70:79:d4:5b:f9:3b:e7:07:88:ca:dc:f7:0e:59:f7:26:f3:
3a:6f:c2:97:a8:54:97:3a:4a:12:dc:63:57:9c:a1:7e:90:56:
e6:b1:79:66:e9:98:b3:a4:65:bf:72:1f:39:cf:d9:6b:2e:80:
7f:9a:4a:c8:79:50:c7:51:96:5e:be:c1:5a:9f:1e:68:e7:59:
b4:40:84:cb:59:56:5a:b9:fd:76:95:93:e0:c2:73:f5:80:f7:
02:df:c7:b0:e2:dd:a4:23:79:46:90:32:a1:c7:e1:3c:bd:9d:
c8:10:81:54:59:e3:cc:8f:7d:de:b3:b5:83:ea:47:b4:1c:d5:
2d:73:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:29 2026 by rpki-client