
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json)
Hash identifier: Cu1kJWr4FwfcZtuFJl88/YE/R426eUXf7UlTed1IDYU=
Subject key identifier: B8:F9:26:C1:07:87:F1:45:F1:19:0A:3C:87:D0:08:C7:3F:26:95:1A
Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Certificate serial: 250460AF63430D0D94991CFAA85622EA3C107296
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
Manifest number: 0541
Signing time: Sat 28 Feb 2026 12:50:56 +0000
Manifest this update: Sat 28 Feb 2026 12:45:56 +0000
Manifest next update: Tue 03 Mar 2026 19:50:56 +0000
Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: ZcKqSnASZC/GldbulHXic2GDAsfUDTdgbzeouTLPiNA=)
2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=)
3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: pWSLLsfuqLMss5goT0TCm2Xrlt+/JZKU0FLP/cfm62g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 19:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:04:60:af:63:43:0d:0d:94:99:1c:fa:a8:56:22:ea:3c:10:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Validity
Not Before: Feb 28 12:45:56 2026 GMT
Not After : Mar 3 19:50:56 2026 GMT
Subject: CN=B8F926C10787F145F1190A3C87D008C73F26951A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:45:d8:b7:77:74:a2:bb:76:f8:1b:3d:93:
32:1a:9c:be:42:79:20:0a:00:d6:12:f8:f0:a8:b1:
0a:80:e3:00:ee:c7:59:81:b2:09:9a:7f:0d:e3:73:
cd:75:d7:04:e0:c4:ac:ec:f4:7c:56:2c:45:03:1d:
4d:34:80:22:01:94:b4:75:6b:5f:99:38:d0:55:fc:
5c:30:79:32:db:40:c7:fd:91:19:6c:84:6c:ed:a6:
a2:a9:6e:ee:ee:25:c1:76:fa:59:5d:1d:52:00:30:
b8:48:6a:2c:2c:64:15:cd:1c:86:55:aa:2a:78:4c:
cb:6d:95:80:40:e9:33:19:64:01:e1:6e:76:d5:34:
c7:15:bd:6e:0e:13:b4:44:b1:a5:ca:9b:6b:dd:87:
e0:cc:f2:a3:c2:bc:88:a1:b7:61:f2:c6:38:23:aa:
5a:63:cd:f9:6f:35:a3:ba:74:70:61:b3:2b:28:fb:
6f:48:0b:3f:a7:ec:8f:69:c3:98:90:81:fd:3f:24:
c1:e1:19:d0:52:8a:1e:8c:f6:52:de:81:ec:27:fa:
ac:e0:c0:67:f8:83:fc:73:b4:f9:14:e4:73:c4:c1:
ab:4d:5f:65:17:a3:8a:8e:7c:b4:1d:98:d8:94:02:
b8:c9:3b:c1:38:b9:f7:ac:45:d9:2c:f9:48:4f:23:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:26:C1:07:87:F1:45:F1:19:0A:3C:87:D0:08:C7:3F:26:95:1A
X509v3 Authority Key Identifier:
keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:a4:58:09:d3:87:90:18:c3:80:f1:09:ca:73:56:cd:d5:
bc:09:47:04:31:89:94:38:72:c2:e3:d5:e1:18:df:97:a9:c0:
ac:b0:fb:4f:4a:10:a8:b9:e4:8f:d9:e0:fe:9e:3b:b0:b7:39:
1a:95:db:71:66:79:9c:fa:8e:62:41:96:92:80:77:d0:7d:a1:
04:21:1b:f2:99:c2:ac:0d:89:12:9c:52:9a:5d:a1:d0:b6:f6:
92:7a:50:95:2e:e4:cd:58:b7:7f:99:e1:25:68:d1:a6:65:09:
86:23:64:f7:82:35:54:7c:2d:36:cd:70:fa:40:e4:9d:32:78:
0d:a5:1e:9a:05:9e:a1:dd:7c:8c:6e:aa:14:ff:f5:d1:b9:48:
cb:a4:a7:2d:0e:2d:e7:9c:96:6c:e7:9c:c9:c7:a9:06:e2:8d:
ab:82:5d:af:4b:77:2f:04:cc:04:67:36:cd:80:af:18:81:ea:
b0:3d:42:c8:b6:9c:86:74:96:9f:cc:91:98:51:3b:65:c3:c0:
36:63:7b:73:cd:00:5c:33:5e:82:ce:fb:05:25:8d:d3:1a:07:
f9:0f:13:54:60:c8:88:b5:2a:14:3a:dd:e2:f1:eb:39:a6:2a:
59:4e:42:cc:36:20:9a:e7:b5:a5:ab:c5:e7:f5:d6:ea:75:ba:
f9:31:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:43 2026 by rpki-client