
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json)
Hash identifier: ecZ9Fxq30dnI3sldpwL1tuQ7Fok+Kj23chyzLRSJtlE=
Subject key identifier: E4:7E:D2:8F:93:6E:CF:31:C3:57:C3:62:4C:3F:38:39:79:B1:50:44
Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Certificate serial: 6610888010B32E0401B82F8DB8684EF91C5F39D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
Manifest number: 0557
Signing time: Sun 19 Apr 2026 02:20:58 +0000
Manifest this update: Sun 19 Apr 2026 02:15:58 +0000
Manifest next update: Wed 22 Apr 2026 14:10:58 +0000
Files and hashes: 1: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: 25ibxjuEuBLfuXKg0koXwVmjZwm/83pyyobq7OMXRlc=)
2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=)
3: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: pWSLLsfuqLMss5goT0TCm2Xrlt+/JZKU0FLP/cfm62g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 10:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:10:88:80:10:b3:2e:04:01:b8:2f:8d:b8:68:4e:f9:1c:5f:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Validity
Not Before: Apr 19 02:15:58 2026 GMT
Not After : Apr 22 14:10:58 2026 GMT
Subject: CN=E47ED28F936ECF31C357C3624C3F383979B15044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:5a:5f:5d:1b:08:3d:be:82:37:0c:7c:be:
75:1b:ee:df:f5:7f:63:ad:f2:e9:28:a1:50:e2:21:
5d:7e:6c:40:3f:0a:5c:3d:5b:8f:80:d9:5c:b2:d5:
f3:5a:5b:38:8c:1a:8d:05:1f:06:9e:45:32:2c:9e:
65:3a:16:2c:db:ad:95:ca:cb:3f:80:6e:98:c2:4d:
33:2b:76:f3:bb:26:57:22:07:4b:d2:52:b0:a4:b8:
df:8a:85:00:04:48:36:f6:c8:34:6d:38:e8:11:76:
b6:35:3c:54:f0:a8:16:06:5d:5c:5b:9c:cf:7a:71:
8a:99:8f:a6:fa:2c:4f:d1:12:e0:49:c7:75:0b:f4:
22:3d:dc:0c:3d:e4:8c:ed:6d:4e:67:e6:4f:7b:6c:
2c:06:64:0b:bd:5f:58:c7:ff:4d:68:15:d2:65:d1:
72:d4:81:d5:2c:bd:e6:a3:7a:e6:22:0f:5b:24:b6:
6e:1b:c5:66:4d:b4:74:82:2c:c0:eb:2e:8d:24:cc:
52:3e:d7:76:d5:70:6a:54:5d:e9:85:12:01:86:57:
49:70:d2:f1:50:97:e4:c0:9a:02:b4:75:a0:7c:b8:
c3:4b:25:73:e8:71:16:f1:ec:3a:01:a8:14:68:72:
db:db:c0:b2:4c:f6:c6:36:fb:6c:50:57:6e:57:1b:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:D2:8F:93:6E:CF:31:C3:57:C3:62:4C:3F:38:39:79:B1:50:44
X509v3 Authority Key Identifier:
keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:52:4a:1f:da:61:64:c1:d8:e2:1e:43:09:33:0c:8a:e3:
7e:a2:4d:e5:71:81:2d:7b:6e:e2:da:3a:22:53:c7:fe:16:dd:
b7:ef:d9:bd:3a:f0:9f:6c:3b:16:cf:77:3f:bf:9f:43:ad:44:
fa:a4:4c:f9:37:e9:60:91:12:f7:b3:b5:bd:6b:47:a8:4e:af:
38:f2:47:c5:6b:35:42:60:6e:95:53:66:5c:85:c0:1c:3f:66:
07:b7:a2:d9:bd:86:d6:4d:26:98:ac:d4:04:8e:77:ae:f6:00:
a1:8a:df:4f:f8:9a:89:4c:bf:c8:04:ba:60:54:7e:76:2c:25:
4b:87:77:ec:7d:7d:26:e0:99:28:b7:a2:dd:7b:d2:b9:8c:4b:
f8:6a:f9:81:f2:2b:a6:0b:fe:43:7d:9a:0d:fe:f6:0f:52:1e:
e0:5f:c7:d9:53:54:bc:64:61:61:bb:1d:c7:bc:0f:29:a8:dc:
0e:3c:c3:35:e4:07:fa:57:07:9e:65:0b:88:c4:30:5d:c8:b9:
b3:c8:f6:35:eb:78:05:80:04:17:1a:c0:4a:45:95:c0:81:1c:
32:a5:f1:bb:11:e0:2a:73:dd:21:86:8c:39:6a:2d:da:36:50:
f6:49:84:e7:ab:9d:45:56:6d:64:0b:cc:fd:fd:b0:46:20:f3:
4d:cb:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:36 2026 by rpki-client