
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
File: 3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json)
Hash identifier: TSDIZjoPJPH2qeHQfNlT5ggO/b7IfK3bNwMRzrIrT5I=
Subject key identifier: A0:7C:12:76:05:43:A7:2D:FD:78:D1:D1:D6:7A:38:19:5B:C3:CC:BE
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial: 7CD68002A3BFB5FC5F80702F47C619637BDBA6B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
Manifest number: CC
Signing time: Sun 01 Mar 2026 04:11:46 +0000
Manifest this update: Sun 01 Mar 2026 04:06:46 +0000
Manifest next update: Wed 04 Mar 2026 13:55:46 +0000
Files and hashes: 1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: V61ib43MGsOPx+gGblZ7qMtaGE6LWBScN1qYYDH4dIo=)
2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 3hoDD7ig6gcP/Yzm1bfTsMAVOt7p/pOGosEJ4Wxm3M0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 13:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d6:80:02:a3:bf:b5:fc:5f:80:70:2f:47:c6:19:63:7b:db:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
Validity
Not Before: Mar 1 04:06:46 2026 GMT
Not After : Mar 4 13:55:46 2026 GMT
Subject: CN=A07C12760543A72DFD78D1D1D67A38195BC3CCBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:8d:7e:f1:3b:8b:e0:43:6a:cf:99:4e:5a:
6c:06:de:2a:bf:82:54:e4:19:49:b5:d9:e7:42:d4:
04:2f:37:2c:0c:40:33:d8:22:7c:39:42:27:72:b5:
a1:8e:0d:e1:dc:e3:08:9f:ad:ad:18:d5:ec:4d:1e:
68:1f:7a:bd:79:5b:c3:39:8a:97:a7:83:50:e7:c5:
3e:99:21:ae:28:22:47:b8:e7:5c:fb:5d:f4:a1:b6:
a9:66:9f:18:ff:5d:f9:92:8f:47:68:8d:85:eb:50:
cc:07:18:df:78:a0:05:89:df:13:e7:98:37:37:5a:
11:9f:42:d4:da:f6:27:bd:ea:e0:24:09:7d:2c:1b:
8d:3e:9e:37:da:3f:5e:54:19:68:54:92:a0:7f:15:
84:f4:1e:c2:8b:95:a7:25:a2:6c:db:42:b9:4d:79:
9c:3e:6d:37:b3:70:be:1d:b0:09:d5:8f:43:ee:22:
8c:6e:01:35:c7:95:66:b1:24:56:35:a0:74:b8:30:
ee:4d:4d:21:2d:a5:d3:f6:41:39:4f:0a:97:1d:3e:
5d:cb:f5:42:56:ec:a1:7d:88:57:a6:ff:a1:2d:2e:
0f:40:4f:db:49:19:a8:28:f4:1c:9f:b5:c9:f6:16:
69:6e:34:4d:73:3c:c7:b0:20:b7:03:ef:8d:16:c4:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:12:76:05:43:A7:2D:FD:78:D1:D1:D6:7A:38:19:5B:C3:CC:BE
X509v3 Authority Key Identifier:
keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:81:10:f6:bf:fd:80:b8:5e:7c:07:71:9c:1c:37:d1:52:e5:
32:19:87:78:aa:3d:9d:b6:4c:42:f8:64:c4:cd:fa:ca:d4:5f:
6e:e5:c0:b5:bf:f9:c1:b3:bf:85:76:ef:0c:22:01:88:bc:01:
5d:2a:f8:99:9b:13:14:56:3d:a1:2c:77:62:15:cf:c7:d6:74:
4e:13:6c:e8:97:11:48:d7:67:1a:81:c9:47:e2:2b:8d:3c:56:
d5:55:76:8b:85:02:83:c3:9a:2d:44:cc:99:32:1b:8b:bf:df:
25:c1:11:eb:79:18:7b:89:8f:be:d5:5c:4c:e8:82:ce:f3:0b:
5d:c8:ca:0a:b3:57:df:a6:59:31:03:33:7a:5e:a1:f0:3d:c4:
a7:2b:0f:e5:b2:18:8f:c6:09:62:37:b6:e4:96:17:78:cb:fa:
0c:86:b0:46:e0:8a:87:a3:a2:a5:50:3f:a9:fe:f7:06:18:a1:
7d:04:51:a8:10:84:3e:ad:32:cd:f8:82:84:dc:3e:cd:90:c0:
12:3e:58:9c:5b:b7:b7:31:15:d3:20:bd:74:bf:f6:77:1c:07:
8d:86:11:76:43:95:08:d7:8a:11:bf:71:a0:dc:3d:91:8a:30:
a8:73:ba:b3:d1:d4:80:db:60:59:dd:52:e7:12:1f:df:d0:a5:
57:74:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:48 2026 by rpki-client