
$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json)
Hash identifier: xPrGsyDEMgl0Dnj4lnEmu0d4cQx4Rvxnv0pSdjSTLU0=
Subject key identifier: 75:1C:B7:5E:15:7D:8C:27:4D:AF:C6:5E:F8:D3:2B:60:1E:E4:6C:35
Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04
Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704
Certificate serial: 27CE5A7124EF803CD205731D0CB031AC93A77BE4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
Manifest number: 0442
Signing time: Thu 16 Apr 2026 06:50:48 +0000
Manifest this update: Thu 16 Apr 2026 06:45:48 +0000
Manifest next update: Sun 19 Apr 2026 17:45:48 +0000
Files and hashes: 1: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=)
2: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=)
3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: vJVsuvJrCVGOJugNE0fso/0WVADm1IGAMYCIPBEtMe0=)
4: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 9IhGsQ54tY2/cR1q0Xs6zMzTt5FF9c1oVfoMV5wVdC8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl
rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 17:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ce:5a:71:24:ef:80:3c:d2:05:73:1d:0c:b0:31:ac:93:a7:7b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704
Validity
Not Before: Apr 16 06:45:48 2026 GMT
Not After : Apr 19 17:45:48 2026 GMT
Subject: CN=751CB75E157D8C274DAFC65EF8D32B601EE46C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:ae:58:08:c9:91:fd:2c:e1:f9:eb:5c:71:
a0:99:0e:a2:b6:2a:f5:63:e3:6b:fa:12:ee:5e:ed:
a7:7e:d3:80:f8:2b:e4:50:1d:2e:b7:3e:cd:c6:aa:
fe:6e:93:dd:5e:c1:1d:a8:56:36:dd:53:39:1d:d2:
88:fe:d3:be:72:ba:46:93:d9:37:e0:2d:81:d6:b7:
f8:b6:2b:53:05:a9:d4:85:93:a3:e7:d4:14:73:6b:
65:72:47:19:f3:f5:0f:9e:07:ee:98:87:f9:e4:be:
33:36:ba:69:c1:a2:af:9b:8d:58:3e:99:d1:a3:fd:
53:58:a9:8d:1d:78:41:9a:6b:fd:d6:1f:4d:dc:57:
20:58:04:18:e8:b0:de:7d:40:5b:2a:d7:98:d0:34:
4f:46:c8:f1:f1:a4:2f:cd:37:3f:84:b1:1a:c8:87:
09:76:bd:d7:15:62:45:e6:f6:54:19:57:1c:6a:f5:
6b:ea:39:52:29:44:cb:bb:b2:6d:97:63:b6:6e:11:
75:37:6c:09:d2:f2:ab:6e:33:bd:c6:19:90:fb:89:
e2:f2:ec:ca:27:2c:d3:d7:cc:a4:0a:a5:f2:1e:fd:
60:0d:e5:9c:9b:af:31:8d:47:a2:09:49:7a:92:21:
43:4e:94:9e:17:a7:1a:d0:03:49:0c:a7:06:8f:be:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1C:B7:5E:15:7D:8C:27:4D:AF:C6:5E:F8:D3:2B:60:1E:E4:6C:35
X509v3 Authority Key Identifier:
keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:59:2d:2b:24:29:1f:75:c5:c6:db:5d:44:6c:48:a7:87:
36:46:4b:d5:21:ca:de:c2:5c:10:45:22:9d:76:34:8c:29:69:
b1:7d:48:6d:ac:34:67:60:bc:e8:56:46:44:67:49:c0:89:43:
32:ed:25:01:62:bd:d9:9d:e4:da:01:65:4d:d6:ba:67:3e:f6:
9d:10:e8:3f:b8:3b:43:e6:3b:87:65:98:bf:c7:18:2c:34:ec:
c1:b9:98:70:52:6f:99:19:3c:76:2a:46:ba:f3:ba:a7:43:3c:
f2:43:f9:5f:e4:b0:db:b0:ae:f4:89:ea:03:55:82:05:92:fe:
d7:f7:c7:73:2a:00:0c:07:0b:13:23:f5:fe:b8:09:dd:20:b6:
4c:69:27:b5:cd:52:e9:be:e6:a2:c2:a7:b3:91:7b:6b:91:4c:
e4:08:8b:38:c1:e8:ba:3b:c3:59:02:e8:99:b6:d4:6d:36:81:
1f:92:e1:2a:40:83:5d:b3:2d:ad:ae:56:95:1a:56:a5:df:5b:
92:2d:bb:09:59:22:f7:4a:68:cc:80:e0:fa:f6:b3:a8:81:15:
92:a3:17:82:87:73:f6:11:86:f4:2e:e7:ba:91:77:0c:77:c1:
06:de:31:c8:c0:1f:ea:e5:94:3b:65:5c:f2:01:28:3b:20:05:
33:a4:74:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJ85acSTvgDzSBXMdDLAxrJOne+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz
QjAxNzcwNDAeFw0yNjA0MTYwNjQ1NDhaFw0yNjA0MTkxNzQ1NDhaMDMxMTAvBgNV
BAMTKDc1MUNCNzVFMTU3RDhDMjc0REFGQzY1RUY4RDMyQjYwMUVFNDZDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2H65YCMmR/Szh+etccaCZDqK2
KvVj42v6Eu5e7ad+04D4K+RQHS63Ps3Gqv5uk91ewR2oVjbdUzkd0oj+075yukaT
2TfgLYHWt/i2K1MFqdSFk6Pn1BRza2VyRxnz9Q+eB+6Yh/nkvjM2umnBoq+bjVg+
mdGj/VNYqY0deEGaa/3WH03cVyBYBBjosN59QFsq15jQNE9GyPHxpC/NNz+EsRrI
hwl2vdcVYkXm9lQZVxxq9WvqOVIpRMu7sm2XY7ZuEXU3bAnS8qtuM73GGZD7ieLy
7MonLNPXzKQKpfIe/WAN5ZybrzGNR6IJSXqSIUNOlJ4XpxrQA0kMpwaPvi9XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdRy3XhV9jCdNr8Ze+NMrYB7kbDUwHwYDVR0j
BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5
MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx
NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1
MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5
QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJCSWS0rJCkfdcXG211EbEinhzZGS9Uhyt7C
XBBFIp12NIwpabF9SG2sNGdgvOhWRkRnScCJQzLtJQFivdmd5NoBZU3Wumc+9p0Q
6D+4O0PmO4dlmL/HGCw07MG5mHBSb5kZPHYqRrrzuqdDPPJD+V/ksNuwrvSJ6gNV
ggWS/tf3x3MqAAwHCxMj9f64Cd0gtkxpJ7XNUum+5qLCp7ORe2uRTOQIizjB6Lo7
w1kC6Jm21G02gR+S4SpAg12zLa2uVpUaVqXfW5ItuwlZIvdKaMyA4Pr2s6iBFZKj
F4KHc/YRhvQu57qRdwx3wQbeMcjAH+rllDtlXPIBKDsgBTOkdKY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:49 2026 by rpki-client