
$ rpki-client -vvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft
File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json)
Hash identifier: yzq7cS0+nHEd0tRNTIyeGhspWSeKcsYEuCD9AmSDcdE=
Subject key identifier: 44:3F:48:51:0B:F2:BE:51:4F:03:AF:09:7E:4F:63:57:AD:48:05:6B
Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01
Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01
Certificate serial: 3B4E1F5891C63B4F463429EF0FBD6CFDB18DDDD0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 14:42:01 +0000
Manifest this update: Tue 16 Jun 2026 14:37:01 +0000
Manifest next update: Wed 17 Jun 2026 18:40:01 +0000
Files and hashes: 1: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=)
2: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=)
3: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: 8lfl1CP6K9ivBarkd6Ssishf9FyodyTCS3GDGOl3aiM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl
rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4e:1f:58:91:c6:3b:4f:46:34:29:ef:0f:bd:6c:fd:b1:8d:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01
Validity
Not Before: Jun 16 14:37:01 2026 GMT
Not After : Jun 17 18:40:01 2026 GMT
Subject: CN=443F48510BF2BE514F03AF097E4F6357AD48056B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:50:60:5e:8c:0a:a8:7c:f9:23:df:47:70:
2c:4d:32:5c:f5:71:85:83:80:0a:09:51:53:12:14:
11:53:b5:03:c1:f1:0f:fa:b4:4f:da:31:e3:2d:0e:
5b:77:b2:76:6a:24:2c:a4:ff:ac:6c:23:c4:1a:90:
aa:9a:76:17:e6:58:3b:bb:23:96:0f:fe:3f:04:a4:
67:88:a0:c4:af:1f:34:e3:6e:9c:a3:a7:a3:1c:e3:
6a:f9:ec:48:fa:cb:a8:22:c3:7d:c3:e4:2c:bb:d2:
53:d4:ca:c8:14:88:67:97:5c:74:e7:fb:e4:ef:5c:
fc:a1:8c:b4:a6:55:ad:8b:75:94:0a:39:91:38:48:
f1:6e:92:bd:94:fa:d9:38:69:75:cb:05:98:51:62:
f5:f7:a2:e3:37:66:f0:45:bd:b8:f8:e0:13:97:f6:
86:95:fd:bb:7f:b3:27:11:f2:43:a4:78:28:1a:7e:
63:6b:db:f5:68:72:d1:85:24:a1:cf:b1:a0:90:01:
3f:7a:6b:77:62:f3:9a:3c:ed:e7:29:ed:b5:f7:90:
c9:3b:38:b8:8c:dd:54:f3:ba:c7:e3:7d:c0:73:08:
9b:57:76:a7:fe:ff:7f:70:42:ca:1f:18:3d:8c:ca:
f6:81:f1:a0:73:09:47:25:17:f9:46:49:20:0d:a3:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:48:51:0B:F2:BE:51:4F:03:AF:09:7E:4F:63:57:AD:48:05:6B
X509v3 Authority Key Identifier:
keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bd:97:8f:9b:ab:00:23:e6:79:70:89:bf:fb:1f:2f:82:db:
23:ff:1e:75:aa:a6:89:5c:bf:5d:f6:bb:51:4c:b9:a1:23:a2:
2f:65:eb:2f:25:95:ce:98:fb:00:3a:53:2a:6e:a1:ad:ea:89:
68:43:0a:a2:c8:d5:3d:71:a9:4b:0e:2d:00:77:66:07:10:e3:
e0:88:3d:16:8e:64:8e:a1:fd:a9:54:0c:bb:e5:90:81:f4:f4:
af:d8:ee:fb:37:5e:fc:90:22:22:d3:a3:2c:31:6a:1d:f4:92:
5f:bc:54:81:ef:53:85:ab:0e:28:77:fd:53:37:43:d9:98:22:
b4:87:98:ee:93:84:b8:c3:16:3a:c4:88:92:3a:f6:40:f8:10:
82:4b:64:0a:7a:54:84:61:d7:36:4c:b6:6f:e7:6b:41:e0:ce:
7d:ef:05:54:12:b4:b8:25:2b:1c:8c:19:34:a4:75:26:f9:3d:
9b:ed:25:5a:ab:75:41:18:a9:a5:c8:28:b9:19:c9:68:9f:44:
fa:52:31:81:4e:e8:b6:13:4f:b9:0f:de:c8:42:a7:62:5a:ca:
10:bf:32:ce:c6:33:da:22:9b:bd:06:29:9b:52:30:d7:0a:13:
be:c5:75:2a:8c:d5:ba:cc:71:9e:c6:2a:07:39:2c:57:08:cb:
18:bc:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:33 2026 by rpki-client