
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
File: F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json)
Hash identifier: REx+YUygDKtdLAOZFtxR+5EKLFyX+l165INN8sbTZcY=
Subject key identifier: 5F:F7:AC:C5:2E:B7:E6:5C:B9:3B:23:93:0E:4E:98:33:02:C3:A8:E7
Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A
Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A
Certificate serial: 7DE401EAA9C02BD35274E3E7CE05EE7E077A50F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 07:04:52 +0000
Manifest this update: Mon 15 Jun 2026 06:59:52 +0000
Manifest next update: Tue 16 Jun 2026 09:19:52 +0000
Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=)
2: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: DyVOKxVwYPr9B2drGFAgPs11hP6bPcia5iG4zKkf1j0=)
3: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl
rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e4:01:ea:a9:c0:2b:d3:52:74:e3:e7:ce:05:ee:7e:07:7a:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A
Validity
Not Before: Jun 15 06:59:52 2026 GMT
Not After : Jun 16 09:19:52 2026 GMT
Subject: CN=5FF7ACC52EB7E65CB93B23930E4E983302C3A8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:32:d9:e2:c8:fb:9e:73:c7:22:62:b8:a8:
33:5c:99:d1:34:17:35:cf:1d:5c:31:4e:b1:ae:5f:
d6:11:a3:c4:6c:d0:d4:0c:34:d8:40:85:e5:e1:e4:
92:3f:6f:4e:fd:d2:c9:40:75:70:52:ce:13:7b:91:
ce:94:06:a4:04:4a:09:2b:c3:a7:de:b2:0a:da:ce:
76:43:c4:3e:05:16:36:43:e5:ec:f3:24:b3:65:d7:
47:d7:cd:09:47:5c:88:f1:21:d5:72:b7:dd:96:9b:
90:2a:19:45:ab:a3:66:e1:0f:38:ac:ec:78:fc:8c:
3e:6c:e5:56:e3:7f:15:9d:83:b8:ea:b2:2d:87:b7:
d5:f5:be:8a:ba:1e:b3:8c:e9:0e:af:51:af:78:97:
cf:bc:42:00:0d:56:79:0c:46:73:73:5b:9b:5c:51:
97:b6:f8:ea:af:99:21:9b:01:c9:3a:2a:e9:7d:e2:
0f:61:03:e1:b7:55:75:a0:08:df:ea:11:9f:e6:51:
91:d0:5d:06:70:f4:3e:de:87:3b:34:98:73:db:3a:
b7:0e:95:12:ea:a0:e4:4a:70:05:1c:a2:10:72:e4:
43:be:7f:5e:73:07:69:a6:9d:46:ea:b1:d5:02:d1:
59:32:58:06:a2:0a:35:25:7f:f3:ff:6e:c0:8a:1b:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:AC:C5:2E:B7:E6:5C:B9:3B:23:93:0E:4E:98:33:02:C3:A8:E7
X509v3 Authority Key Identifier:
keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a8:b4:df:8d:3b:d2:f9:38:43:78:59:10:18:af:42:34:e0:
e8:71:bb:5b:2f:2c:2c:37:0e:c2:4f:a4:13:62:e9:b4:5e:bb:
83:85:01:43:80:51:94:1a:01:76:f9:6a:ad:86:18:54:23:73:
51:55:2e:1f:0c:c3:4a:f4:1d:98:dc:48:74:b0:19:18:76:04:
82:d2:79:8d:99:f6:0e:69:9a:2e:b1:33:ea:15:b0:b8:21:10:
1d:d4:8c:99:b0:8b:b1:17:05:c9:f0:ec:43:5c:8b:81:d1:75:
78:9b:6f:39:a1:58:4c:34:85:9d:b8:23:bc:e6:82:54:31:6e:
9e:b9:53:a0:40:53:4b:7b:ee:02:0c:3f:a2:71:0a:c7:ac:1b:
77:5b:d5:06:6f:07:03:25:65:80:29:ef:6c:6f:90:d3:75:44:
b6:ca:87:db:2f:5e:50:4c:d0:46:45:db:45:cb:79:53:4e:17:
8a:dd:0e:fd:60:6e:26:18:71:f1:c9:64:25:70:b8:9a:cb:3c:
9f:b6:bf:4f:3e:ef:a3:1e:6a:9f:5b:5e:48:87:8c:07:4b:fe:
45:5a:ac:e5:67:5d:8f:b3:f9:4f:45:3b:88:17:2d:4d:78:80:
0c:a0:73:d5:ae:c6:5d:af:35:5c:17:a6:22:12:54:5f:77:19:
a8:a6:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:09:52 2026 by rpki-client