
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json)
Hash identifier: psdzMrVg+GFaIXz+B+ozHuWwELLNr1MQ3uOYG6Cpd4w=
Subject key identifier: 3C:48:4E:AC:DB:66:49:E7:A9:12:8C:5A:C8:A3:FF:47:2A:10:D7:2E
Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Certificate serial: 56F73AA021155BB3E5E463F2AD658204ED7605AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 17:51:05 +0000
Manifest this update: Sat 13 Jun 2026 17:46:05 +0000
Manifest next update: Sun 14 Jun 2026 20:33:05 +0000
Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=)
2: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: Ync/uyATMRi7BS29isHPMqLlp/3u7ZA8JZRseB31gF4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f7:3a:a0:21:15:5b:b3:e5:e4:63:f2:ad:65:82:04:ed:76:05:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342
Validity
Not Before: Jun 13 17:46:05 2026 GMT
Not After : Jun 14 20:33:05 2026 GMT
Subject: CN=3C484EACDB6649E7A9128C5AC8A3FF472A10D72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:0f:8f:d1:4a:f0:5c:46:a0:3e:46:a3:61:
a6:e8:c2:83:15:f7:12:72:74:59:4c:46:3c:07:fb:
ee:d3:14:00:63:e3:ae:31:c2:dc:36:25:dd:c8:d6:
87:71:76:35:5a:09:62:ee:78:7a:ec:70:ca:00:38:
79:17:8e:c0:41:f6:3f:4f:0e:13:90:9f:c0:22:75:
95:0d:72:09:48:84:0c:d7:ac:46:71:ad:6c:37:bb:
b1:22:15:77:25:f0:45:91:87:d9:cb:91:d5:79:69:
cf:2b:db:89:6d:3b:48:59:8d:f8:4a:39:72:16:9b:
62:28:a8:32:f4:5d:5b:95:7f:5d:25:0e:81:58:b6:
46:00:7c:0b:98:2f:8e:3f:08:0c:ea:7c:d6:07:c2:
c5:17:59:b4:fa:25:52:4c:c8:64:ef:75:b3:86:fa:
11:29:da:a1:9d:27:1b:c2:28:0f:a2:a1:4a:ac:d3:
9a:d8:36:1e:4f:ac:e5:d6:5f:3d:a3:5b:f5:72:03:
03:1d:10:79:53:33:02:36:fe:c2:9f:6d:ee:79:59:
73:4e:cf:fb:11:44:a3:ba:31:d6:7a:2f:f3:e6:4e:
46:a4:1d:08:39:a5:2b:20:0a:5e:c3:80:3b:b0:d1:
e8:02:13:e5:da:38:99:50:31:51:66:35:b3:ea:12:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:4E:AC:DB:66:49:E7:A9:12:8C:5A:C8:A3:FF:47:2A:10:D7:2E
X509v3 Authority Key Identifier:
keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:02:cb:fd:6b:74:ce:57:2d:c3:17:77:a4:19:fa:bc:e9:
f1:fb:00:26:7f:60:27:08:6b:15:5e:cb:ef:ef:5d:37:a4:53:
a2:b9:2d:8c:c0:dd:86:44:bd:62:e1:41:68:49:ae:fe:96:78:
0d:55:3c:09:8a:28:95:8f:80:9c:7d:f1:9b:33:59:8f:37:6d:
22:f3:1d:0a:ba:94:79:20:d5:c8:8a:d3:43:f0:54:eb:b6:a5:
09:1e:06:0d:69:80:06:87:f6:14:10:b2:a6:77:76:2a:29:ac:
c4:1c:1e:ec:0a:6c:b9:67:4b:17:eb:09:62:f2:2d:31:d5:f8:
e4:0c:96:96:a1:17:b2:b5:05:00:7d:8e:25:b2:77:3b:13:56:
dd:ef:fb:3c:eb:14:2d:36:6d:8a:88:d6:9e:12:34:fc:9d:4d:
bb:2d:41:be:64:04:03:68:ef:11:34:29:c3:ef:cf:86:9d:2c:
13:6b:c5:32:ad:f9:37:a5:ae:28:35:9b:fd:a0:3f:92:6b:a3:
d3:87:3e:ca:c7:cd:34:19:ac:27:f7:cc:3d:d8:9b:84:86:95:
90:65:eb:84:7b:2d:5d:5d:0a:f9:37:57:fd:5d:3f:0b:ce:b9:
9c:89:f9:cb:7d:ce:69:6c:a4:a6:62:dd:b0:06:f3:a9:e4:fa:
8a:2a:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:54 2026 by rpki-client