
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
File: 3262903B69AE7339AAB9320A98EA5D1800FEC705.mft (raw, json)
Hash identifier: HK2xOt0q9qhi0I3NHQGDWim8XBVY8T3dFwVVNOsIN8o=
Subject key identifier: BD:43:5C:09:FA:95:C2:32:21:43:9B:6A:2C:CA:78:E8:6A:B2:A2:A7
Authority key identifier: 32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
Certificate issuer: /CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Certificate serial: 4B6CDC8BFC92F4E28128B0E25D910C822C9D9F9B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 06:19:16 +0000
Manifest this update: Tue 22 Sep 2026 06:14:16 +0000
Manifest next update: Wed 23 Sep 2026 09:08:16 +0000
Files and hashes: 1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: mvp2yuPOBwuKJ3KSamrBGxDk5I0RR5jAQfoIbHtIVlo=)
2: 3262903B69AE7339AAB9320A98EA5D1800FEC705.crl (hash: 7crQo9GENgBAC62OXgK8zrZmWP44hbJHI/3QRwVqifo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 09:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6c:dc:8b:fc:92:f4:e2:81:28:b0:e2:5d:91:0c:82:2c:9d:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Validity
Not Before: Sep 22 06:14:16 2026 GMT
Not After : Sep 23 09:08:16 2026 GMT
Subject: CN=BD435C09FA95C23221439B6A2CCA78E86AB2A2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:f6:4a:48:31:27:43:75:5f:e3:c8:1a:01:
a1:12:48:a0:ae:3a:da:1f:da:fd:d8:76:ce:9c:5b:
06:69:09:95:3b:45:e2:a5:28:8c:3d:5f:66:27:2e:
9d:54:70:52:31:fe:4d:3b:78:67:ba:b5:dd:85:b3:
94:13:ec:4c:38:0b:65:39:af:2b:89:bf:81:8e:b5:
74:dd:f5:89:24:fe:de:00:84:48:ca:c0:3b:b9:b7:
af:67:53:91:f2:a7:9e:20:2d:20:c8:ae:ba:79:fd:
0f:4d:26:99:d6:f7:20:c1:d5:d4:0c:0d:88:ec:c2:
0b:8c:15:86:89:62:78:0f:0b:ad:46:96:4e:87:a5:
3e:66:1c:72:d0:d3:bc:60:10:d4:b7:37:e8:9e:9d:
55:23:76:ef:0e:10:ef:cf:2f:09:fb:03:55:c5:29:
b2:ab:19:36:28:bf:5b:f8:e6:8e:68:e7:94:ca:1f:
75:72:fb:94:15:e1:17:ff:ae:8f:5c:82:e0:aa:bc:
d0:d0:38:71:95:a2:ce:1e:48:d9:8a:5c:69:83:1f:
db:8e:4b:cc:2a:2b:fc:80:1f:5b:60:f7:52:fc:f7:
e2:ec:6e:15:b9:a3:62:f2:e6:9c:5b:70:f7:ce:8c:
78:18:db:2d:73:c5:df:be:0a:e2:23:4a:81:29:9f:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:5C:09:FA:95:C2:32:21:43:9B:6A:2C:CA:78:E8:6A:B2:A2:A7
X509v3 Authority Key Identifier:
keyid:32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:4f:72:4d:19:6a:c9:56:9b:3d:e0:55:b2:09:87:bc:71:
a5:d8:8f:61:3e:49:23:6c:2d:67:b8:59:21:e8:a5:dd:d5:33:
88:f8:36:6e:2c:5b:4b:e3:f5:dd:a2:bb:34:c0:0b:7c:2b:74:
7c:8f:d4:32:c5:05:eb:1b:ea:72:1e:49:f2:59:58:8a:f2:44:
d2:0f:7e:f4:09:00:c2:5d:7a:78:13:07:ea:47:3d:ac:76:8f:
c5:f5:62:6a:a9:fb:27:d6:4a:a7:44:15:eb:dc:7e:b6:c2:75:
7a:46:d9:ef:13:7a:0b:6e:2a:d2:c6:b9:f7:23:70:2c:98:f7:
31:42:60:b7:67:d7:8b:8d:2f:c6:49:fe:33:26:58:f6:b9:a0:
6c:d2:d6:d7:bb:04:3c:b4:e4:52:df:fa:b3:20:93:bd:e0:d0:
c8:54:e5:8a:da:a2:05:cf:e9:86:15:e5:db:ab:2d:96:eb:12:
19:8d:6a:61:99:24:36:eb:26:2e:ff:ff:4c:ab:59:4d:d0:e3:
5c:38:f0:f9:10:c6:f8:33:e2:75:1c:85:aa:51:9f:b7:ff:ef:
23:77:6d:15:37:d5:6c:4f:e1:51:56:af:2c:20:46:b3:b9:3c:
55:5a:5e:7f:70:91:5c:bf:f8:7e:92:90:8c:44:b6:21:76:6c:
b9:62:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:33:43 2026 by rpki-client