
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json)
Hash identifier: gjRQgcxCZbmvARo+M+E5vvStkEOUbJ+Z3QvH8DWY4nY=
Subject key identifier: 42:55:7A:A4:BD:95:9F:16:30:3E:B7:1E:68:B7:F1:28:CE:A3:4A:31
Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1
Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1
Certificate serial: 35EA3157CBF298AC8DA54D28B96DEB1693F7E324
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 08:37:30 +0000
Manifest this update: Tue 28 Jul 2026 08:32:30 +0000
Manifest next update: Wed 29 Jul 2026 11:46:30 +0000
Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=)
2: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: zoyo1eCnMfWilP6aPMxauGyrQ0Mclj0emlrRzUT7lpQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl
rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ea:31:57:cb:f2:98:ac:8d:a5:4d:28:b9:6d:eb:16:93:f7:e3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1
Validity
Not Before: Jul 28 08:32:30 2026 GMT
Not After : Jul 29 11:46:30 2026 GMT
Subject: CN=42557AA4BD959F16303EB71E68B7F128CEA34A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:b1:1b:21:07:04:9b:22:75:eb:f5:35:d2:
73:6a:d6:89:c5:8d:b6:a7:b4:87:27:0b:b6:c8:5e:
a7:0a:be:f5:eb:08:5c:f8:53:23:61:bd:dd:ee:26:
49:e8:fa:9c:f7:ec:81:e7:42:7a:c4:a6:48:6b:c1:
17:e8:8a:79:f1:43:c8:6b:ff:6d:a4:c9:7a:6e:37:
c9:59:ed:77:be:be:77:c1:c1:8d:0f:d4:9a:db:53:
e9:34:21:21:36:df:34:3b:e8:b1:ce:21:e4:36:22:
ca:52:5b:36:40:32:8a:ca:c2:be:5f:f7:2b:56:a4:
ab:0e:95:08:e8:42:be:38:b5:9c:6c:ce:9a:49:13:
82:d8:4d:af:38:d2:e3:1a:d2:f8:0b:98:27:36:d5:
77:aa:9e:57:ab:b9:fe:b4:48:32:79:6d:dc:2f:1e:
e1:44:44:ca:63:b8:09:80:bd:db:8f:41:57:ef:59:
6e:6d:24:55:e3:cb:2b:19:a1:77:0c:1b:4d:5b:c5:
4d:a4:61:e6:d3:50:2a:1c:b6:a4:d5:dd:f9:4d:d8:
4b:c4:0b:a0:b6:69:24:01:0c:de:8a:73:13:3d:ad:
a9:80:86:10:9e:83:5a:48:e4:ec:c6:71:a1:d4:09:
0c:14:82:d2:50:93:f9:ae:10:a9:47:9a:cc:06:08:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:7A:A4:BD:95:9F:16:30:3E:B7:1E:68:B7:F1:28:CE:A3:4A:31
X509v3 Authority Key Identifier:
keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:6e:c2:3f:a6:4e:a0:96:e9:e5:46:6d:be:d3:05:27:23:
77:0a:9e:0c:fe:da:88:6f:1b:e4:79:4b:94:94:67:b2:f3:2b:
1e:6c:91:7e:5b:67:3e:89:62:9f:1e:48:96:2b:40:2d:ba:cc:
ab:7e:9a:a3:b2:fe:40:22:93:e0:b8:0b:b9:78:35:14:8f:85:
1e:77:11:28:77:3c:b6:ca:ec:aa:eb:da:d2:26:6c:d4:f2:c7:
e4:a5:26:d4:81:ff:13:38:83:69:f7:ec:40:d5:fc:52:c6:cf:
da:cf:ee:dd:c9:62:79:8d:31:37:fd:3d:bf:72:98:71:73:02:
48:fb:f4:69:94:af:ff:50:10:f5:d9:69:fc:6a:84:ae:c8:f5:
f3:f0:22:1b:ea:4d:12:b4:08:c9:6a:b5:c9:b6:4b:c7:b6:0c:
00:63:8b:dd:81:55:b7:e0:9d:23:59:53:39:de:30:ee:9b:cb:
99:b1:ba:4b:5e:a0:a9:03:56:88:f0:8e:57:d9:57:50:6d:e5:
1d:ef:02:3a:8c:80:78:eb:b7:bc:1b:6a:42:a6:fc:2c:d5:7a:
6a:55:2e:04:9e:c0:86:4b:39:2a:21:49:ac:dd:1d:01:86:57:
33:df:a3:d0:a1:1e:e2:0d:5d:26:4b:e5:6f:cf:e2:65:0f:ae:
d0:0f:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:39 2026 by rpki-client