
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft
File: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft (raw, json)
Hash identifier: D1aSp/+81+vIuJvL9Ez2wufxAmZhqO++IHf7JbBKpe0=
Subject key identifier: D9:D3:76:02:F7:10:39:87:DA:8E:9F:86:98:37:36:1A:28:1C:B1:FF
Authority key identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74
Certificate issuer: /CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74
Certificate serial: 62830C9B191DE4DBD7D8B10533CF3BE9586CDFF7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:46:09 +0000
Manifest this update: Wed 17 Jun 2026 02:41:09 +0000
Manifest next update: Thu 18 Jun 2026 06:44:09 +0000
Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: fIUZWJqNIQdeGF5YTGMhUjUqsUhoEqCYOqgqGlb+3MI=)
2: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl (hash: FWzoZ3DmuAcGlmF/uxugTk4w2wpfxXNthSsZyLTkzPA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl
rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:83:0c:9b:19:1d:e4:db:d7:d8:b1:05:33:cf:3b:e9:58:6c:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74
Validity
Not Before: Jun 17 02:41:09 2026 GMT
Not After : Jun 18 06:44:09 2026 GMT
Subject: CN=D9D37602F7103987DA8E9F869837361A281CB1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:f0:45:56:61:6d:f1:9b:e5:52:a0:6f:ea:
e8:c5:ea:a1:1a:2f:51:8b:fe:d2:4d:78:84:d0:72:
bb:29:59:0e:a7:0b:86:f8:0c:28:4c:d4:c6:e7:49:
ad:45:cb:d4:ed:93:ee:ab:d1:f8:49:bc:e7:d0:b2:
8a:32:b9:4c:39:0f:da:f1:db:62:27:bd:21:14:94:
74:25:f6:73:ae:05:13:f8:94:59:b5:fa:bb:3a:76:
1f:1d:c5:da:4c:ff:0e:72:5d:5f:0b:db:7b:a4:62:
c6:4a:18:ad:fb:da:ad:37:c2:03:67:2d:d3:70:33:
53:92:80:ce:9f:e4:74:36:88:32:8b:eb:a0:14:b7:
5b:99:c1:ef:95:28:09:6a:6a:e3:34:9d:92:a5:19:
b2:6f:e9:2d:aa:76:c1:74:d8:7a:f5:74:de:4d:e1:
fc:3d:03:f7:f4:00:a1:25:f5:89:e2:df:ba:36:9a:
f8:cc:52:8c:d4:7a:13:63:b5:54:88:71:d6:18:58:
45:12:c2:0c:fd:4f:a8:ab:df:e7:a7:70:dd:01:50:
4e:4c:41:c2:08:8d:fa:63:5e:55:59:53:24:8a:4e:
46:73:cc:87:fe:ac:e4:0e:fe:14:fd:41:0e:02:16:
11:d7:b2:39:5e:4b:6d:d3:ac:43:48:ca:c2:c3:66:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:76:02:F7:10:39:87:DA:8E:9F:86:98:37:36:1A:28:1C:B1:FF
X509v3 Authority Key Identifier:
keyid:FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1f:dd:bf:fa:4e:e9:4a:51:ad:a1:ad:8b:90:e8:0c:93:fd:
cf:43:3a:61:f8:de:82:c0:33:bb:4d:04:14:5b:86:1f:54:dd:
3e:5c:a5:80:d6:bd:c0:b0:87:74:65:f4:ff:7f:2e:93:ea:73:
ec:a3:37:68:9a:bb:a7:47:76:e4:19:80:26:2e:e4:c7:e2:bb:
0f:26:0d:af:a0:2d:65:9b:b5:43:b9:e0:58:48:9a:2b:24:76:
54:f9:d2:70:f1:82:a3:09:84:69:53:1f:db:00:90:6b:d9:b6:
32:b3:4a:a1:b0:93:cc:f1:6e:53:07:53:db:14:de:57:30:76:
98:83:71:74:75:58:c6:e9:24:d5:dd:74:83:2a:c6:ed:d3:1b:
17:cb:d0:e1:f9:c5:12:21:05:4f:50:08:66:03:46:ac:f1:cb:
fa:c1:b0:9b:a6:2e:2a:e3:a7:6a:1c:dc:ec:28:b1:4c:74:ab:
aa:63:f9:4c:cf:0d:4f:18:41:b8:ec:f5:f4:ab:2d:63:60:b5:
50:a7:dd:82:88:2b:73:2d:51:47:75:98:24:b2:16:c7:2e:d8:
09:a8:1c:51:a1:98:5c:21:af:34:df:d7:1c:a0:35:8f:88:d6:
ef:04:1b:c7:13:78:59:41:77:ef:c3:34:91:56:85:18:f9:a5:
4e:fa:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:33 2026 by rpki-client