
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json)
Hash identifier: rmY0Zs0v/cIHlvAWTAn+I+N/B0khrxTnCNNrXvjGMNg=
Subject key identifier: 80:9A:3F:1F:9F:DA:49:7E:0F:0E:C8:56:3E:39:B4:A6:73:1D:75:6C
Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Certificate serial: 47A65B138BB943583127221E15C83E39E7212F87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 01:07:39 +0000
Manifest this update: Mon 15 Jun 2026 01:02:39 +0000
Manifest next update: Tue 16 Jun 2026 02:06:39 +0000
Files and hashes: 1: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=)
2: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=)
3: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=)
4: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: 7FZYfpIpj9iyT4ELStk3qk4SPdSR0m4wM/OFwbYT7a0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 02:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a6:5b:13:8b:b9:43:58:31:27:22:1e:15:c8:3e:39:e7:21:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Validity
Not Before: Jun 15 01:02:39 2026 GMT
Not After : Jun 16 02:06:39 2026 GMT
Subject: CN=809A3F1F9FDA497E0F0EC8563E39B4A6731D756C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:90:5a:34:41:e7:46:06:b5:5a:4c:46:6a:
30:6c:c5:fa:d3:fc:96:d1:3f:51:df:87:c2:12:cf:
f0:b9:7e:37:c9:6b:97:64:3e:a0:18:2f:46:10:12:
68:17:59:e0:3b:8b:b1:30:c6:01:ee:be:6f:66:22:
93:09:71:20:77:3f:8a:49:ad:ec:e5:53:bd:9e:74:
0c:b9:ac:75:57:f8:60:3d:fe:8b:66:3e:37:e4:bd:
82:26:c1:85:9a:fa:45:19:f8:06:81:5c:96:65:3c:
64:0a:0b:ea:d7:c9:ed:5a:d3:cb:32:9a:2e:25:ff:
17:33:0f:2f:83:aa:f3:d6:d2:74:fe:b1:29:74:f0:
3f:bd:3f:ec:6f:2d:37:0d:6d:b7:e9:82:f1:79:17:
76:2c:cf:60:40:38:a4:85:99:e3:f9:b2:a8:64:39:
0d:8a:fa:83:7c:4f:19:35:4c:0a:1c:0e:60:73:1a:
5f:2d:f7:87:d1:79:25:4f:ab:5f:3e:07:f3:dc:9a:
e1:e4:f4:6d:db:70:5d:ab:26:c2:c4:81:d2:49:d7:
ec:7d:ca:da:f5:bc:04:c0:13:02:cc:43:8f:73:6b:
5f:aa:8c:52:52:ec:07:bf:26:3e:45:86:8b:49:0a:
b6:f7:f6:82:c9:2f:ac:3d:f2:5a:46:40:70:df:b4:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:3F:1F:9F:DA:49:7E:0F:0E:C8:56:3E:39:B4:A6:73:1D:75:6C
X509v3 Authority Key Identifier:
keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3d:05:4a:cb:bc:2c:e8:01:72:3e:38:b7:d3:ee:69:c9:33:
e8:be:57:cc:1e:e5:1b:80:4e:02:d5:71:73:c2:0f:d4:0c:b5:
af:aa:45:35:22:1c:64:af:c3:fe:7e:5d:ff:fb:a1:62:23:29:
c6:ed:6b:80:85:7c:e8:08:01:b8:d0:1f:10:25:46:d7:a9:05:
a4:6a:ef:51:5c:d7:89:a2:2e:22:40:10:e3:0b:23:bb:ff:0c:
d9:1a:55:da:77:69:ac:89:82:62:19:b3:ff:d5:f2:40:2f:90:
9f:ce:39:70:42:18:a3:f5:a1:82:82:dc:b4:15:17:5d:6e:9e:
e9:b2:56:d3:25:43:12:f7:84:78:1f:05:5e:24:10:ac:30:bc:
ea:a5:36:1c:2b:67:d2:73:1f:7c:51:3e:d3:cd:04:e2:77:9c:
6e:68:19:85:72:af:ec:5f:25:45:53:00:66:04:83:31:8f:51:
c4:d5:35:75:d9:fb:f0:43:77:d5:b3:6c:bd:01:94:6e:37:36:
5c:cf:c9:ce:9b:89:13:0e:98:f2:b2:4f:94:6f:6c:7c:7e:a5:
f8:73:95:15:a9:38:d1:ce:28:fa:ea:89:bf:a5:78:8f:f9:f1:
fa:c1:bb:66:45:b4:a5:5d:fb:47:11:6f:23:45:44:84:3c:05:
31:aa:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:28:57 2026 by rpki-client