
$ rpki-client -vvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft
File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json)
Hash identifier: GniRWoI2aAgYQU1qADiWh/8FifJaRT7Y0D2ZanerlJU=
Subject key identifier: BB:0B:50:C9:90:8F:70:88:6D:D1:2C:9F:A5:66:1D:52:3A:86:F8:73
Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B
Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B
Certificate serial: 6683DE5A9DC8CAF8C709A018B67EFD1BE25FE783
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 16:29:13 +0000
Manifest this update: Tue 16 Jun 2026 16:24:13 +0000
Manifest next update: Wed 17 Jun 2026 20:15:13 +0000
Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=)
2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: aN7IeohXq0EDLEp4lFv43Ybg81qfRbFOCZqREhZpYto=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl
rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:83:de:5a:9d:c8:ca:f8:c7:09:a0:18:b6:7e:fd:1b:e2:5f:e7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B
Validity
Not Before: Jun 16 16:24:13 2026 GMT
Not After : Jun 17 20:15:13 2026 GMT
Subject: CN=BB0B50C9908F70886DD12C9FA5661D523A86F873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:4c:d2:6a:27:66:eb:0c:94:22:61:12:70:
c0:24:6b:3d:a5:5a:25:fe:ea:d4:a9:01:83:0d:56:
d8:fe:c9:6e:d1:fd:30:d3:4c:47:d8:77:a2:ee:ce:
0f:e8:9b:c5:fe:a4:2f:0b:1c:bc:4a:49:fc:fb:d7:
28:aa:5c:19:95:02:4b:a9:9d:dc:2f:2a:8e:45:97:
14:79:f5:0a:49:f0:d2:55:ce:80:49:fa:70:49:3e:
0e:02:47:39:a4:0a:ee:56:1a:e2:2d:b1:2d:d2:77:
23:7d:3a:15:c9:f9:c3:b7:19:6c:81:34:4b:24:b6:
84:94:63:27:2c:54:d5:be:e7:a4:05:6d:2e:02:a1:
6b:2f:85:0b:21:ce:1d:87:ed:3c:74:d6:9c:8c:fd:
2d:fd:62:fb:c8:04:83:30:72:18:24:63:48:07:4e:
dd:87:bf:a2:ae:a1:0b:9b:22:73:d4:a8:14:ac:7b:
e2:e3:7b:83:04:14:10:ce:2d:5e:2f:4e:c9:8d:5c:
d5:5a:86:33:52:b4:4d:4e:6a:a4:ac:8b:6a:5d:25:
ff:7d:4f:f0:cd:47:ed:08:24:fb:3b:b0:2a:80:19:
f1:65:87:6c:fb:88:f8:96:ae:cb:a3:d1:9c:48:d0:
57:d2:f7:aa:7b:95:63:0e:51:90:e6:d4:7f:96:db:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0B:50:C9:90:8F:70:88:6D:D1:2C:9F:A5:66:1D:52:3A:86:F8:73
X509v3 Authority Key Identifier:
keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:28:be:e7:fd:13:0e:32:7a:a1:4d:fe:61:54:04:33:7b:
6f:77:5d:f3:ff:28:f5:53:f2:55:ee:18:7b:e5:c5:6a:1f:fd:
67:39:c9:15:a3:5b:0d:4e:58:1d:61:cb:9b:a3:9d:4a:6d:df:
7c:a1:64:6f:e0:dc:63:5f:0d:f5:41:8f:3f:41:a0:dd:e7:66:
5b:ae:7e:d5:4d:8a:f4:86:ae:da:86:91:b6:bf:a4:bd:af:31:
25:28:a9:c4:d2:a4:fb:29:98:15:05:45:bb:b3:57:dd:12:c2:
e2:bd:fc:93:a6:96:06:02:76:06:96:12:e4:16:a0:e1:09:75:
e5:81:e4:ae:2a:9f:03:41:1b:26:fc:53:ed:be:c4:13:68:92:
80:e5:03:1a:9b:31:b7:b4:06:ba:08:76:76:b6:8a:fe:b6:6d:
1d:de:58:89:9e:bc:d5:e9:1d:90:7b:2c:54:54:e4:47:f4:80:
85:f5:37:08:75:15:be:54:53:2b:1f:1d:ff:7d:f5:2e:5b:cd:
57:c6:93:2a:28:3d:42:a4:c6:b2:5d:fb:2c:03:33:8b:e9:cb:
99:6c:e5:72:27:9c:5b:db:91:c0:c8:b9:1a:48:00:91:56:37:
5c:fa:34:ba:94:73:11:53:1b:31:8a:d2:c8:f3:b3:31:0e:16:
25:b6:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:33 2026 by rpki-client