
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft
File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json)
Hash identifier: 8L5UvIlLBwvSkZgrxJl/2o4qciGmm7Li0fVtPvJlh0c=
Subject key identifier: 6E:1B:B3:F6:CC:9B:CE:AC:A9:ED:7B:B1:90:F7:02:89:58:8C:BC:FF
Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33
Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633
Certificate serial: 4FBB9E78EB103613E4033D16913BF3B30982DB19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 04:58:57 +0000
Manifest this update: Wed 17 Jun 2026 04:53:57 +0000
Manifest next update: Thu 18 Jun 2026 08:38:57 +0000
Files and hashes: 1: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=)
2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=)
3: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=)
4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=)
5: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: o2U8r/xuzMLyZgLUhqL9wB/zbE/5ULz1hhm2bNecSMo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl
rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:bb:9e:78:eb:10:36:13:e4:03:3d:16:91:3b:f3:b3:09:82:db:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633
Validity
Not Before: Jun 17 04:53:57 2026 GMT
Not After : Jun 18 08:38:57 2026 GMT
Subject: CN=6E1BB3F6CC9BCEACA9ED7BB190F70289588CBCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:70:be:ed:1e:5f:e7:e1:60:02:5f:41:65:
73:bf:e6:a9:db:df:79:60:4a:15:07:fb:5d:f3:a8:
84:12:c1:24:b7:49:da:8e:84:a0:c7:01:16:86:d2:
bc:66:e7:8b:0e:94:7f:a7:d7:5d:03:94:e4:f6:84:
0e:ec:53:95:53:ec:9e:0f:5e:96:19:05:22:57:e5:
7d:15:b4:c0:36:9c:5c:be:84:12:00:52:ad:9e:74:
ec:ed:30:0a:67:69:fb:02:7f:75:5a:cb:63:6e:3f:
a9:ee:72:9c:f7:41:84:06:99:7a:d1:95:2e:50:e7:
3c:2f:6c:aa:26:41:cb:6c:2f:dc:ef:9b:8d:7d:2e:
f8:4a:04:27:0a:22:8a:d9:e8:7c:5c:66:c3:e0:82:
0d:81:d7:3f:c4:c1:f7:72:92:21:15:c3:83:c8:5c:
aa:67:e4:64:ad:a0:37:a5:d8:61:d3:4a:ad:1d:e3:
34:00:b0:f8:4a:dd:f6:0e:80:73:ab:81:08:f1:bf:
f1:61:9e:99:8d:e7:e4:34:40:36:55:85:48:09:c7:
84:c2:fd:b2:31:c9:03:2f:6e:55:5e:c5:c8:56:a7:
6e:7e:0b:8c:49:18:f1:46:96:cf:27:92:d4:7e:ca:
b7:0c:97:2b:40:ec:73:6d:e2:8c:4e:3b:92:c7:c3:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:B3:F6:CC:9B:CE:AC:A9:ED:7B:B1:90:F7:02:89:58:8C:BC:FF
X509v3 Authority Key Identifier:
keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5c:41:73:70:7c:fe:e3:31:37:c7:a2:2a:01:f2:41:1e:1a:
6f:75:ec:0c:06:06:06:bd:d0:d3:fe:00:15:89:9e:be:3d:83:
e4:f5:ab:3b:9c:12:6b:50:cc:83:4d:d1:d9:fc:8a:69:e8:09:
b4:56:ed:b7:b9:e8:cf:96:c4:a9:7c:6d:38:51:a1:32:41:d6:
31:28:1f:8b:d8:cd:04:ae:ff:8a:fc:8f:eb:69:40:63:9b:5a:
77:14:94:f4:44:a7:40:5e:89:c3:d9:dd:ad:b6:87:86:ae:8c:
97:9c:3c:77:2e:41:ba:9a:7d:a7:dd:85:82:28:91:d3:0a:d0:
96:85:d8:0b:8e:33:53:06:07:fb:7c:97:cf:e3:89:ad:0e:9a:
a1:8c:fe:55:54:0e:d2:ed:7d:f5:d1:5d:96:1f:07:4a:01:b4:
af:e3:66:db:5f:4f:fa:ec:c9:2e:f4:16:0f:93:04:bd:c2:32:
c0:86:f2:8c:15:da:80:34:19:2a:cd:6e:47:80:40:ce:06:89:
7b:84:3b:a5:34:8b:b6:8f:40:fa:6d:78:48:a3:b7:46:7c:e1:
78:6d:ca:a9:b2:e9:cb:7a:7d:ff:65:a6:95:0b:69:04:38:71:
1e:8f:1c:24:b9:87:ad:ed:4c:91:52:44:70:a7:12:4f:01:f3:
5f:fc:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:02:28 2026 by rpki-client