
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
File: B3243760262DFCFB318CB7BD106063FABC13BAA1.mft (raw, json)
Hash identifier: zT1Lq3zcZXE2e1wn9IlAOoularcn/1vEK9BdEsl6RDc=
Subject key identifier: BB:DB:47:0A:94:A3:EE:A4:13:E6:3B:AE:6E:6A:82:27:84:AE:D9:2F
Authority key identifier: B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
Certificate issuer: /CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Certificate serial: 2CA2C8958882F6CEFA78A353A5F8E2570B91123E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 18:16:38 +0000
Manifest this update: Sat 13 Jun 2026 18:11:38 +0000
Manifest next update: Sun 14 Jun 2026 20:22:38 +0000
Files and hashes: 1: B3243760262DFCFB318CB7BD106063FABC13BAA1.crl (hash: IPYGGCqpflBZ11KJgvMJnKvUt1TtmZrFS1Y98lR4WnY=)
2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: YqWGfe897PjmJKmuh4iPhAooCf8xQK7zjY5edkVpneA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a2:c8:95:88:82:f6:ce:fa:78:a3:53:a5:f8:e2:57:0b:91:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Validity
Not Before: Jun 13 18:11:38 2026 GMT
Not After : Jun 14 20:22:38 2026 GMT
Subject: CN=BBDB470A94A3EEA413E63BAE6E6A822784AED92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:31:a4:2b:1f:9c:d7:a4:4b:6f:45:3d:c8:
e0:ed:92:7b:f1:c1:4f:4c:c0:b5:c8:90:6d:47:b4:
28:aa:e4:bf:2a:2d:19:ad:1a:6a:9d:72:5d:a9:23:
f5:6e:82:3f:11:2d:d5:b7:1f:dd:50:7a:37:e4:f6:
38:3f:7c:f8:ab:c2:10:68:e6:09:1a:76:6f:04:3e:
0b:3e:16:c5:49:da:fa:78:87:f1:7f:b4:fa:27:7e:
3a:ab:45:59:fb:b7:74:91:cf:68:cd:e3:01:64:6f:
6b:b0:f0:d9:a6:c3:03:1e:52:07:67:8c:23:1c:6f:
3e:28:b3:b8:b2:f8:fa:96:7f:bb:5c:6c:f8:20:29:
14:83:30:ff:27:9b:42:51:7f:4c:74:83:2a:e1:ee:
54:4d:59:73:6e:4e:88:1c:2c:5e:20:d5:be:33:10:
33:31:8f:50:93:60:eb:31:f1:2f:86:fb:f8:68:9e:
11:3f:50:c0:54:cd:f4:ca:44:b6:14:d3:15:38:1e:
92:7b:e2:30:28:26:8c:71:a7:77:d6:ee:b6:03:77:
0b:62:b2:30:15:7e:93:bb:de:db:cd:eb:fa:fe:1e:
35:77:ca:24:7f:99:c0:47:c0:9f:eb:06:a0:a1:76:
10:ef:30:41:ea:f7:8d:ae:34:d3:eb:6a:b5:b2:5a:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:47:0A:94:A3:EE:A4:13:E6:3B:AE:6E:6A:82:27:84:AE:D9:2F
X509v3 Authority Key Identifier:
keyid:B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6d:54:70:c3:bf:4d:e3:90:67:d2:76:4c:8f:25:5c:c7:ea:
68:c7:e9:5e:e2:dd:e9:72:38:0b:10:c2:7d:32:9e:d8:7b:ca:
50:f7:c7:48:b6:8d:db:45:3e:b0:af:65:9a:31:b5:ac:31:52:
b4:c2:26:08:f4:68:36:65:ce:19:52:d9:6e:85:6d:f9:48:e9:
6e:6e:58:72:3f:d9:e7:55:7a:14:d6:73:b3:95:08:cc:5e:31:
b9:64:7f:82:4a:1d:41:30:b1:47:56:f2:43:91:42:0a:79:71:
22:17:75:8a:e6:50:85:72:78:87:0b:59:dd:dd:b5:7c:1d:0b:
3e:67:52:80:a7:41:7c:27:40:13:b6:f3:79:22:97:8b:68:ad:
fe:fa:c8:62:7a:c6:40:da:b0:db:9c:12:b0:7b:81:06:23:3e:
6d:85:76:0e:69:61:7d:d0:a8:a9:93:03:52:25:74:3e:28:b8:
31:48:09:af:6c:82:f5:b8:99:18:6d:f9:cc:49:71:e9:2e:86:
c2:38:85:4a:8b:fe:3f:8c:f8:df:e7:23:95:7b:4b:8a:28:a4:
c5:b0:ff:bd:63:dd:4b:5a:27:5d:44:d7:0c:bc:8a:73:71:7c:
5b:41:43:58:bf:e7:d0:19:36:ae:09:c0:f3:50:d4:52:53:8b:
a5:e3:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:36:14 2026 by rpki-client