
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
File: B3243760262DFCFB318CB7BD106063FABC13BAA1.mft (raw, json)
Hash identifier: XZ7A1fyJBpNbECY4RMeHOLeyDqIW6slF6rzESSQaqnY=
Subject key identifier: EA:9A:A9:9D:1F:72:E9:54:89:D7:86:43:4F:32:32:AE:31:FD:7B:22
Authority key identifier: B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
Certificate issuer: /CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Certificate serial: 1CC1FA2947BCE9F7FBEDE6A065E1739ACEC1EECE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
Manifest number: DA
Signing time: Mon 12 Oct 2026 18:29:36 +0000
Manifest this update: Mon 12 Oct 2026 18:24:36 +0000
Manifest next update: Tue 13 Oct 2026 20:34:36 +0000
Files and hashes: 1: B3243760262DFCFB318CB7BD106063FABC13BAA1.crl (hash: F23YSYFd2xDqI9hQ3Y4qCHjHaL28UD5sqRZhd/sP87Q=)
2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: YqWGfe897PjmJKmuh4iPhAooCf8xQK7zjY5edkVpneA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c1:fa:29:47:bc:e9:f7:fb:ed:e6:a0:65:e1:73:9a:ce:c1:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Validity
Not Before: Oct 12 18:24:36 2026 GMT
Not After : Oct 13 20:34:36 2026 GMT
Subject: CN=EA9AA99D1F72E95489D786434F3232AE31FD7B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:02:bd:b2:cf:e3:a1:f0:4b:9d:26:79:87:
c5:d4:b2:a9:8d:dd:50:27:ff:c8:17:46:f5:86:19:
d5:58:82:9d:08:22:66:11:94:e1:95:88:6d:43:5f:
28:e8:b1:d9:51:b4:64:34:de:f2:9e:98:44:41:f2:
93:0c:21:52:b1:0c:b6:b8:1e:ea:e6:44:ae:3e:8b:
22:dd:8a:cf:52:50:4b:03:e2:34:6c:89:15:dd:43:
e4:25:83:d1:84:df:64:a1:64:f7:13:ed:b0:27:8e:
1a:a1:45:be:4a:cb:f1:4b:87:00:3d:74:78:75:a4:
b5:12:9d:7e:de:60:e0:15:1b:d9:5d:da:76:1f:45:
52:a6:e4:50:22:9d:f8:df:81:46:f1:a5:16:04:62:
0c:ff:15:ad:89:0a:66:6e:1c:45:43:92:ad:a4:11:
a8:55:1c:82:76:6b:56:5f:d5:da:18:c1:9c:0b:a5:
87:ae:96:60:c6:bd:47:d3:34:a3:1f:02:1e:e8:11:
41:cb:1c:be:4e:7c:cf:40:d7:4e:5f:de:f1:25:aa:
bf:d6:54:ec:19:ee:ff:ed:51:85:7c:9b:f3:aa:00:
58:28:c4:61:82:c6:21:5e:f4:5e:f4:89:2e:c8:93:
55:21:3b:77:77:f6:08:ab:c8:eb:88:fe:c9:cb:29:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:A9:9D:1F:72:E9:54:89:D7:86:43:4F:32:32:AE:31:FD:7B:22
X509v3 Authority Key Identifier:
keyid:B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:67:86:40:47:a3:41:ba:c4:b6:89:4f:79:5a:54:89:3e:
0f:49:62:15:3f:b2:e9:2b:e5:2b:d7:7d:47:4e:6a:e3:7a:ad:
32:ed:ea:30:07:b4:9d:10:12:3f:c8:69:c7:f0:74:0c:0b:84:
f9:46:2a:92:30:47:c3:6f:99:8c:48:22:e0:a4:44:01:a7:2c:
d2:96:35:ac:c1:dd:5b:2b:f1:80:7b:af:2d:75:da:bc:a5:12:
7f:da:46:a2:98:2e:4b:a9:eb:35:6c:b1:a8:0a:69:fb:19:1c:
eb:5c:ea:63:d8:85:ee:cd:ab:f4:51:4e:33:de:59:ef:1f:b5:
d4:1c:31:96:9c:70:11:14:e5:43:bd:a6:dd:e4:ce:11:29:2b:
f7:1b:14:60:6c:95:e7:f6:2f:72:f3:65:1b:15:e2:fa:f2:6e:
15:cb:88:9d:ed:66:e3:90:0e:39:8e:6e:0f:d3:8b:61:09:ca:
53:5c:1d:67:00:02:c6:cb:42:c4:dc:c7:4b:9c:ce:ce:50:07:
f3:e7:90:a0:74:70:d4:05:79:74:2f:b0:5c:bb:d4:8e:cf:bb:
12:10:11:47:20:a5:b3:60:e9:0f:ad:03:36:ff:29:18:81:37:
6e:1c:4e:78:30:5b:7f:e5:f1:3d:0a:da:0d:ed:2d:9d:32:14:
78:c3:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:42:52 2026 by rpki-client