
$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
File: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft (raw, json)
Hash identifier: dCzVi7sWHRIXqfqu3+S0zk7tb3NI0b6dFvq0uxo/+qs=
Subject key identifier: 9B:4F:A4:C4:4C:A7:63:08:DD:98:A5:D5:82:96:8C:7B:F0:DB:F0:02
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial: 1FB1EE88548C53F7A2D60E598BE2DC1AC55E9AB1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
Manifest number: 3C
Signing time: Mon 15 Jun 2026 07:15:06 +0000
Manifest this update: Mon 15 Jun 2026 07:10:06 +0000
Manifest next update: Tue 16 Jun 2026 10:24:06 +0000
Files and hashes: 1: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: 9Uh4g+j84Dsp+SQG55jiqFV/GXapMzCJHzdMQ8QVMIs=)
2: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 5bkG3r6aOam2UYiAyDRHJLOMYGtAoc4TWZuSkWY6DW8=)
3: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: SZ3yY2r9mzkD9TfHT8RxuOv5AwUhsGvKGPEF8U53ZKI=)
4: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: Fncw6ejzrq4zIDml7sJv0ARYNNSdP3usP81sr9K6idM=)
5: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: ZJYJND6cBL2XfAoUPgiKsDkKfS/wfCExUcg8XPfgBm0=)
6: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: mUUIB+/mtgQYA4ZJFgHA5FD7YbXkeVVQm5wqTm9otqY=)
7: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: furgG1WGsI/SaHbEkYDIDFe9YchJUqhB/+OGElUaiP4=)
8: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: Y9dwS9JvSaOl4mADQu18dqt11q2d+GtfYQ7OjGf2xvk=)
9: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: dVzU+GqvAS7Wn+MjXVPbLdaACaAzf5gsplbVnIYe7RI=)
10: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: tc07x6I5GlIGtQm74mFDwkPY7veOT+58YPaMpLFuMP8=)
11: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: QO5w5W9cp8cI6poTkpuXpM9F3mhiRyQeqAdZ2Rfgw6w=)
12: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: FPgfsxknLRU1LHc9BebuH01+tHe4lP7NUuhwY6WPhmk=)
13: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: 8kncCReHuUftWwxEVQGeXIdZhJBx7PmiqOaqTEDqEqo=)
14: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl (hash: iELuDoHL9Xu/9bnBpyY0RFdddL9lthLqTkiAZr1CogI=)
15: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: FGw2BZbAPXB424pj8gkt+KyDf13NBMafjHJz1qqtroA=)
16: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: S43umrQnayZCpSzQYIAmH2LGDnCAWJ6VcBOOrq/ns7Y=)
17: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=)
18: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b1:ee:88:54:8c:53:f7:a2:d6:0e:59:8b:e2:dc:1a:c5:5e:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Validity
Not Before: Jun 15 07:10:06 2026 GMT
Not After : Jun 16 10:24:06 2026 GMT
Subject: CN=9B4FA4C44CA76308DD98A5D582968C7BF0DBF002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:f1:ad:a0:a5:72:7c:d0:30:33:49:d4:d9:
d2:43:49:e6:43:27:31:e1:f5:06:89:df:c5:c0:9f:
a5:5f:47:6f:08:a5:a4:ed:4d:cc:30:b6:a3:c9:99:
a2:7c:4f:48:e1:cf:4b:c2:a5:8e:b0:82:dd:d9:7c:
42:f8:51:21:59:65:80:ea:c7:f1:11:2b:8e:61:71:
e0:e5:f3:d3:f4:bd:51:fe:2c:ba:c0:db:9e:de:dc:
ce:53:b7:15:38:0f:da:20:d3:5a:03:dc:04:8f:ce:
57:c1:89:d9:85:fb:75:3f:2c:c5:be:71:3b:63:c2:
b5:6c:3f:ec:59:45:08:e0:a3:eb:e2:99:11:0a:34:
c1:7a:94:5b:83:9e:ef:33:53:02:40:0e:ea:a7:34:
1a:b5:53:1d:29:e9:ed:6d:8e:44:98:6f:5f:7a:ce:
9a:02:9b:cb:3f:0d:1c:1b:63:5b:3a:5d:16:f6:5c:
47:1c:47:53:6c:dc:86:88:fd:9d:51:12:42:b3:71:
70:e0:8e:02:a1:8c:fc:90:52:b1:a0:32:30:d0:b4:
ff:0a:b4:cd:25:a9:a8:6c:05:03:b1:f3:8e:87:3e:
ea:86:90:7f:aa:a3:aa:3c:29:0a:70:03:61:79:33:
97:c3:86:89:7d:03:8a:da:41:76:c7:3b:38:51:57:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:A4:C4:4C:A7:63:08:DD:98:A5:D5:82:96:8C:7B:F0:DB:F0:02
X509v3 Authority Key Identifier:
keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:94:d6:0a:da:b5:da:03:c2:66:76:5f:1a:b0:8a:8b:70:6a:
09:60:95:b9:f3:55:8f:20:79:f2:77:02:93:5d:d7:7d:1f:db:
14:90:43:f5:ea:f4:4b:6a:8d:9a:ae:b2:b7:ed:3c:b6:ac:ae:
9b:33:27:c6:11:7e:50:ea:e1:3c:ad:71:28:96:ac:a4:4e:8d:
af:fd:81:b3:12:7f:33:d1:e0:5e:dc:c6:9f:91:4b:9d:5f:94:
31:71:96:f6:81:7d:c0:dd:39:8b:af:ec:d0:a1:3e:67:c3:20:
ba:aa:38:c9:9e:23:a4:34:a8:50:67:67:db:c7:2c:09:39:ce:
80:e0:50:9e:68:be:19:a1:68:d3:c3:af:be:40:9d:12:19:3f:
ac:3e:de:74:1a:f4:f3:24:24:53:d6:c7:6a:76:1f:2c:5e:00:
b7:fb:69:40:14:71:1d:8e:f5:b2:c9:0d:c7:06:d4:aa:b6:48:
66:20:f5:a3:f7:51:b5:e3:57:c1:7d:51:88:b3:ec:ac:33:f3:
c4:ae:27:43:0b:af:c3:a2:1a:b8:27:8a:78:56:41:14:0c:fb:
cc:b3:e0:db:9e:78:6b:d6:c0:f2:0d:99:db:8f:48:63:2b:fe:
24:7e:be:7d:09:97:a4:fd:b2:61:dc:70:d0:61:ef:02:ef:e6:
a0:d3:db:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH7HuiFSMU/ei1g5Zi+LcGsVemrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwOTBBMUJDRTk0NzE3OThFRTZEMDc5RUVDMDcyNkVD
QTlBMDE4NzAeFw0yNjA2MTUwNzEwMDZaFw0yNjA2MTYxMDI0MDZaMDMxMTAvBgNV
BAMTKDlCNEZBNEM0NENBNzYzMDhERDk4QTVENTgyOTY4QzdCRjBEQkYwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMbvGtoKVyfNAwM0nU2dJDSeZD
JzHh9QaJ38XAn6VfR28IpaTtTcwwtqPJmaJ8T0jhz0vCpY6wgt3ZfEL4USFZZYDq
x/ERK45hceDl89P0vVH+LLrA257e3M5TtxU4D9og01oD3ASPzlfBidmF+3U/LMW+
cTtjwrVsP+xZRQjgo+vimREKNMF6lFuDnu8zUwJADuqnNBq1Ux0p6e1tjkSYb196
zpoCm8s/DRwbY1s6XRb2XEccR1Ns3IaI/Z1REkKzcXDgjgKhjPyQUrGgMjDQtP8K
tM0lqahsBQOx846HPuqGkH+qo6o8KQpwA2F5M5fDhol9A4raQXbHOzhRV/Z/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm0+kxEynYwjdmKXVgpaMe/Db8AIwHwYDVR0j
BBgwFoAUPQkKG86UcXmO5tB57sBybsqaAYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjA4YjI5NTktMWMyNS00NmEwLTg5ZDEtZjc3ZDVjNDc0NjkxLzAvM0QwOTBBMUJD
RTk0NzE3OThFRTZEMDc5RUVDMDcyNkVDQTlBMDE4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRDA5MEExQkNFOTQ3MTc5OEVFNkQwNzlFRUMwNzI2RUNBOUEw
MTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA4YjI5NTktMWMyNS00NmEwLTg5
ZDEtZjc3ZDVjNDc0NjkxLzAvM0QwOTBBMUJDRTk0NzE3OThFRTZEMDc5RUVDMDcy
NkVDQTlBMDE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKeU1gratdoDwmZ2XxqwiotwaglglbnzVY8g
efJ3ApNd130f2xSQQ/Xq9EtqjZqusrftPLasrpszJ8YRflDq4TytcSiWrKROja/9
gbMSfzPR4F7cxp+RS51flDFxlvaBfcDdOYuv7NChPmfDILqqOMmeI6Q0qFBnZ9vH
LAk5zoDgUJ5ovhmhaNPDr75AnRIZP6w+3nQa9PMkJFPWx2p2HyxeALf7aUAUcR2O
9bLJDccG1Kq2SGYg9aP3UbXjV8F9UYiz7Kwz88SuJ0MLr8OiGrgninhWQRQM+8yz
4NueeGvWwPINmduPSGMr/iR+vn0Jl6T9smHccNBh7wLv5qDT2/s=
-----END CERTIFICATE-----
Generated at Mon Jun 15 14:15:43 2026 by rpki-client