
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json)
Hash identifier: zoGKgmWnQwooD+ei84yBF9T7ZdGec+MMMkoDxQcUCAU=
Subject key identifier: 0A:74:79:01:2E:2C:87:6F:E2:2C:47:34:44:77:88:FA:83:CB:7D:90
Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22
Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
Certificate serial: 05E9021972D3D8D604BA9115EA58CA91D8F7C7BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 04:42:59 +0000
Manifest this update: Tue 28 Jul 2026 04:37:59 +0000
Manifest next update: Wed 29 Jul 2026 05:14:59 +0000
Files and hashes: 1: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=)
2: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=)
3: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=)
4: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: kOnWIdOXJdNA4Q3tT0hZhe4j+aE1DNq1F8lS7CaPG4w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl
rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 05:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e9:02:19:72:d3:d8:d6:04:ba:91:15:ea:58:ca:91:d8:f7:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
Validity
Not Before: Jul 28 04:37:59 2026 GMT
Not After : Jul 29 05:14:59 2026 GMT
Subject: CN=0A7479012E2C876FE22C4734447788FA83CB7D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:a8:a1:b7:ab:36:32:4d:d9:d8:b1:ae:99:
d6:d6:cd:c6:42:1e:01:b2:1b:35:fc:74:40:83:84:
30:68:22:73:20:f9:67:50:c2:a4:ea:4a:12:43:50:
e4:7d:e4:b7:21:a1:73:30:19:1d:0d:e8:24:d7:ea:
00:2d:a8:c0:dd:c4:41:91:49:3c:df:03:eb:cc:ed:
e4:d7:2a:1b:49:7d:ea:c3:6e:18:6e:66:d2:1f:fe:
8c:49:26:52:60:3f:0e:f4:39:31:1a:17:f0:6a:7a:
18:74:4d:46:fc:ae:0c:1d:e8:ee:e2:39:ac:0a:54:
75:d6:58:d1:ce:12:b2:90:64:32:2f:fc:ff:35:32:
8c:fa:49:52:0c:b6:94:64:ae:08:8e:ae:4d:d4:76:
c7:c1:a9:25:c1:df:c3:65:9f:87:c5:15:ad:a3:28:
90:53:e7:4e:38:8f:93:81:8c:be:21:6b:2b:6b:81:
11:00:81:47:15:a8:8a:fc:f5:aa:ee:ec:b2:dd:99:
99:c3:4d:30:81:2c:ea:50:17:e4:39:b1:ca:cc:1a:
a3:56:e1:12:86:18:d4:a9:73:97:13:5f:19:ab:bb:
aa:23:d2:ea:38:08:ae:34:79:17:ca:5f:42:58:63:
36:33:52:cb:6a:93:94:dd:0c:5e:e2:16:24:4c:9f:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:79:01:2E:2C:87:6F:E2:2C:47:34:44:77:88:FA:83:CB:7D:90
X509v3 Authority Key Identifier:
keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1d:13:f9:e9:97:36:b7:b7:5e:e0:6b:6a:9c:48:8b:22:59:
e7:4b:14:ca:5a:83:0c:7e:0d:0f:e0:94:44:17:76:55:e2:67:
43:c7:10:42:4f:4d:c1:f8:a6:4a:00:bd:df:6d:42:bc:54:fa:
e2:f5:f3:4d:44:79:32:42:51:dc:a7:d2:d9:3b:c6:73:14:4d:
ae:f6:fe:94:45:4f:d3:c1:53:8a:d7:d0:7c:45:93:e7:f4:c9:
d2:1f:f8:1b:f3:91:a8:9b:10:93:e6:65:9b:23:97:b0:b3:bf:
cd:8a:c1:58:99:62:db:b7:89:b5:0f:a8:cd:2b:fa:e7:8d:c9:
79:e3:f1:42:2f:08:8a:37:31:63:cc:64:9e:88:a7:bd:89:f8:
5f:65:a8:e7:be:2f:d1:8a:aa:33:45:b8:4a:74:98:38:93:cd:
4c:ea:31:7b:ee:01:f1:db:00:bb:77:e4:1c:01:e3:30:b5:74:
a1:3b:8f:fb:98:8f:5d:79:02:4d:a4:cd:33:f2:f6:f9:c7:b0:
31:97:aa:a8:d2:7c:67:d6:61:6e:0e:07:0f:64:79:0a:25:f1:
4d:f7:36:08:c8:83:73:b4:03:2d:7e:fc:aa:c8:3d:b4:8a:c0:
28:6b:28:c9:7c:a9:ca:d6:58:17:27:d9:91:0a:3b:21:e3:09:
89:41:89:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBekCGXLT2NYEupEV6ljKkdj3x7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1
ODRDQjkyMjAeFw0yNjA3MjgwNDM3NTlaFw0yNjA3MjkwNTE0NTlaMDMxMTAvBgNV
BAMTKDBBNzQ3OTAxMkUyQzg3NkZFMjJDNDczNDQ0Nzc4OEZBODNDQjdEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXqiht6s2Mk3Z2LGumdbWzcZC
HgGyGzX8dECDhDBoInMg+WdQwqTqShJDUOR95LchoXMwGR0N6CTX6gAtqMDdxEGR
STzfA+vM7eTXKhtJferDbhhuZtIf/oxJJlJgPw70OTEaF/Bqehh0TUb8rgwd6O7i
OawKVHXWWNHOErKQZDIv/P81Moz6SVIMtpRkrgiOrk3UdsfBqSXB38Nln4fFFa2j
KJBT5044j5OBjL4haytrgREAgUcVqIr89aru7LLdmZnDTTCBLOpQF+Q5scrMGqNW
4RKGGNSpc5cTXxmru6oj0uo4CK40eRfKX0JYYzYzUstqk5TdDF7iFiRMn7zXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCnR5AS4sh2/iLEc0RHeI+oPLfZAwHwYDVR0j
BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1
MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC
OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh
OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy
RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI4dE/nplza3t17ga2qcSIsiWedLFMpagwx+
DQ/glEQXdlXiZ0PHEEJPTcH4pkoAvd9tQrxU+uL1801EeTJCUdyn0tk7xnMUTa72
/pRFT9PBU4rX0HxFk+f0ydIf+BvzkaibEJPmZZsjl7Czv82KwViZYtu3ibUPqM0r
+ueNyXnj8UIvCIo3MWPMZJ6Ip72J+F9lqOe+L9GKqjNFuEp0mDiTzUzqMXvuAfHb
ALt35BwB4zC1dKE7j/uYj115Ak2kzTPy9vnHsDGXqqjSfGfWYW4OBw9keQol8U33
NgjIg3O0Ay1+/KrIPbSKwChrKMl8qcrWWBcn2ZEKOyHjCYlBifM=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:08 2026 by rpki-client