
$ rpki-client -vvf rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft
File: 03B040ED202D246E438A73DEA26426FBECEBB10D.mft (raw, json)
Hash identifier: HTllCRqznEy6GiHiVv+3RVwFyqSja/4OQdKgFi1I5gI=
Subject key identifier: 29:6E:95:FF:BD:B6:3E:27:78:9E:FC:E9:6B:FA:00:6B:9C:1F:4B:5C
Authority key identifier: 03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D
Certificate issuer: /CN=03B040ED202D246E438A73DEA26426FBECEBB10D
Certificate serial: 6F7B93BA0A0E445906D48EA2788197855D54D2E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:38:29 +0000
Manifest this update: Sat 13 Jun 2026 03:33:29 +0000
Manifest next update: Sun 14 Jun 2026 07:09:29 +0000
Files and hashes: 1: 03B040ED202D246E438A73DEA26426FBECEBB10D.crl (hash: a1OrnTa3HM40Uev2Fssg1plQ0u/Hx9iMoC6YlO1i4Gc=)
2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: C5jQrGNmSHPl6nz+o4/GVoDQQPjQAT8dJlkaOBni5mA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl
rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7b:93:ba:0a:0e:44:59:06:d4:8e:a2:78:81:97:85:5d:54:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03B040ED202D246E438A73DEA26426FBECEBB10D
Validity
Not Before: Jun 13 03:33:29 2026 GMT
Not After : Jun 14 07:09:29 2026 GMT
Subject: CN=296E95FFBDB63E27789EFCE96BFA006B9C1F4B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:42:73:8d:c6:66:1b:f3:b3:02:65:3f:68:
9e:0a:fd:88:4f:6d:c9:0c:01:b7:85:72:0c:49:14:
7f:f5:1b:d1:ed:2d:8f:19:41:71:bf:cf:ba:6e:76:
3b:21:04:a4:eb:21:fd:c4:d4:ec:7a:b3:09:64:7f:
ec:9b:29:81:a4:38:ae:51:0c:8b:ea:4c:0c:03:f9:
81:62:5d:dc:f4:0c:de:b6:64:68:33:84:23:3e:bf:
a2:13:ee:28:9d:04:ab:37:95:e2:1f:ec:5b:38:78:
db:f9:0f:f9:fa:29:27:d0:4b:3f:0a:74:fa:aa:b6:
ee:50:8d:d6:d7:03:ff:21:e7:31:dd:bc:ec:dc:27:
8c:4c:32:bd:55:7e:16:f5:dd:9f:ce:f9:bd:91:11:
25:4d:1e:2c:8e:3a:7e:88:6e:23:4b:e2:0a:78:8a:
9a:5c:33:3e:37:77:28:fa:3f:38:60:88:6d:5b:2f:
e4:94:12:13:e6:e0:aa:4f:48:7d:d6:b5:66:d3:17:
2d:69:91:8c:0f:55:6b:ae:ac:48:a7:1e:2a:dc:f9:
1c:cd:8b:41:bb:a5:c8:15:ec:50:7b:ba:03:2d:8a:
59:5e:24:4d:9d:5f:62:87:a3:a4:ef:2f:85:66:98:
3d:41:67:7e:1b:c0:9a:7a:82:f6:bd:21:a2:d9:e5:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:95:FF:BD:B6:3E:27:78:9E:FC:E9:6B:FA:00:6B:9C:1F:4B:5C
X509v3 Authority Key Identifier:
keyid:03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:8a:16:aa:ae:cc:73:95:b4:74:28:a7:41:8a:24:a8:0d:
0c:4e:a7:b6:3f:44:af:40:68:29:65:89:a7:9a:4c:6e:b5:29:
2c:7b:07:a9:d0:28:77:26:91:87:70:4e:12:3f:9f:2b:cf:ea:
0d:5e:9f:97:68:b4:08:66:38:e1:ae:ed:ff:49:d5:b1:d1:eb:
aa:5c:33:a5:f4:09:53:0a:8e:d1:9f:b5:89:1e:07:af:84:4b:
ac:be:6f:c4:00:b6:02:15:44:54:7f:c6:c9:ae:93:fa:f7:e5:
f8:60:8b:3c:da:6f:fc:93:ad:69:97:a5:63:16:8d:15:a7:ae:
b9:dd:4c:96:c5:db:a6:e7:db:e3:d2:66:32:2f:0b:0c:17:43:
99:4a:b6:02:de:40:24:ce:f2:59:85:85:d2:80:d9:f3:5f:ca:
a7:f2:a3:a4:bf:71:c6:97:4f:ac:87:28:b3:d7:49:f1:9c:c8:
83:d2:66:db:cf:e4:16:41:a5:6c:69:d3:7f:a0:23:76:95:e5:
d9:00:42:62:f1:21:e4:26:94:7e:36:d2:f9:30:62:74:1a:b1:
3c:ac:33:a2:95:de:b9:9c:7b:ab:c5:32:c0:5b:bc:0e:ec:dd:
e7:cc:08:66:ff:3d:81:39:4b:a1:9f:bc:bb:83:e6:6e:41:22:
46:7f:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:13:05 2026 by rpki-client