
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
File: 3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json)
Hash identifier: qVezdthGrOwS6jobtZwnV6OZG/76mQn0exIwV7pjG18=
Subject key identifier: 5C:40:14:87:60:0D:92:B7:6E:14:E9:A6:3D:F9:89:98:53:79:69:B0
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 2258A643A35377958719AE51D05FB7DC2290AD4D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:13:40 +0000
Manifest this update: Tue 16 Jun 2026 20:08:40 +0000
Manifest next update: Thu 18 Jun 2026 00:10:40 +0000
Files and hashes: 1: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=)
2: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=)
3: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=)
4: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: kyv5TQHGDtd7ULo1eDlGfRd/ASFbhlUJ410vb5po1M0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:58:a6:43:a3:53:77:95:87:19:ae:51:d0:5f:b7:dc:22:90:ad:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: Jun 16 20:08:40 2026 GMT
Not After : Jun 18 00:10:40 2026 GMT
Subject: CN=5C401487600D92B76E14E9A63DF98998537969B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:db:48:65:2e:a9:e4:ba:54:26:75:ff:9f:
37:06:26:57:3d:81:e6:95:f7:c1:d0:16:fc:c0:1f:
5c:56:74:42:54:fe:2a:8a:63:60:60:ce:8d:10:69:
6f:b7:42:80:4d:90:87:48:e1:51:ae:98:73:11:58:
92:68:78:f8:31:e0:47:66:d3:3d:c1:95:58:28:c3:
2a:6e:e0:fb:ca:f5:bb:d4:64:79:eb:c1:a7:5b:a4:
d8:5a:f7:65:b7:6e:b9:52:d1:c3:b2:a0:a0:69:e4:
a2:52:4f:9c:8c:e7:82:c4:9f:e7:fb:31:46:08:30:
42:76:6a:7a:a2:3e:3f:f5:34:10:be:b0:37:47:7a:
4a:ac:c0:da:c1:c0:32:1a:f9:a5:7c:1f:a1:68:0e:
cf:cc:d4:11:24:96:1a:fd:d7:a7:69:44:28:37:72:
33:a3:83:fc:f8:57:e1:fb:1c:b4:f3:3a:95:b4:16:
51:61:00:76:bc:e2:4e:ec:10:cc:f8:82:3b:85:85:
b6:91:de:ee:6d:5e:4f:91:26:e5:8c:81:55:e5:f2:
2f:e2:e9:60:f7:58:71:98:e9:1a:43:e4:89:40:23:
4c:ee:e7:5b:7a:f6:a1:b7:de:69:9a:9a:5a:12:64:
72:72:6c:87:c4:cf:c9:b5:d1:36:40:fd:3d:57:9b:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:14:87:60:0D:92:B7:6E:14:E9:A6:3D:F9:89:98:53:79:69:B0
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fe:66:d3:30:19:60:d3:96:1c:09:62:f0:3a:1d:08:5f:90:
ec:6f:4a:f3:dc:9a:43:0e:a2:89:30:e6:fc:68:13:3d:ec:73:
f4:1e:eb:64:a1:41:cc:2f:41:cb:c0:e2:23:c6:bf:e6:e4:64:
31:c2:fd:73:17:82:ec:d1:c5:8c:7d:6c:62:ae:bf:27:66:87:
ba:4a:12:59:a9:53:e3:c7:df:5b:85:a8:36:ea:55:d6:df:7b:
3b:32:be:7a:59:31:24:22:49:47:09:e5:b5:af:17:ad:2e:3c:
ea:54:05:40:7c:88:e1:d3:a7:7a:98:95:90:2f:4b:68:9b:67:
a0:a5:87:f1:37:13:50:a9:ee:0b:17:e7:1f:37:98:49:84:14:
b9:b5:61:33:70:0f:95:66:f1:cb:c5:2c:0e:a9:ca:bf:c3:16:
be:7e:35:0c:0f:26:0e:72:b7:03:6d:95:22:78:ef:63:44:40:
32:43:fe:a7:60:82:84:44:1b:51:36:c4:46:39:0c:83:fa:9c:
d4:08:a4:0c:54:d5:73:13:e6:c5:1f:fd:25:63:1c:4b:7f:16:
4b:6a:a7:b1:6f:87:99:dd:12:4b:9a:15:49:ad:70:24:2b:c1:
ee:d8:d0:d1:b4:33:a2:cf:12:a4:1c:8d:7f:46:1d:88:19:f3:
e3:3e:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:27 2026 by rpki-client