
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
File: 357778A786AA1E6854673B0A6AAAA40B85254E94.mft (raw, json)
Hash identifier: 6C79zQlTVOr5hh+qj0g/7KPNR5WVSCW7QTMblNADg8I=
Subject key identifier: A6:46:14:43:C8:57:E4:2D:5C:1F:C8:18:F3:22:76:6B:AA:FC:83:58
Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
Certificate issuer: /CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Certificate serial: 5173C6B1A14C58DF532835B89E961B6841BF934C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 17:30:18 +0000
Manifest this update: Tue 16 Jun 2026 17:25:18 +0000
Manifest next update: Wed 17 Jun 2026 18:21:18 +0000
Files and hashes: 1: 357778A786AA1E6854673B0A6AAAA40B85254E94.crl (hash: hsKf6LmBVEr2Trzm+HJTQXX7ZKGmPa46ooD2BPAZyEE=)
2: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 7ETsMsldfe5UrsfaSRsi4x54y8+ydy+yp/J35qzk+sc=)
3: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: hjalkv3P7i18uJ7S9FBqgBtHEhsf6OEBgP8fNSR+fXY=)
4: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: 5+l8Bv4b+lu/zj1I0m9wF216uhFzz02OufoiSu3ruBk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:73:c6:b1:a1:4c:58:df:53:28:35:b8:9e:96:1b:68:41:bf:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Validity
Not Before: Jun 16 17:25:18 2026 GMT
Not After : Jun 17 18:21:18 2026 GMT
Subject: CN=A6461443C857E42D5C1FC818F322766BAAFC8358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:93:8d:76:e1:23:d2:fc:b0:1c:a0:bd:85:
88:d4:04:50:9a:2e:aa:7d:70:ae:a4:d9:a0:1a:d4:
d1:2d:06:3d:4b:e2:b2:1c:74:b3:05:5c:a5:c1:b2:
2b:af:34:6e:95:91:d5:22:e4:7b:09:90:68:33:b9:
3a:c0:92:e2:41:cf:82:15:a5:d6:47:e7:58:0c:ca:
a6:6d:27:55:3c:3b:07:d4:94:d9:b8:f9:5b:87:a8:
19:06:d6:90:95:15:e4:c3:d4:c6:27:ee:9a:8e:10:
9a:95:49:9a:3b:17:1b:69:41:86:6f:60:64:16:14:
93:e8:23:d3:85:3a:07:52:a6:67:7e:9c:a5:68:0c:
1f:1a:7b:89:07:04:bd:1e:0a:cb:e3:42:3b:69:df:
a1:93:99:cd:0d:a2:6c:aa:7e:dc:57:d4:a5:31:7a:
b0:19:49:9b:cd:54:6f:f7:a9:10:3c:26:b5:2e:b4:
53:d9:21:c8:bc:10:18:0c:00:5b:03:49:22:0f:93:
74:89:0d:ec:5c:dc:11:bc:d4:76:ad:68:af:8a:5a:
40:b7:ea:84:fa:22:11:e2:5b:22:d2:19:7d:6a:fb:
b4:df:4d:94:36:10:93:c2:e9:ee:e3:76:8b:f8:11:
3e:18:f0:f5:96:8d:bc:08:83:d5:2e:19:29:68:1c:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:14:43:C8:57:E4:2D:5C:1F:C8:18:F3:22:76:6B:AA:FC:83:58
X509v3 Authority Key Identifier:
keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:27:51:7d:1d:29:c2:7e:8c:8a:6b:0e:8a:1b:f4:9a:7c:c6:
65:64:84:35:77:e1:71:c4:62:b8:6f:f6:a2:07:c6:2d:f3:be:
3b:b6:be:55:30:01:0b:40:7d:6d:2f:d9:43:df:03:a4:57:fc:
b5:39:7b:5a:97:fd:b3:92:52:3d:54:65:67:6e:9c:7e:53:a1:
a1:bc:c7:f0:41:13:f0:a5:14:e3:d6:c9:d2:fb:a8:75:9b:83:
76:4d:39:e4:f0:8a:46:36:7d:4f:cf:0f:83:c3:13:82:3e:30:
98:96:0c:e0:98:03:80:6c:e9:81:1c:ac:94:de:b5:33:72:a9:
4c:29:91:8a:32:3a:d9:5b:db:3c:04:5b:57:41:23:4f:d6:37:
d7:0d:41:28:17:77:03:30:e3:bd:73:06:82:cc:0e:c4:7c:4e:
0f:12:ad:ab:da:bb:82:ba:cb:40:84:f9:8e:d2:29:14:cb:7c:
41:4f:e8:86:79:36:3a:79:39:18:fb:c6:32:9c:ba:85:b4:43:
29:5f:f2:1b:8b:39:a9:77:c5:03:11:fe:21:be:0c:34:6c:10:
a6:ea:87:d0:9b:6c:db:d4:eb:c9:db:bb:22:93:8c:e6:9b:5f:
70:83:b0:0f:3f:45:26:b5:70:f1:ba:f3:fb:f3:eb:75:2e:eb:
61:07:80:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUXPGsaFMWN9TKDW4npYbaEG/k0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4
NTI1NEU5NDAeFw0yNjA2MTYxNzI1MThaFw0yNjA2MTcxODIxMThaMDMxMTAvBgNV
BAMTKEE2NDYxNDQzQzg1N0U0MkQ1QzFGQzgxOEYzMjI3NjZCQUFGQzgzNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT05ONduEj0vywHKC9hYjUBFCa
Lqp9cK6k2aAa1NEtBj1L4rIcdLMFXKXBsiuvNG6VkdUi5HsJkGgzuTrAkuJBz4IV
pdZH51gMyqZtJ1U8OwfUlNm4+VuHqBkG1pCVFeTD1MYn7pqOEJqVSZo7FxtpQYZv
YGQWFJPoI9OFOgdSpmd+nKVoDB8ae4kHBL0eCsvjQjtp36GTmc0NomyqftxX1KUx
erAZSZvNVG/3qRA8JrUutFPZIci8EBgMAFsDSSIPk3SJDexc3BG81HataK+KWkC3
6oT6IhHiWyLSGX1q+7TfTZQ2EJPC6e7jdov4ET4Y8PWWjbwIg9UuGSloHLRRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpkYUQ8hX5C1cH8gY8yJ2a6r8g1gwHwYDVR0j
BBgwFoAUNXd4p4aqHmhUZzsKaqqkC4UlTpQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2E3MGQ0NGUtMGY3MC00NWEzLWFmMDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4
NkFBMUU2ODU0NjczQjBBNkFBQUE0MEI4NTI1NEU5NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNTc3NzhBNzg2QUExRTY4NTQ2NzNCMEE2QUFBQTQwQjg1MjU0
RTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm
MDQtODFmNDI5ZGIzYTVkLzAvMzU3Nzc4QTc4NkFBMUU2ODU0NjczQjBBNkFBQUE0
MEI4NTI1NEU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKUnUX0dKcJ+jIprDoob9Jp8xmVkhDV34XHE
Yrhv9qIHxi3zvju2vlUwAQtAfW0v2UPfA6RX/LU5e1qX/bOSUj1UZWdunH5ToaG8
x/BBE/ClFOPWydL7qHWbg3ZNOeTwikY2fU/PD4PDE4I+MJiWDOCYA4Bs6YEcrJTe
tTNyqUwpkYoyOtlb2zwEW1dBI0/WN9cNQSgXdwMw471zBoLMDsR8Tg8Sravau4K6
y0CE+Y7SKRTLfEFP6IZ5Njp5ORj7xjKcuoW0Qylf8huLOal3xQMR/iG+DDRsEKbq
h9CbbNvU68nbuyKTjOabX3CDsA8/RSa1cPG68/vz63Uu62EHgDk=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:37 2026 by rpki-client