
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json)
Hash identifier: fE4gWG/szgNoaBaT/Bh2uPPs0J/GSKWbfI3XNZdmcNU=
Subject key identifier: 7E:23:8D:C7:08:DA:42:21:81:EC:29:CF:C5:0E:DE:EC:72:88:E6:04
Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C
Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C
Certificate serial: 7A637CA4CD4DEE9AFC1AF1815B8BF0B5C16421F4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 23:13:28 +0000
Manifest this update: Fri 12 Jun 2026 23:08:28 +0000
Manifest next update: Sun 14 Jun 2026 00:46:28 +0000
Files and hashes: 1: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: rDXOzrqYdAYsJWKRwOBFov+HuejVQx1A7RJUf84Eidw=)
2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=)
3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl
rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:63:7c:a4:cd:4d:ee:9a:fc:1a:f1:81:5b:8b:f0:b5:c1:64:21:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C
Validity
Not Before: Jun 12 23:08:28 2026 GMT
Not After : Jun 14 00:46:28 2026 GMT
Subject: CN=7E238DC708DA422181EC29CFC50EDEEC7288E604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:69:25:23:1d:1c:fe:01:5d:3b:4c:cb:c8:
dc:46:0b:88:9b:f6:3e:8a:40:82:1d:07:5b:d3:c7:
ce:38:92:e2:5c:c2:e9:24:b2:62:04:29:79:77:33:
c5:32:20:6a:c0:1d:9f:b0:c6:d8:88:21:29:af:f2:
3c:a9:4a:9b:b7:4c:cb:a4:14:a4:10:99:ae:40:14:
8b:8c:04:7f:5e:ba:13:e8:e6:9b:b2:94:6a:97:a8:
7c:5e:81:39:f3:08:dd:0a:1e:d4:f4:2d:2e:ae:0d:
fe:32:1b:3d:bc:9d:be:a6:55:1b:eb:e0:dc:82:f5:
96:40:94:0d:fe:d8:77:70:04:01:8c:71:9d:7c:8f:
97:1f:ba:b6:a6:80:0b:87:b6:70:c9:aa:f4:24:ac:
05:d4:0a:a7:32:b9:73:56:71:e4:7f:f7:d6:75:c4:
7f:bf:d3:52:72:9b:03:73:eb:72:06:c3:e4:ee:1d:
61:5c:4a:10:a5:59:98:5d:58:be:43:ee:6b:f5:1a:
5d:ee:2b:5c:31:57:3e:e8:bf:f7:35:d5:c4:f7:07:
c2:e1:5c:88:cc:59:50:c9:39:ff:9d:f4:4f:69:6a:
b9:cd:45:c3:39:ff:13:a3:52:6a:96:df:3b:7e:a8:
64:3b:00:ea:23:a0:7c:3f:81:32:99:72:09:17:ca:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:8D:C7:08:DA:42:21:81:EC:29:CF:C5:0E:DE:EC:72:88:E6:04
X509v3 Authority Key Identifier:
keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e3:b1:ec:4c:f2:21:33:50:2a:c8:f2:e3:5a:48:84:6d:5c:
85:51:0c:08:64:42:30:50:64:af:31:8d:be:a4:04:ad:5a:12:
eb:97:d4:09:0d:80:e8:64:e1:16:6e:6b:1d:69:6b:c7:14:36:
57:98:ff:86:17:cd:47:9e:4c:55:08:a8:ca:bd:8a:98:55:36:
cd:ae:7a:c9:a9:a1:99:39:1a:10:ab:64:0c:2e:71:46:8d:fa:
05:26:df:1c:8c:91:f9:2f:28:a4:59:10:bb:6d:6a:68:b5:2f:
e1:ff:1f:ea:0e:d2:e9:75:91:23:ac:97:c4:6a:0b:b5:8b:ee:
72:c0:74:d0:d6:de:24:95:e5:b9:83:61:3c:1d:22:35:1f:c1:
47:1e:d5:13:e5:21:10:ac:a5:9a:d2:50:60:11:0b:06:df:48:
74:b3:a9:46:03:b7:ce:d5:a7:c1:54:c9:09:b1:7d:8b:c6:09:
be:29:90:eb:2f:e4:25:00:ac:56:97:72:08:56:b6:e3:98:4b:
7d:0e:a3:42:91:f5:88:f9:79:96:51:3a:35:78:36:a2:6d:24:
ed:1e:db:16:65:6c:94:ea:3c:a1:80:44:bd:02:cd:2b:29:54:
22:33:a0:78:cd:cc:c3:f1:f4:85:96:c4:20:66:40:8a:3e:35:
2a:78:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:48 2026 by rpki-client