
$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
File: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json)
Hash identifier: JLE2tIBifmXhpA7EohyrR0NZlSYkgXDjwjmoTcxcXFM=
Subject key identifier: 0D:AE:0A:4B:A8:62:4A:82:10:99:05:D1:D1:56:76:6B:6C:DC:FD:A4
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial: 1D3CCD040CF5AB70BC89E9A00E8A986403030F1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 17:58:56 +0000
Manifest this update: Tue 28 Jul 2026 17:53:56 +0000
Manifest next update: Wed 29 Jul 2026 20:27:56 +0000
Files and hashes: 1: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=)
2: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=)
3: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=)
4: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=)
5: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=)
6: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=)
7: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=)
8: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: QTQtFJDG20UtsblmuweHHPWiB87ZoauffQFe1ZSQwsE=)
9: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=)
10: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=)
11: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=)
12: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=)
13: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=)
14: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=)
15: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=)
16: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3c:cd:04:0c:f5:ab:70:bc:89:e9:a0:0e:8a:98:64:03:03:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Validity
Not Before: Jul 28 17:53:56 2026 GMT
Not After : Jul 29 20:27:56 2026 GMT
Subject: CN=0DAE0A4BA8624A82109905D1D156766B6CDCFDA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:42:7f:16:97:37:b0:ef:72:17:ff:0b:cf:
12:3f:09:c8:f0:18:99:7d:2e:aa:49:8b:24:9a:e7:
ae:03:00:21:e6:1b:82:49:15:e2:8d:95:97:90:a0:
b9:de:2f:61:54:de:fd:f9:e2:5f:d7:26:94:5f:b0:
12:5b:d2:8e:fa:e9:16:32:09:60:11:0f:bd:42:0e:
f7:89:aa:bc:87:84:c1:fe:c0:b3:2e:86:22:bd:72:
5d:9f:2b:b4:9d:8f:2c:7f:d8:00:a5:52:c6:70:61:
f8:11:b7:d2:80:d6:60:77:d7:96:00:6f:07:d7:e3:
77:08:0f:c4:60:43:1e:2a:27:88:fa:cb:4a:53:41:
c6:b6:dd:52:35:ca:e8:61:38:f7:d6:32:95:7d:19:
8c:d8:57:76:ae:44:9d:5e:29:de:b1:2d:f7:d5:4b:
8e:17:d2:ae:22:bb:e7:57:3d:47:95:d3:66:95:ff:
68:ea:bd:dd:e1:31:40:64:9e:3f:d9:55:86:ee:a3:
03:d4:72:48:9e:53:05:f9:fe:6b:87:e6:b9:ea:9b:
5e:13:f8:0d:c8:b6:06:29:9a:32:1c:c7:92:51:25:
8f:2e:14:a2:23:ff:7e:6f:c8:a9:9e:20:f5:dc:10:
15:d5:3c:a6:89:df:e6:b1:6f:15:1c:b8:da:05:09:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:0A:4B:A8:62:4A:82:10:99:05:D1:D1:56:76:6B:6C:DC:FD:A4
X509v3 Authority Key Identifier:
keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:fd:7d:ec:1f:92:b2:2f:d5:9d:44:e0:09:6b:e5:67:ca:
cb:ee:cf:71:7a:94:35:cf:ec:34:dc:bc:ff:66:fb:a2:4f:30:
95:45:c5:2b:f2:47:b6:29:58:8b:39:5c:18:87:38:1a:d5:0c:
29:81:06:e2:b6:58:37:b9:1f:cf:b3:2c:99:5b:4e:1d:33:13:
af:b5:f5:5f:f1:2d:d3:af:04:75:60:1f:78:d5:b5:8b:fe:6c:
79:58:83:88:40:1b:af:57:90:fc:92:b6:4f:b3:a4:e8:54:7e:
50:77:e2:5e:cb:61:d0:e7:35:64:68:aa:ad:88:77:ea:8a:2a:
0f:8a:4e:d4:5c:8f:10:09:ef:67:2f:05:80:f6:67:83:e7:8b:
09:d2:83:f0:f5:04:8f:fc:a8:c9:e0:e6:2a:36:7d:6b:57:9b:
5b:76:b9:d4:1f:49:5b:43:71:6b:81:ba:77:a6:4f:9d:f0:49:
7a:0a:2f:ac:bc:c0:09:52:1d:5b:15:2d:67:46:39:7e:a5:8a:
00:44:fe:7f:43:29:9b:c4:79:01:48:fa:d4:30:30:7e:e0:a1:
e5:cd:6c:b6:3a:a5:15:55:37:6e:6c:e2:f7:bb:ee:40:54:97:
b5:7d:df:d6:c6:52:4c:d4:7d:c5:ef:e9:14:a9:fa:49:85:a4:
84:fa:61:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:10 2026 by rpki-client