
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
File: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json)
Hash identifier: lJR8WdEFjTFnHxh6bebYTXHIeuzCwnIfRW7t9AFZx9Q=
Subject key identifier: 2D:BB:73:0B:3A:26:9C:E5:04:D0:CE:47:51:59:2A:9D:3E:15:C8:E0
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 03C4D1700B72BE564FA517291DDC1BECA45EDF42
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:50:42 +0000
Manifest this update: Tue 16 Jun 2026 21:45:42 +0000
Manifest next update: Thu 18 Jun 2026 01:01:42 +0000
Files and hashes: 1: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=)
2: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=)
3: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: 4Q9iFO3TjE/l3D1QG4paADwmfWvHm0qtB66UILaf8Ho=)
4: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=)
5: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=)
6: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=)
7: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=)
8: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (hash: 76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=)
9: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=)
10: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=)
11: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=)
12: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (hash: Lahi4UMwkr7lfFz+tMIIfdkh1kxRlOqmv3Bjync9vmg=)
13: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: +ZyyJqjq78cKg1BKkW5ZX65WgWriILoGl7EgplhkYMU=)
14: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=)
15: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c4:d1:70:0b:72:be:56:4f:a5:17:29:1d:dc:1b:ec:a4:5e:df:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: Jun 16 21:45:42 2026 GMT
Not After : Jun 18 01:01:42 2026 GMT
Subject: CN=2DBB730B3A269CE504D0CE4751592A9D3E15C8E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:25:b9:a7:47:64:52:33:81:fe:82:71:c9:
11:b6:b7:70:02:e9:6a:0e:2f:fc:b0:71:ad:50:6f:
f3:3b:db:9f:27:a6:4d:ef:08:8f:ff:92:dd:ce:ec:
1e:64:c5:ec:6e:eb:79:61:42:87:db:95:b6:0e:36:
1c:de:89:73:d1:ce:7d:5b:be:2f:bd:53:ed:3b:a7:
d7:aa:ec:7d:56:6b:0c:b6:f9:e2:56:87:5b:df:2c:
8f:5e:ea:08:ef:8a:0f:15:51:67:01:47:ee:ec:58:
1f:38:84:c0:d5:33:08:46:4f:90:9a:5d:d4:d2:66:
13:9f:be:f1:a2:2b:e7:54:2f:6f:64:e4:00:5a:e1:
5b:2b:d2:da:20:43:60:dd:59:f9:44:0f:c4:03:b2:
f1:fa:53:35:a2:d4:0c:9f:20:d4:84:04:bc:80:e4:
51:7f:82:9d:f7:5d:b8:f1:c2:9b:ab:be:10:f1:05:
fb:bc:0d:33:04:c0:6d:fb:ff:07:8d:02:91:8d:0b:
1b:5b:c2:10:c6:66:52:c4:d2:68:99:e4:f9:f0:02:
5d:ee:cf:49:67:a6:b2:6a:42:86:ac:86:b3:55:67:
88:4c:11:06:d3:68:b5:be:e8:3a:18:3c:0c:7b:d2:
24:d3:14:28:3d:e3:84:b1:f3:cf:52:7f:a3:ab:64:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:73:0B:3A:26:9C:E5:04:D0:CE:47:51:59:2A:9D:3E:15:C8:E0
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:40:43:2f:a4:42:40:4d:65:28:a3:a3:82:0a:16:01:54:
5e:0f:99:90:d8:e3:63:80:45:22:b2:50:d9:be:bf:e6:6c:88:
d1:3e:32:0d:d6:0e:67:48:26:81:e4:e7:a1:8e:9b:91:bd:4b:
35:15:b2:c0:15:ca:4c:56:80:96:6f:e7:22:7a:b6:ea:0c:7a:
57:71:d2:ca:7d:2e:0b:0f:6c:35:a3:1b:2b:29:23:03:dc:2c:
3e:63:43:3b:55:b0:99:ae:99:5d:e7:24:3b:78:1c:fb:01:7e:
49:e5:91:00:95:d3:11:b3:32:2d:54:94:41:99:a2:93:71:0d:
ae:3f:7c:e9:22:a8:1a:96:e1:26:7d:67:46:99:ff:fd:98:0d:
96:26:4b:57:c4:13:d6:de:a6:55:5d:16:87:0b:58:13:d6:c1:
16:3b:73:e8:a5:e7:b3:6a:e2:fa:40:8c:66:c1:50:7c:44:a7:
ff:53:3e:15:74:3e:5d:c1:26:11:f1:0f:b5:e7:f2:46:9d:5e:
25:71:d9:61:59:79:ed:cd:d8:a2:d1:3d:87:6e:e7:ec:a6:e8:
e1:d4:b6:d4:8c:f3:44:53:44:69:4c:52:53:2c:8f:32:ac:dc:
2d:c2:8f:22:42:d3:f3:dd:61:be:f8:23:f0:00:71:a8:45:21:
92:17:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:29 2026 by rpki-client