
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json)
Hash identifier: K1BfbZq76sVx3jDQjsg+W+uYbQglYD/TPpXcTkyPwaQ=
Subject key identifier: 7E:7A:48:96:C2:BE:15:70:E2:2F:C0:C8:4F:EB:59:35:8A:54:14:95
Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Certificate serial: 76285D90DF5A1BEF8D1C3C8CCBB4D6C60F4BE0B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 05:24:22 +0000
Manifest this update: Wed 17 Jun 2026 05:19:22 +0000
Manifest next update: Thu 18 Jun 2026 08:40:22 +0000
Files and hashes: 1: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: ns9nuw/p4r8Lm5WjsUDixlnajTakOAyX8FBX/ORrB28=)
2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:28:5d:90:df:5a:1b:ef:8d:1c:3c:8c:cb:b4:d6:c6:0f:4b:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151
Validity
Not Before: Jun 17 05:19:22 2026 GMT
Not After : Jun 18 08:40:22 2026 GMT
Subject: CN=7E7A4896C2BE1570E22FC0C84FEB59358A541495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:34:d1:da:22:96:21:b9:1d:c5:d8:cd:9f:
04:5f:4b:cc:7a:ce:a0:32:e2:54:eb:e9:0d:37:8d:
14:9e:83:2f:3f:1d:96:e0:0f:2b:8d:f2:cb:c4:68:
ff:36:c4:a2:37:ee:69:67:a4:a9:da:cb:b2:4a:0c:
5c:86:ea:7f:10:b9:bb:96:3f:4c:fb:b0:03:f7:fd:
58:61:da:8e:da:1b:e5:27:01:77:93:5c:86:49:d8:
96:17:e3:23:a8:a4:77:2f:4c:33:33:92:de:41:30:
f6:db:cf:c8:f8:58:98:68:c4:32:12:d3:0d:c1:e1:
8f:d2:7c:36:61:51:11:fd:04:b5:e3:ea:b7:80:15:
ec:a1:65:d9:5f:db:b9:b0:5b:10:58:bb:00:fb:49:
c7:92:a1:8a:32:66:86:7e:02:ce:60:b0:c7:ef:96:
21:4d:b2:21:17:c5:cc:01:77:34:c7:34:88:90:82:
7d:aa:e6:0b:91:06:3c:d2:93:14:23:a2:1a:dc:a1:
d0:77:47:de:02:fe:dd:e0:5a:f2:2a:af:43:a8:5e:
c3:ea:8d:95:02:3e:95:09:75:bf:af:db:0a:df:86:
b7:5d:c1:a6:0c:02:05:72:dc:46:6e:df:62:f2:99:
ac:11:68:02:76:9a:14:6a:f1:de:ea:b6:8d:45:78:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:48:96:C2:BE:15:70:E2:2F:C0:C8:4F:EB:59:35:8A:54:14:95
X509v3 Authority Key Identifier:
keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:ee:38:fc:9a:67:93:51:c3:58:0e:67:f9:a3:8f:9a:e3:
92:08:f6:c3:d7:c8:d1:36:ca:26:1e:36:ab:ad:89:a0:4a:1c:
2e:65:f5:b4:bf:5e:f7:79:8a:42:83:52:19:9f:6e:0e:49:88:
94:41:76:16:54:a7:5f:69:42:a2:3e:5d:4b:24:85:70:8f:74:
a5:e1:57:26:67:f2:16:26:b6:f2:41:e9:94:54:00:51:1a:8e:
5a:77:ee:28:95:b8:69:d2:35:9e:56:55:b4:a6:84:cc:d6:cd:
90:42:ad:ec:82:a5:4f:55:80:60:a2:c2:5b:bc:f9:5a:81:16:
d5:f1:29:d0:2a:d4:f4:9a:9d:93:4a:b2:5d:64:b1:aa:65:a5:
61:0d:28:4f:e1:3f:21:53:21:80:41:fc:0c:c1:7c:05:0f:a7:
ce:13:91:1f:5f:f0:42:3a:5a:9f:94:79:95:e6:3f:27:21:1a:
34:a3:7c:82:77:cb:21:01:9f:99:03:be:78:b1:79:06:23:02:
07:41:8f:6e:56:17:b7:e6:57:5f:0f:b6:5a:11:0b:5f:71:0f:
9a:6e:e3:c0:ac:34:03:09:e2:6b:62:aa:9d:5a:30:91:50:47:
63:a2:9b:35:30:08:39:f2:9e:f9:26:16:b2:e7:24:89:29:df:
b0:8c:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:33 2026 by rpki-client