
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
File: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft (raw, json)
Hash identifier: /rvum2ufFi4OuYESoEB94HnD+sBl7mkKHX1gnBcg8/I=
Subject key identifier: 13:48:41:28:1E:DC:01:AE:A0:F2:E8:5F:A0:04:BD:4D:3F:44:10:79
Authority key identifier: 3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9
Certificate issuer: /CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9
Certificate serial: 09C858DB7F78775D34B5FEEF6AF8C8C7F2C20FA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 07:37:04 +0000
Manifest this update: Wed 17 Jun 2026 07:32:04 +0000
Manifest next update: Thu 18 Jun 2026 10:31:04 +0000
Files and hashes: 1: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl (hash: 3ZQCGAx9rh/SqjosA7zT+nvMzF1evfK4v5upf+vQbWk=)
2: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: c5m1jy/LAyjB0nA9ZGi7kHoU7bN15iBSminDikOhk08=)
3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: yPTQbXIMPAX5YHFZg3gghjvfBRXpbrPMIjd6u88I2sQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl
rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c8:58:db:7f:78:77:5d:34:b5:fe:ef:6a:f8:c8:c7:f2:c2:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9
Validity
Not Before: Jun 17 07:32:04 2026 GMT
Not After : Jun 18 10:31:04 2026 GMT
Subject: CN=134841281EDC01AEA0F2E85FA004BD4D3F441079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:95:93:91:36:ce:90:a7:2d:29:17:5d:da:
af:ec:83:01:70:1a:46:44:71:02:ff:3d:64:df:72:
ec:6a:da:b8:37:09:97:bc:2e:63:ee:2f:65:4e:7d:
db:bb:8d:45:be:ef:b8:ff:57:80:20:5d:f0:65:3a:
5a:14:a0:c1:be:a6:41:7d:75:55:7b:5b:b5:69:e9:
e8:93:74:a6:f9:a5:f0:0c:4e:2e:e8:98:31:5e:96:
6a:f6:4b:8e:f1:e7:01:4a:b8:a2:a3:e3:2b:01:cc:
83:3a:24:4e:c5:9b:14:6f:af:ad:19:ba:3c:2a:87:
8a:d5:13:06:24:aa:40:87:86:da:40:9d:b1:bd:43:
76:51:c2:2a:2e:5f:51:10:bd:8d:25:d5:7b:38:68:
44:17:f6:d2:94:1a:a6:c0:5a:4d:3a:37:fe:03:4a:
50:22:16:70:1e:53:be:71:80:18:52:14:17:e1:3b:
bb:16:94:3a:a7:8c:96:8d:93:a2:cb:22:1d:13:52:
ab:c3:01:cf:dd:a4:3c:6a:c9:e6:72:e0:7a:23:32:
32:57:38:88:77:ab:82:21:4d:e2:5a:2d:cf:92:db:
29:d0:60:61:04:76:d5:02:8f:9d:7a:df:b9:35:cc:
0c:d7:8f:3b:39:6a:37:31:1e:30:bd:82:1a:6f:40:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:41:28:1E:DC:01:AE:A0:F2:E8:5F:A0:04:BD:4D:3F:44:10:79
X509v3 Authority Key Identifier:
keyid:3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:ef:94:e6:8b:a2:7c:c0:c8:a1:60:5b:26:61:69:be:dd:
1d:fc:12:58:dd:12:89:4b:d3:c1:d5:6b:e1:30:28:53:30:3c:
84:91:f7:f8:14:ea:f1:39:a3:d8:ef:11:21:2f:12:07:c4:2b:
71:fb:d5:8b:16:76:e2:c8:3f:4c:05:33:91:3e:ad:9f:e4:09:
50:9d:c2:0d:cb:1d:70:14:c4:bb:65:52:4d:d8:3b:ae:27:5e:
b4:7f:3a:93:b4:08:dc:af:7c:ee:f2:21:19:43:05:c0:f3:5e:
6b:24:d0:d6:ea:84:1a:59:fe:61:af:53:4f:88:03:f4:f2:58:
67:ea:c4:53:95:4b:04:42:30:8e:af:be:98:5d:1e:e7:27:bc:
41:79:cc:4e:63:34:01:0b:dc:74:06:b8:b4:08:a6:3d:a0:a2:
cf:c9:5e:43:34:ce:51:df:ca:98:21:7a:8b:04:81:2c:87:7c:
03:aa:b5:0b:db:ce:ef:12:7b:06:cb:9d:2b:11:2a:51:d2:36:
4c:7b:1f:13:4d:8a:e6:60:a3:af:ab:80:89:dc:5b:c6:02:56:
f3:c8:26:51:09:d0:ae:d5:66:a1:37:a5:76:7c:9d:45:52:15:
08:2d:79:39:9c:fb:c0:92:27:4c:03:ae:94:09:85:1c:95:14:
27:d1:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:32 2026 by rpki-client