
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json)
Hash identifier: 0F7/Sn5NCZ5mqCa5I0W96HkXeH3r9K5C1UU8i4GsvEo=
Subject key identifier: 8E:ED:3D:BC:33:0B:EB:DD:DC:5F:F6:8C:23:7B:BF:17:0A:4C:1B:F1
Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC
Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC
Certificate serial: 6F363D4B46CA877A72A563C28B96CFD8DD143881
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 05:48:17 +0000
Manifest this update: Mon 15 Jun 2026 05:43:17 +0000
Manifest next update: Tue 16 Jun 2026 08:54:17 +0000
Files and hashes: 1: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=)
2: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: qYxLrAua+7PinZ6w3bFQpSHT+433y7cM6EkSPgDWTSM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl
rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:36:3d:4b:46:ca:87:7a:72:a5:63:c2:8b:96:cf:d8:dd:14:38:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC
Validity
Not Before: Jun 15 05:43:17 2026 GMT
Not After : Jun 16 08:54:17 2026 GMT
Subject: CN=8EED3DBC330BEBDDDC5FF68C237BBF170A4C1BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:0b:91:3b:af:2f:a6:00:85:41:04:fc:d2:
05:35:4f:bd:ea:56:2b:5e:69:6b:ad:8e:a9:e2:0b:
44:87:b0:3f:32:72:cf:62:fb:f9:74:67:05:2d:43:
24:56:7d:00:23:98:19:7f:07:d8:b4:3d:b4:92:67:
05:d0:d6:2e:d1:9c:e4:b6:2b:44:3e:88:85:99:69:
db:a0:e3:f8:a3:ee:bc:be:fc:6a:d8:ae:ff:fd:e7:
dc:2e:c6:49:65:d6:e2:43:96:0c:08:ab:af:01:3c:
8a:9c:b3:19:88:7d:83:cb:0c:5c:1c:09:c4:55:4c:
34:47:a6:ce:32:fc:1c:e8:f4:9c:5c:ed:e2:81:fd:
05:e4:9d:47:cc:96:7f:ca:e0:e2:ef:75:24:ef:c9:
61:37:b4:a4:93:6b:93:84:cd:2f:53:7b:5e:99:c7:
79:09:fe:da:51:b7:d5:0f:b7:89:d9:42:71:19:f4:
3c:5a:dc:71:76:19:1a:ac:67:0d:1f:bd:55:a0:05:
9f:cc:76:97:be:4e:4e:01:e1:6b:a6:67:28:55:57:
82:99:3f:d9:0c:7a:3a:bf:80:ec:c9:e7:ec:33:1d:
1c:a4:9e:92:18:4c:a4:b9:20:3e:eb:b4:0c:ae:95:
2d:16:b4:c6:b1:c0:e9:63:ae:b0:2f:88:bb:06:2e:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:3D:BC:33:0B:EB:DD:DC:5F:F6:8C:23:7B:BF:17:0A:4C:1B:F1
X509v3 Authority Key Identifier:
keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e1:ab:45:00:e9:7e:d5:98:48:83:3e:b7:10:61:cf:86:41:
d4:41:09:b1:1e:07:3c:20:7e:27:ef:fd:39:dc:7f:09:67:e3:
10:a7:7b:01:23:2e:01:87:e0:0c:54:49:4e:44:cb:91:41:c1:
8d:fb:6e:3d:de:65:01:34:f7:45:83:24:28:3f:c3:59:cd:a0:
ab:88:ad:d2:f2:43:96:ef:f1:6a:20:1a:85:1e:33:27:08:d1:
19:ff:8c:16:8a:71:b0:e6:25:0a:9b:32:09:22:8b:50:e1:d3:
44:96:e4:6b:0d:23:f0:0c:16:f1:f5:d2:81:6c:e9:f9:c6:bf:
98:0e:71:88:2e:4c:b0:31:be:09:27:12:a2:15:fa:68:72:22:
12:d3:94:77:2f:3c:e2:c1:5d:cb:13:4c:5f:32:8f:1a:85:6f:
fb:19:ae:f3:f2:ee:c4:b4:de:16:fc:c2:21:ae:c4:f3:0d:1e:
29:74:f8:95:c7:eb:09:8c:63:43:f1:4b:f8:5a:f5:a7:04:8a:
dc:ce:1c:f7:a7:06:18:28:e6:a6:58:47:17:31:8c:ad:69:68:
3b:94:e8:fb:88:4b:64:30:c2:72:a6:31:a4:08:38:77:c4:c2:
11:3d:fc:60:25:14:9f:39:73:59:7a:52:0e:50:d0:24:01:9c:
22:5d:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:15:00 2026 by rpki-client