
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft
File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json)
Hash identifier: 1Lk8vZZNVmvMd4tQdAtHer7KcyY30pjDnddvJr+6WJ4=
Subject key identifier: 98:DA:7C:F7:22:B3:C4:19:AC:79:F9:66:3F:E4:9C:D2:AF:32:DF:13
Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11
Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611
Certificate serial: 59B6B6D97B5AB239D3BCE3033891A87EAA520D19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft
Manifest number: 39
Signing time: Fri 12 Jun 2026 23:59:26 +0000
Manifest this update: Fri 12 Jun 2026 23:54:26 +0000
Manifest next update: Sun 14 Jun 2026 00:10:26 +0000
Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=)
2: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: ZbYKdTka/xABBPAyuGws/vzjIV/vM9feyE/QK1kEQzE=)
3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl
rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b6:b6:d9:7b:5a:b2:39:d3:bc:e3:03:38:91:a8:7e:aa:52:0d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611
Validity
Not Before: Jun 12 23:54:26 2026 GMT
Not After : Jun 14 00:10:26 2026 GMT
Subject: CN=98DA7CF722B3C419AC79F9663FE49CD2AF32DF13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:10:69:50:9e:f9:22:14:06:41:cf:45:cd:
a6:83:4d:6b:29:cb:6c:64:87:fc:01:f9:4e:60:96:
f0:78:d3:33:7e:8b:58:ed:91:fa:e9:47:7c:83:36:
15:e5:5c:ec:3b:c1:55:1d:b6:c3:85:9b:eb:a4:42:
a8:c8:5a:f6:13:77:12:38:d9:4e:d9:e3:8a:06:5b:
23:e3:30:6a:6d:8b:cd:a4:a0:70:81:00:29:00:ee:
2c:41:8a:15:b3:3e:e3:65:8d:58:e8:6b:14:b3:56:
6b:d4:5d:ba:19:24:06:8d:a5:1a:d9:54:32:dd:35:
ca:db:ff:3b:c1:e3:75:bf:f9:6c:6a:a6:3b:77:8c:
dd:0d:34:c6:a8:3a:44:e7:a8:7f:da:8d:46:bd:a7:
b2:b4:d1:63:e2:68:16:8a:00:99:23:69:52:88:13:
5d:85:ab:65:e3:ea:58:24:86:85:fa:4a:09:3f:c8:
f7:5b:a2:6c:c7:36:43:59:b8:0b:28:74:f5:5e:48:
23:e3:d3:f2:67:e6:6b:62:f0:56:79:a1:40:a2:66:
fd:44:6a:1d:4b:09:b1:34:fe:9f:e8:1e:e4:e3:53:
4d:43:af:a0:bb:b7:cb:af:37:02:63:57:6d:9e:88:
15:28:5f:ef:47:e8:00:41:35:86:c7:8b:97:0a:0a:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:7C:F7:22:B3:C4:19:AC:79:F9:66:3F:E4:9C:D2:AF:32:DF:13
X509v3 Authority Key Identifier:
keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:68:d6:5d:a4:ea:4d:6d:25:14:9b:d3:3a:74:e1:84:47:
e6:67:de:e4:6b:d0:a0:20:ec:5a:8f:a0:b2:c7:69:1e:f7:73:
28:7e:00:b3:c0:2c:81:55:c2:62:8e:2f:5b:96:35:e8:20:6a:
29:b4:c7:f8:21:3c:88:b7:3f:e3:89:7e:a2:0e:27:9c:07:ce:
0e:77:17:f5:f8:35:66:eb:96:cb:2b:30:1a:80:fa:5e:a3:06:
66:32:b0:1d:b5:27:61:de:3b:06:b5:62:e4:7b:88:6d:d7:2e:
c3:21:4e:f8:96:85:2b:23:ec:b7:b6:f6:0e:f3:c2:1e:8f:ef:
a3:d9:77:83:1c:9f:ad:57:2a:c2:12:d0:bd:40:4b:f3:2f:b9:
f3:9a:ad:66:72:1c:d2:30:0e:d0:95:f7:1d:49:e5:bc:db:e7:
10:1d:57:16:4d:c1:39:cb:7f:83:84:26:06:a0:ed:2b:26:f4:
26:86:fb:31:a8:91:4f:e4:58:a4:12:f0:b2:79:46:f0:ef:46:
fd:ab:1d:7e:a6:11:40:67:04:7d:ee:80:ce:3c:52:3d:e1:98:
38:b9:5f:ef:a1:db:f4:db:fd:cb:22:0d:26:49:19:fd:1e:ac:
2f:77:2e:90:3d:89:b0:05:95:62:ee:1d:79:06:04:07:d4:8c:
d0:3b:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:56 2026 by rpki-client