
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
File: 01B748FE9E379A963DF80DAA39E554231A002AB4.mft (raw, json)
Hash identifier: O/+D7GNVXHDxxQvQWfZuINL6qeAYJEcXzBRTH0/k0h8=
Subject key identifier: CA:31:10:1E:24:49:C0:BF:5C:E0:51:05:73:29:62:8B:1C:C2:99:C5
Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
Certificate issuer: /CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Certificate serial: 135AE57E73D53B3DD9E65280B746D96271F85845
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 07:21:45 +0000
Manifest this update: Wed 17 Jun 2026 07:16:45 +0000
Manifest next update: Thu 18 Jun 2026 09:52:45 +0000
Files and hashes: 1: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=)
2: 01B748FE9E379A963DF80DAA39E554231A002AB4.crl (hash: iXPIcoP90LktNbOd5VY5m1924BCkd0iCLTf8gZGZgH8=)
3: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=)
4: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: OUi2dWqVUs4mn5PgnV5FjoZyNlm2gHfbdDmeMNM+lt0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5a:e5:7e:73:d5:3b:3d:d9:e6:52:80:b7:46:d9:62:71:f8:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Validity
Not Before: Jun 17 07:16:45 2026 GMT
Not After : Jun 18 09:52:45 2026 GMT
Subject: CN=CA31101E2449C0BF5CE051057329628B1CC299C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:e9:45:91:8d:de:a7:a3:b5:1f:42:90:e5:
81:bb:1e:b2:3c:a1:51:77:de:31:a4:7c:e0:fe:f0:
6c:09:5e:70:cf:9c:11:cd:aa:49:a3:f1:82:1b:5c:
e4:fe:46:d4:2c:c8:3e:04:35:e8:85:65:16:0f:ae:
9c:5d:d7:79:b1:f1:d1:e2:d7:65:cf:a7:93:28:11:
1b:f1:16:2c:67:2a:d0:6f:b8:da:50:77:bf:bd:d4:
bd:2a:e4:67:67:3b:d0:29:ea:75:92:20:b5:be:3f:
1b:47:01:3e:b2:eb:e4:e4:b2:ab:54:46:b6:80:1f:
0c:ae:14:32:99:0d:de:a9:63:68:65:5a:43:f6:ed:
25:c9:30:32:e6:33:0e:94:f4:8d:37:75:61:47:fc:
16:66:63:07:62:15:1e:6d:59:37:20:44:71:04:c5:
04:35:39:9b:a6:f6:af:26:d7:1c:f6:d1:92:23:b3:
88:be:cf:c2:c9:4b:df:98:d3:a8:42:cc:f2:ca:67:
ad:a3:44:13:7c:37:ca:bf:19:b4:8e:b9:00:68:2b:
5c:05:31:dd:64:a3:ed:5a:5b:4a:d2:31:97:bf:f4:
05:7d:9e:11:b0:55:74:fb:91:4a:b5:e1:b6:fe:44:
77:b2:7b:67:be:c2:73:d6:6a:d8:7b:8d:f2:84:b8:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:10:1E:24:49:C0:BF:5C:E0:51:05:73:29:62:8B:1C:C2:99:C5
X509v3 Authority Key Identifier:
keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:22:97:ae:e7:f8:a7:ff:b0:c1:98:7d:04:54:df:f8:07:e7:
e2:30:5f:35:9f:93:81:6f:5c:68:bc:df:9e:d9:2e:33:cc:e8:
54:26:91:da:86:36:ca:a5:ea:9b:b0:aa:c4:26:6a:55:54:96:
e3:2c:aa:b0:27:c9:3f:86:53:21:58:6b:12:9f:76:f0:c0:ab:
25:87:1d:52:60:36:61:4a:17:f1:6a:e3:2e:4e:64:1f:35:c2:
6b:dd:5a:1f:e1:73:7c:c3:03:61:d5:9a:9a:b5:58:05:5f:0c:
ef:af:9f:02:d5:b3:45:17:5d:5c:13:ce:3c:59:95:31:c0:44:
c7:2f:69:7c:30:34:d3:65:af:ac:2b:45:dd:37:79:6d:33:fd:
cc:77:ee:b2:07:f9:ae:9a:d5:08:7b:e7:a5:4c:be:89:4d:df:
a8:d6:e4:81:5a:e1:ff:09:41:55:0a:4f:ff:4e:ea:1b:6c:97:
f1:d9:2b:12:ba:d4:85:03:80:af:9d:c4:de:eb:6b:3f:23:fc:
4f:06:e6:62:3b:a7:f5:b6:e9:14:61:23:03:48:06:ee:44:84:
1a:ff:d7:18:84:e2:09:07:b1:e8:ad:c5:d2:91:32:59:69:7a:
20:33:f7:0a:90:38:4d:25:ac:12:c9:0c:3e:d0:f3:19:57:3a:
40:cd:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:31 2026 by rpki-client