
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json)
Hash identifier: LX/RkU4WM2tEyatZrtDnX64nMPd9mve6YMMAruAktdw=
Subject key identifier: 37:4A:B3:ED:95:BD:6A:10:82:40:D1:CB:1D:DC:F0:32:4B:25:98:22
Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC
Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC
Certificate serial: 2CB47C2F4768D895002D5B68EDD59FB62AF70265
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:22:13 +0000
Manifest this update: Tue 02 Jun 2026 18:17:13 +0000
Manifest next update: Wed 03 Jun 2026 22:04:13 +0000
Files and hashes: 1: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=)
2: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=)
3: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=)
4: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: NexjKRoLVeIFRrRq/6mK+f0MMRNtcdwj+3e+Uu4icfk=)
5: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=)
6: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl
rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 22:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b4:7c:2f:47:68:d8:95:00:2d:5b:68:ed:d5:9f:b6:2a:f7:02:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC
Validity
Not Before: Jun 2 18:17:13 2026 GMT
Not After : Jun 3 22:04:13 2026 GMT
Subject: CN=374AB3ED95BD6A108240D1CB1DDCF0324B259822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:4f:41:35:13:4b:2f:23:2b:f0:8a:28:7e:
c1:da:2d:57:9c:3c:2a:65:77:56:c8:83:56:e8:45:
2f:75:a1:9f:19:db:d2:a1:16:fb:7b:43:5c:a7:39:
f5:73:12:db:4d:47:98:ef:a0:da:6e:be:f9:a3:ab:
99:68:6b:d1:44:0a:7b:11:3a:00:a9:25:ed:28:f4:
75:7d:2e:8c:e8:1d:59:22:30:e1:a7:e3:c9:c8:c7:
f5:ef:98:1b:8d:15:27:c2:fa:99:ff:6c:cc:aa:e3:
ed:9b:da:b0:cd:12:e2:d5:36:60:0d:c4:b8:7f:2e:
0a:8c:1c:9e:64:a3:6e:81:f6:d7:79:2e:02:5b:9b:
85:67:00:f3:a1:d2:8e:bd:f8:01:18:94:9d:68:28:
ee:d2:05:4a:f9:e7:98:75:13:d4:6f:ea:39:7b:04:
2e:b0:c9:2f:1d:04:b0:fa:23:08:42:a5:aa:97:62:
c9:cc:c9:ce:a6:72:03:48:e6:f4:5d:a6:0b:66:b1:
d0:7f:59:37:84:ec:47:09:59:cf:f9:79:94:93:72:
f4:b6:22:d8:6e:24:51:42:bb:58:02:f1:e6:89:b8:
74:02:3a:7b:84:d2:7f:25:35:67:b8:d1:fc:ce:18:
75:d1:c5:e2:c6:ca:f3:62:d6:24:00:29:6b:4f:6b:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:B3:ED:95:BD:6A:10:82:40:D1:CB:1D:DC:F0:32:4B:25:98:22
X509v3 Authority Key Identifier:
keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b9:cd:e4:7f:40:67:67:0f:c2:5f:74:85:70:b0:96:ed:40:
31:c7:44:02:74:41:14:f8:25:12:3a:93:42:68:44:43:95:aa:
84:3c:01:0d:7c:34:f9:b1:e7:4a:e4:62:b8:6c:5a:69:56:4a:
49:e6:e0:1c:2e:ad:0b:a0:b4:94:a3:56:fc:c8:20:50:07:3a:
4e:d6:57:69:59:b1:bb:12:c5:b9:78:27:b2:97:33:05:01:35:
0f:cc:e6:17:74:84:8f:c4:d5:fe:55:8b:35:d9:41:2f:c7:d4:
1c:75:45:3b:87:e4:dd:fe:3a:b8:05:0a:9e:16:3e:f8:d1:2b:
d5:0f:a0:8c:ca:09:70:5b:02:81:48:56:77:19:9a:7a:85:f3:
b6:45:82:a6:bc:66:b2:92:1b:8e:c8:95:76:de:be:d6:24:49:
c9:2e:49:f5:cb:5d:f9:11:1e:80:bc:02:23:4e:8d:60:53:d2:
1c:b0:f3:12:3f:78:57:e2:e5:4a:e5:9d:47:76:a5:9f:ea:35:
f7:49:fc:f4:e1:80:4e:35:73:25:76:dd:83:f9:f3:a2:05:4a:
11:89:e8:64:91:14:c9:b4:d3:11:54:b4:15:1c:d5:0b:26:f8:
a3:18:07:79:0e:4d:25:5b:70:4c:fb:26:47:f1:37:c8:eb:5f:
5d:dc:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:57:36 2026 by rpki-client