
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
File: 0139BB0BDA0215A5AD4AB57CF22329862077511D.mft (raw, json)
Hash identifier: EJRDMdDawT43eHHBQGaBlCGanMS+TiC5xAzBseN3iwM=
Subject key identifier: 0D:9B:48:BD:8F:A4:07:53:7A:39:0F:53:D9:66:A2:D9:F5:6A:DD:B4
Authority key identifier: 01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
Certificate issuer: /CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Certificate serial: 595202C92652760448EF4C092EB9F3614238F109
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 12:50:54 +0000
Manifest this update: Tue 02 Jun 2026 12:45:54 +0000
Manifest next update: Wed 03 Jun 2026 13:44:54 +0000
Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: 52S2LH7XP8/eJAv2z0VJNDFFpAYh34WjK2J7d6q8uvc=)
2: 0139BB0BDA0215A5AD4AB57CF22329862077511D.crl (hash: CzNA0/mC+EFhQ3BoG60pdCTBYIi714JF646Xx+GWyZo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 13:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:52:02:c9:26:52:76:04:48:ef:4c:09:2e:b9:f3:61:42:38:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Validity
Not Before: Jun 2 12:45:54 2026 GMT
Not After : Jun 3 13:44:54 2026 GMT
Subject: CN=0D9B48BD8FA407537A390F53D966A2D9F56ADDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:63:3a:9c:b4:46:ba:81:d6:b4:ea:8e:26:
c8:6e:ca:9f:e9:02:17:cf:f7:c4:25:84:0a:6f:5c:
64:5f:69:95:fd:2b:99:17:1f:cd:17:6b:c6:5e:88:
cc:5b:30:4e:2a:98:19:be:ac:7e:09:a6:60:a5:c3:
a7:fa:d2:ee:b4:c8:d1:f4:f5:63:cf:ce:0e:ae:b8:
16:54:cd:61:4d:fd:c2:c0:b3:65:d5:e6:cd:e5:4c:
64:a6:08:0d:a9:18:55:5a:a3:06:55:eb:0b:b1:9b:
50:8c:21:75:05:73:6b:84:29:17:cd:6d:a1:ee:01:
b6:0f:35:ea:5e:f8:a4:c3:6a:6e:85:77:00:7a:84:
e3:b0:a2:d3:ec:34:be:c7:95:6b:e9:82:73:72:18:
c5:fc:20:3e:0b:24:28:02:3a:69:f9:28:e7:51:43:
d6:e0:cd:13:7b:a4:d2:4a:0f:f7:5c:a9:5b:f9:d3:
6e:b8:84:58:75:34:39:95:05:14:c1:d3:e4:52:0c:
b2:b7:6f:eb:1f:83:82:7c:c5:fd:3d:09:8e:c6:13:
3f:39:a4:cb:41:c6:17:52:77:15:12:b4:3a:42:9a:
f6:22:48:76:dd:ac:ea:d7:6c:8b:ee:ec:ff:a3:4d:
ce:b5:54:d9:fe:a4:cd:54:dc:28:aa:6b:d8:75:11:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:48:BD:8F:A4:07:53:7A:39:0F:53:D9:66:A2:D9:F5:6A:DD:B4
X509v3 Authority Key Identifier:
keyid:01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:6f:1f:74:79:5b:7b:90:e8:b7:ea:90:5c:32:28:af:81:61:
e8:79:84:ce:02:a1:ca:e3:e1:43:e2:64:b1:7e:a0:b4:6a:0a:
15:1e:20:7a:3f:b8:b3:ce:26:f4:1e:38:34:eb:ab:51:c9:e3:
06:59:bf:40:f3:5e:2d:43:d3:82:5a:8e:3e:71:5e:f6:59:17:
6e:db:07:a2:21:1f:7e:31:e8:6d:ea:cc:8c:dd:8a:73:2f:cf:
ac:76:2a:6f:fa:eb:9c:ec:1d:23:77:be:d4:42:8e:10:ea:b2:
d9:53:ee:2a:57:1d:36:58:5d:40:cc:25:68:32:66:52:36:1d:
1b:60:c0:1d:f8:57:65:21:cf:ff:59:ee:8c:67:e2:f6:78:ff:
c3:39:59:d1:b6:e8:bb:e1:64:a4:5e:52:96:75:e2:6d:40:51:
77:8f:58:5a:11:33:9b:16:88:11:42:fc:58:c4:ed:64:b0:61:
f1:a6:6c:5c:58:b5:a4:bd:09:7a:69:04:eb:08:d1:a8:96:7a:
77:30:26:34:f6:32:3d:f2:b8:7e:59:8c:e4:7a:89:9e:41:0d:
0b:9a:fc:49:d3:a4:3f:7e:fa:f8:00:d5:53:35:51:4b:3c:e2:
89:38:56:03:5d:8e:2e:93:2c:15:c3:26:59:ba:9b:e2:c2:47:
7e:b8:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:01:12 2026 by rpki-client