
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft (raw, json)
Hash identifier: 8ezf0KUHR/NeVJWUwEE4V4EyGdVTp5C7RrT1NRPuJYI=
Subject key identifier: B9:EB:D2:61:50:E2:64:F8:16:3D:C3:C3:CC:B6:F7:37:20:50:6D:88
Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
Certificate issuer: /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Certificate serial: 3196A76F4929D24A6971A200E5A12B0C04E5F73F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 05:34:40 +0000
Manifest this update: Thu 03 Sep 2026 05:29:40 +0000
Manifest next update: Fri 04 Sep 2026 07:57:40 +0000
Files and hashes: 1: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: jeO45G4cjQWLOJ3zrv9QzySKe/sGNsFGZNj2yoHSCWM=)
2: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: XU8Cud2VRf6M0JkESJsAHgOHQmX+Y9rjUkFbsFEd38g=)
3: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: 0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=)
4: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl (hash: hyDKqPQgAjeE5dWDfxhbWgSJEAX1hJrRbciIMhfSlAg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 07:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:96:a7:6f:49:29:d2:4a:69:71:a2:00:e5:a1:2b:0c:04:e5:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Validity
Not Before: Sep 3 05:29:40 2026 GMT
Not After : Sep 4 07:57:40 2026 GMT
Subject: CN=B9EBD26150E264F8163DC3C3CCB6F73720506D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:25:44:46:d7:23:04:31:0c:f9:19:50:26:
26:33:7c:14:5b:8f:4a:d0:26:ca:b9:98:ff:11:71:
f1:1d:d4:ac:39:b2:ac:e9:37:6e:bd:6b:5b:bc:67:
b6:81:99:d1:65:04:b3:f0:e2:e6:53:dd:b5:48:b2:
20:37:b8:31:60:25:bb:e8:74:02:3e:a1:5b:54:e1:
35:6d:48:f1:e0:60:21:b8:5e:93:ba:3e:15:61:76:
b2:57:dd:c7:d4:07:5b:e1:bc:a1:2a:c6:d0:61:11:
9c:9a:1c:e0:63:3e:a5:24:20:f3:7e:13:a6:ef:bf:
6e:39:6a:8b:65:97:74:18:17:41:8f:0b:24:cf:68:
e8:1e:6e:6d:62:15:4a:9d:44:f0:5c:76:68:ae:5f:
a2:2d:3e:0b:55:af:d6:8b:90:99:71:1a:58:60:cb:
09:2e:93:f5:a8:b0:3b:7c:42:d2:67:5f:49:ba:82:
71:bc:b3:b9:e3:71:4c:64:f2:d8:28:07:f6:08:08:
ee:bb:66:65:0d:fd:d8:26:1e:07:27:42:23:b0:9e:
64:a6:91:32:22:0e:b4:d5:77:d1:f0:98:77:65:96:
aa:74:5d:6c:f5:17:7f:d1:2e:48:8e:e4:b5:54:dd:
63:1a:40:05:47:d7:90:98:22:0a:a0:c4:c9:b8:80:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:D2:61:50:E2:64:F8:16:3D:C3:C3:CC:B6:F7:37:20:50:6D:88
X509v3 Authority Key Identifier:
keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:c0:2d:19:ae:12:17:37:13:50:4b:00:a4:d1:ea:a9:e6:
fb:81:36:a8:b8:27:d6:c5:5d:4d:8c:d6:45:ef:c5:19:10:9f:
54:af:b4:1a:16:5f:02:4b:0a:62:10:95:09:ee:72:91:09:f2:
a0:bf:a3:87:1f:c6:b3:7d:21:8e:40:55:46:ce:85:66:86:3a:
40:01:57:47:08:e2:2b:f8:ae:1f:5a:b8:ed:da:24:34:50:3b:
0d:d4:99:60:92:2b:28:16:ee:2f:60:f2:32:9a:cb:b6:34:c9:
14:2d:76:13:24:88:aa:53:8b:4d:55:25:3d:0a:81:e8:76:ab:
a2:d5:71:d2:26:6b:e5:22:9d:a1:4c:e2:71:d2:d2:69:27:47:
76:2c:ef:d2:02:3c:dc:4f:2a:96:21:58:ab:cc:1c:b3:19:40:
2f:51:8f:de:eb:b8:90:af:ce:1a:2b:90:0f:8d:97:a7:1d:15:
03:7b:7f:d4:8b:38:48:29:4a:a2:ff:34:ea:fa:30:37:2b:5d:
21:cd:98:1b:c8:46:01:be:4f:b4:f4:e9:a0:d4:93:bf:10:d8:
7e:7f:a1:39:72:97:2d:8d:bf:17:ab:4f:4b:fc:90:04:33:9d:
f8:84:cd:12:10:63:71:11:e7:ff:c6:9f:54:70:aa:24:9c:45:
37:19:45:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMZanb0kp0kppcaIA5aErDATl9z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNDMURCOEFFREUwMjEwMzlGRkFCODRBNzlDOEUwMjM5
NkRFNUIzODAeFw0yNjA5MDMwNTI5NDBaFw0yNjA5MDQwNzU3NDBaMDMxMTAvBgNV
BAMTKEI5RUJEMjYxNTBFMjY0RjgxNjNEQzNDM0NDQjZGNzM3MjA1MDZEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjiVERtcjBDEM+RlQJiYzfBRb
j0rQJsq5mP8RcfEd1Kw5sqzpN269a1u8Z7aBmdFlBLPw4uZT3bVIsiA3uDFgJbvo
dAI+oVtU4TVtSPHgYCG4XpO6PhVhdrJX3cfUB1vhvKEqxtBhEZyaHOBjPqUkIPN+
E6bvv245aotll3QYF0GPCyTPaOgebm1iFUqdRPBcdmiuX6ItPgtVr9aLkJlxGlhg
ywkuk/WosDt8QtJnX0m6gnG8s7njcUxk8tgoB/YICO67ZmUN/dgmHgcnQiOwnmSm
kTIiDrTVd9HwmHdllqp0XWz1F3/RLkiO5LVU3WMaQAVH15CYIgqgxMm4gLF9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuevSYVDiZPgWPcPDzLb3NyBQbYgwHwYDVR0j
BBgwFoAUE8Hbiu3gIQOf+rhKecjgI5beWzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzMyOGI0NzYtNjIyNC00ZTAxLWIxODYtODBiY2VjOWJjMGUzLzAvMTNDMURCOEFF
REUwMjEwMzlGRkFCODRBNzlDOEUwMjM5NkRFNUIzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xM0MxREI4QUVERTAyMTAzOUZGQUI4NEE3OUM4RTAyMzk2REU1
QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx
ODYtODBiY2VjOWJjMGUzLzAvMTNDMURCOEFFREUwMjEwMzlGRkFCODRBNzlDOEUw
MjM5NkRFNUIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABnCwC0ZrhIXNxNQSwCk0eqp5vuBNqi4J9bF
XU2M1kXvxRkQn1SvtBoWXwJLCmIQlQnucpEJ8qC/o4cfxrN9IY5AVUbOhWaGOkAB
V0cI4iv4rh9auO3aJDRQOw3UmWCSKygW7i9g8jKay7Y0yRQtdhMkiKpTi01VJT0K
geh2q6LVcdIma+UinaFM4nHS0mknR3Ys79ICPNxPKpYhWKvMHLMZQC9Rj97ruJCv
zhorkA+Nl6cdFQN7f9SLOEgpSqL/NOr6MDcrXSHNmBvIRgG+T7T06aDUk78Q2H5/
oTlyly2NvxerT0v8kAQznfiEzRIQY3ER5//Gn1RwqiScRTcZRak=
-----END CERTIFICATE-----
Generated at Thu Sep 3 10:54:13 2026 by rpki-client