
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json)
Hash identifier: baw6GZYl37kPjEY994shoEx2TDQaAN/7kAdAlhfFK0s=
Subject key identifier: 91:4C:C8:AA:EF:47:DA:86:F2:41:03:38:27:D2:48:09:70:18:80:38
Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
Certificate issuer: /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Certificate serial: 4CEA5321C5FC92E465C548E24F370652FEFF72CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
Manifest number: A7
Signing time: Thu 03 Sep 2026 22:25:04 +0000
Manifest this update: Thu 03 Sep 2026 22:20:04 +0000
Manifest next update: Fri 04 Sep 2026 23:08:04 +0000
Files and hashes: 1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=)
2: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: I8uSgVWT0qWMsM0CYn0qhDiaRtx/XL8C6IkW/gzzxRU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 23:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ea:53:21:c5:fc:92:e4:65:c5:48:e2:4f:37:06:52:fe:ff:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Validity
Not Before: Sep 3 22:20:04 2026 GMT
Not After : Sep 4 23:08:04 2026 GMT
Subject: CN=914CC8AAEF47DA86F241033827D2480970188038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:03:a4:23:8d:61:79:5e:89:97:1b:f9:20:
a7:e8:16:d9:84:d8:66:1e:7d:15:2c:9a:e6:6e:6a:
7e:17:85:50:4b:fb:ec:18:9f:23:f3:be:25:e9:ea:
d4:5d:b6:52:de:37:46:29:86:f3:f2:be:c7:14:ab:
8f:dd:98:c8:99:05:4b:71:cf:6b:25:cc:ee:9a:33:
c9:05:57:2c:44:cd:45:2a:b3:d8:be:c4:81:6c:39:
1b:b9:69:09:63:b7:09:bb:ac:bb:8e:a2:14:02:6a:
ba:1c:11:f9:b5:23:c1:1b:fb:b8:42:b5:e6:98:61:
1c:24:4e:3d:0e:bc:3a:8f:8d:69:b2:5d:e3:85:4f:
7a:71:f0:66:5e:c2:73:80:1d:db:f4:4a:2a:67:8a:
3b:71:e2:71:35:08:03:26:4d:ff:ec:03:a2:5b:26:
fd:16:2f:aa:6f:d3:a4:8e:59:14:72:bf:13:42:10:
31:c5:ce:6e:bb:dd:6c:de:ba:54:f0:20:bb:be:81:
66:0b:53:9e:f0:e3:54:68:51:81:e9:cd:4c:ca:02:
04:f6:a5:bb:92:f4:e3:27:2c:36:ce:8d:1a:73:cf:
7d:36:ba:e0:72:9c:66:12:e9:45:4c:92:b1:bb:a8:
a8:5e:ee:38:c0:3d:53:c2:20:15:f5:91:8f:8c:2f:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:C8:AA:EF:47:DA:86:F2:41:03:38:27:D2:48:09:70:18:80:38
X509v3 Authority Key Identifier:
keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1e:70:24:e6:98:0a:76:99:61:b8:d9:b9:f7:4b:b9:ac:95:
8d:4e:a7:79:8f:b8:d8:1f:a8:cc:89:d7:05:7a:42:6b:d5:26:
b3:3e:81:57:6f:89:54:99:fa:f2:d6:34:f1:cd:13:74:22:03:
f5:a0:29:1d:8a:7f:af:d1:74:5b:7e:2d:9c:32:66:2f:df:19:
a2:de:1c:29:0a:2c:e2:42:60:37:38:83:4d:67:76:98:b3:35:
0e:3a:10:99:1b:46:bc:52:b9:6e:08:2d:9c:5f:f8:f3:30:84:
de:5f:18:4c:7e:a7:91:b5:d2:79:94:df:d3:a3:d1:e5:dc:ee:
e3:7d:93:a3:c2:fc:c6:bb:23:c5:74:18:12:d2:f2:15:51:c4:
aa:5a:89:80:1a:e0:58:a0:f9:53:b3:ee:0b:ef:cb:79:60:51:
11:22:0d:93:2a:64:28:92:5c:2d:33:22:7f:d1:34:af:3f:b5:
b4:f0:d6:a7:e2:8d:9e:31:01:f3:ff:ec:2f:bf:2b:88:6b:70:
6d:4b:03:04:ef:2a:b6:f1:04:86:c2:a4:a7:28:e8:6b:23:c4:
50:5f:1d:13:d6:fe:a9:4e:3a:a6:83:4c:27:36:94:9d:68:62:
1e:54:43:b0:46:ac:12:50:91:f7:e0:18:bb:af:26:a6:23:98:
5c:ad:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 09:30:53 2026 by rpki-client