
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json)
Hash identifier: L1kvUZ2FU+OxHEivH6nLZlmVSg84tizZccUlzbwBh4A=
Subject key identifier: 88:52:B6:89:5A:45:5F:6C:71:10:6D:AE:67:1F:76:37:E5:65:3D:42
Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11
Certificate serial: 53908D4EA21DA875A4AC4759BBAAAFEC3E91E961
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 16:37:03 +0000
Manifest this update: Mon 20 Jul 2026 16:32:03 +0000
Manifest next update: Tue 21 Jul 2026 16:37:03 +0000
Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=)
2: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=)
3: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: KYYohJSGNQ7bhoP9btO4IRRM9RzZrnAAX4sN+FjPX94=)
4: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:90:8d:4e:a2:1d:a8:75:a4:ac:47:59:bb:aa:af:ec:3e:91:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11
Validity
Not Before: Jul 20 16:32:03 2026 GMT
Not After : Jul 21 16:37:03 2026 GMT
Subject: CN=8852B6895A455F6C71106DAE671F7637E5653D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:d4:74:ba:7a:bc:76:02:c7:5f:a1:5e:49:
fe:f7:0b:c4:2f:36:6a:4f:f9:7d:43:ee:63:07:39:
42:21:93:84:ef:cb:2a:8a:8f:97:c9:7c:38:7d:e5:
27:34:f7:c9:e3:9e:15:d0:67:25:0b:bd:a0:21:9f:
48:39:ac:a9:24:77:80:13:fe:56:e8:68:fd:ac:b6:
09:54:f0:4e:db:6f:f0:20:d8:41:6d:8c:99:67:13:
c4:13:9c:69:95:08:4f:c4:64:b8:47:3b:3a:7a:2d:
41:91:4f:12:4e:06:32:ef:a5:e1:04:3f:46:3f:d6:
e4:b5:b4:7b:cd:c9:a6:53:2d:68:44:38:e5:a8:e9:
23:de:bf:66:b0:17:06:81:7b:cb:72:f6:6d:0b:28:
8c:74:bb:f8:ec:53:2d:85:49:f0:4a:54:8c:e8:a6:
d0:d3:a9:f0:74:ce:26:5f:78:26:c2:ce:16:5b:77:
40:8a:d8:93:8e:f9:8d:f1:99:cf:73:0d:89:b4:57:
b5:93:2f:b3:8f:46:ee:d0:ab:4c:ca:0e:94:3b:6b:
31:bf:71:a3:cf:58:58:65:14:08:61:c7:f3:c7:0d:
56:d6:77:e8:71:6d:b0:3c:ef:7e:6d:40:2e:b3:57:
b1:da:bf:3e:6c:b6:10:6e:8e:7b:2f:7d:98:b2:ba:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:B6:89:5A:45:5F:6C:71:10:6D:AE:67:1F:76:37:E5:65:3D:42
X509v3 Authority Key Identifier:
keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5b:18:8a:32:78:a1:6a:12:f8:8d:4b:d0:cb:cb:af:e9:da:
43:66:5d:4d:c9:89:70:72:de:88:23:ed:70:89:d4:b3:ad:1e:
c3:48:54:7d:8c:2a:e0:92:50:c5:21:a2:19:a0:28:92:d3:e0:
9a:5d:3c:ab:72:12:2c:f7:17:dd:36:36:8c:c8:f5:c7:22:44:
b3:38:5a:e6:ea:f3:ca:4c:7e:52:9d:9c:dd:f1:e9:ca:a0:32:
d1:bb:e5:2e:28:0c:3e:96:79:2e:9f:ca:6d:b2:6c:83:d7:4f:
41:24:cf:60:d3:a1:83:a4:a9:89:23:b1:53:ad:67:91:71:2d:
61:c6:ad:40:d2:ec:c3:4e:cc:0f:d0:4a:ee:05:39:03:3a:13:
9d:14:00:78:ea:a5:46:7f:3d:87:87:54:a1:3d:63:da:f5:5a:
2c:86:94:8a:fd:13:9c:0c:10:27:21:e5:e8:f9:e9:4b:2b:a2:
19:72:65:33:eb:d0:a1:56:8f:32:f0:07:77:9c:1f:d1:30:04:
66:a4:49:42:cd:ee:16:75:3f:ce:02:51:82:26:07:18:d2:6d:
bc:29:2e:36:4c:fd:06:bc:90:13:f2:bb:6c:87:41:44:03:a2:
00:75:11:ea:1b:f0:c4:b0:9f:26:d1:28:39:0b:6b:22:81:70:
2a:6f:c4:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU5CNTqIdqHWkrEdZu6qv7D6R6WEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4
REU3NUExMTAeFw0yNjA3MjAxNjMyMDNaFw0yNjA3MjExNjM3MDNaMDMxMTAvBgNV
BAMTKDg4NTJCNjg5NUE0NTVGNkM3MTEwNkRBRTY3MUY3NjM3RTU2NTNENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU79R0unq8dgLHX6FeSf73C8Qv
NmpP+X1D7mMHOUIhk4TvyyqKj5fJfDh95Sc098njnhXQZyULvaAhn0g5rKkkd4AT
/lboaP2stglU8E7bb/Ag2EFtjJlnE8QTnGmVCE/EZLhHOzp6LUGRTxJOBjLvpeEE
P0Y/1uS1tHvNyaZTLWhEOOWo6SPev2awFwaBe8ty9m0LKIx0u/jsUy2FSfBKVIzo
ptDTqfB0ziZfeCbCzhZbd0CK2JOO+Y3xmc9zDYm0V7WTL7OPRu7Qq0zKDpQ7azG/
caPPWFhlFAhhx/PHDVbWd+hxbbA8735tQC6zV7Havz5sthBujnsvfZiyungRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiFK2iVpFX2xxEG2uZx92N+VlPUIwHwYDVR0j
BBgwFoAUExssQYOnkmAmCL24ZOKSuo3nWhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGJmZjFiM2YtMTE5MC00MTE5LWJiYzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4
M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4REU3NUExMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMzFCMkM0MTgzQTc5MjYwMjYwOEJEQjg2NEUyOTJCQThERTc1
QTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi
YzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjky
QkE4REU3NUExMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMJbGIoyeKFqEviNS9DLy6/p2kNmXU3JiXBy
3ogj7XCJ1LOtHsNIVH2MKuCSUMUhohmgKJLT4JpdPKtyEiz3F902NozI9cciRLM4
Wubq88pMflKdnN3x6cqgMtG75S4oDD6WeS6fym2ybIPXT0Ekz2DToYOkqYkjsVOt
Z5FxLWHGrUDS7MNOzA/QSu4FOQM6E50UAHjqpUZ/PYeHVKE9Y9r1WiyGlIr9E5wM
ECch5ej56UsrohlyZTPr0KFWjzLwB3ecH9EwBGakSULN7hZ1P84CUYImBxjSbbwp
LjZM/Qa8kBPyu2yHQUQDogB1Eeob8MSwnybRKDkLayKBcCpvxK4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:44:01 2026 by rpki-client