
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json)
Hash identifier: ImlEBuBHP96AOnKT7C7ZOU5BZ+5VtPk9KY1vGSa1Mz4=
Subject key identifier: 75:59:BF:AA:36:65:87:CE:24:02:1E:37:14:F1:B3:BF:8F:CE:E2:29
Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11
Certificate serial: 1ED862CBA8F99ED72DBC51A16DE364954C95B513
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:32:23 +0000
Manifest this update: Tue 02 Jun 2026 18:27:23 +0000
Manifest next update: Wed 03 Jun 2026 21:23:23 +0000
Files and hashes: 1: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: Tj69szb69eF/DgCd1MIZfbEJnCCw78uImZv0/edoLQ0=)
2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=)
3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=)
4: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d8:62:cb:a8:f9:9e:d7:2d:bc:51:a1:6d:e3:64:95:4c:95:b5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11
Validity
Not Before: Jun 2 18:27:23 2026 GMT
Not After : Jun 3 21:23:23 2026 GMT
Subject: CN=7559BFAA366587CE24021E3714F1B3BF8FCEE229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:48:a6:cc:1b:9a:23:bd:46:1b:71:e3:ae:
6b:93:4d:e4:30:82:4c:e9:c3:d3:99:3f:35:9c:08:
a3:f8:eb:e1:a8:f3:90:d9:e1:b0:a8:0d:30:06:6d:
04:48:49:18:de:69:b8:6d:6d:41:8b:66:c1:1d:56:
05:7c:f3:0c:24:fc:f1:87:de:95:38:de:0c:14:42:
ed:fe:ff:2e:2f:7c:58:fc:c2:bd:79:73:1f:cf:d2:
99:52:c4:15:3e:6d:ac:5a:2d:6e:ad:30:c0:16:1c:
24:93:11:7c:4a:58:e6:d5:6a:2e:d6:b0:3a:19:05:
72:79:02:9e:bd:7d:bf:bc:56:eb:40:be:96:ce:ba:
30:e6:31:34:9d:1f:6f:be:48:94:ff:0e:ef:20:24:
3b:f0:13:ab:67:8d:cc:cb:fa:ee:3b:e8:62:81:2c:
7d:4a:c4:5d:e6:64:ca:6f:e5:47:28:4b:a2:1c:e1:
63:91:ee:b4:57:e2:4f:f8:f7:4c:79:40:c5:89:4b:
30:a2:a1:ca:52:2b:c5:77:35:93:58:78:1c:80:83:
e5:8e:15:1b:8d:64:15:df:95:1a:73:30:03:07:78:
f1:1d:dc:3d:3d:8a:af:c3:18:2b:13:d0:4c:82:5a:
1c:b6:e8:5d:0b:24:86:5c:0b:c5:51:d4:4b:1a:95:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:BF:AA:36:65:87:CE:24:02:1E:37:14:F1:B3:BF:8F:CE:E2:29
X509v3 Authority Key Identifier:
keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:a0:fd:cf:98:93:45:2a:cd:d3:81:03:d2:65:28:a1:d9:
74:7e:f9:79:39:dd:f8:49:3b:91:d8:9a:4a:90:0a:e3:3c:fa:
cc:46:cf:d9:11:43:41:0a:fb:01:44:3b:08:ac:3a:d3:06:59:
30:c2:e6:9e:45:1a:61:c9:b3:84:61:47:6d:f7:20:9d:81:bf:
cf:99:3c:88:4f:c0:66:53:93:76:99:4f:c5:61:ed:b7:b9:c0:
23:d5:73:be:ce:7a:fb:a3:42:b7:5c:12:15:cd:44:52:ea:86:
a5:66:62:e7:c4:00:58:ef:2c:73:70:23:2b:11:94:5b:d7:4c:
b9:33:0d:26:84:56:f9:58:a2:30:94:ab:60:7a:08:bd:3b:9e:
e5:41:7d:13:ae:88:1b:f6:8f:e7:de:ca:26:36:f0:8a:5d:15:
0e:72:c1:33:93:0a:7a:4e:e5:84:97:9f:87:6b:ee:e5:fa:4e:
3d:51:85:a4:e0:c6:bc:fd:fb:8a:1b:1c:1c:4e:72:db:d7:83:
a8:aa:4b:0e:80:6a:cc:e8:4a:4f:6d:ce:0f:3d:69:da:e4:f0:
2c:fa:33:d1:b3:9d:53:33:60:75:af:9b:cf:0b:f4:4c:4c:23:
ef:95:8c:b7:e8:98:cd:72:d8:5c:f7:a7:97:b5:bc:ec:8b:d4:
84:32:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:01:22 2026 by rpki-client