
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json)
Hash identifier: wcaGihfTW1B73EnpAPnncc4ciOnwe0I1i8V9pyRQ5m8=
Subject key identifier: 0D:C1:67:2A:77:A1:37:EC:8A:48:86:C4:BF:83:04:C9:85:94:37:81
Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11
Certificate serial: 4EA46A91697C36FD69C9574FB7D7CB9D4AEADC03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 20:28:17 +0000
Manifest this update: Mon 02 Nov 2026 20:23:17 +0000
Manifest next update: Tue 03 Nov 2026 21:51:17 +0000
Files and hashes: 1: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: n2iNNBCk0TAXoE3fh+Fz0WsNXJOVl0b3vWmEyVW7VhQ=)
2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=)
3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=)
4: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 12:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a4:6a:91:69:7c:36:fd:69:c9:57:4f:b7:d7:cb:9d:4a:ea:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11
Validity
Not Before: Nov 2 20:23:17 2026 GMT
Not After : Nov 3 21:51:17 2026 GMT
Subject: CN=0DC1672A77A137EC8A4886C4BF8304C985943781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:1e:28:ae:2f:85:53:24:0e:69:14:b9:d0:
45:f2:15:4b:e7:56:d5:75:7c:91:8e:b6:b6:bb:95:
2c:19:5f:e0:ee:7b:c8:98:b8:56:f0:12:7f:fc:09:
71:60:61:76:d4:9d:ca:08:32:71:4a:56:40:67:40:
94:3f:71:ff:ff:76:bb:69:27:b8:cb:38:bd:db:44:
df:d3:20:98:2b:31:72:fc:d3:e3:4b:09:6d:50:52:
93:f2:27:23:f8:48:4b:e1:99:28:05:59:6a:e6:b1:
7c:a8:9b:b7:ce:f2:40:a7:fc:45:cd:cc:e0:92:11:
61:dd:5e:36:43:11:39:9d:2b:b8:c9:5b:68:94:24:
76:8e:ff:4e:b6:7a:0b:10:e3:a3:28:4c:82:65:d8:
e0:4d:44:b7:7d:88:a3:fa:94:5a:46:18:dc:17:80:
bb:e8:25:d3:04:ff:a0:b4:c3:5c:09:bf:5d:58:08:
2b:1c:e2:5a:1c:0d:27:a5:ef:e2:84:2f:c1:09:a5:
aa:b4:8a:9a:6f:c7:ff:73:5f:82:58:6d:d6:c7:5a:
59:d7:5d:8c:44:cd:97:62:a7:ee:43:a9:1c:2d:be:
85:61:28:e1:95:87:78:f4:21:64:35:ef:12:98:3e:
a0:91:9d:3a:38:22:a9:fa:8f:97:6c:ae:32:2d:16:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:67:2A:77:A1:37:EC:8A:48:86:C4:BF:83:04:C9:85:94:37:81
X509v3 Authority Key Identifier:
keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:46:92:92:72:37:f1:a4:32:ce:50:7a:aa:b2:28:2c:f7:
30:f8:53:9f:ff:54:c5:fd:e8:41:24:a0:3a:62:35:67:9d:44:
f1:d4:ea:e6:60:88:dd:65:4c:53:a3:82:e1:23:ed:1b:e9:8c:
8e:76:32:37:0a:22:1f:8e:15:dc:aa:61:8c:50:16:ef:05:db:
a8:bc:14:70:21:98:c4:8d:3d:bf:4c:92:4f:6d:e6:5a:8d:d1:
8d:c3:e2:87:23:fd:b1:a1:66:d6:03:3d:21:35:f8:06:ff:2c:
91:da:15:31:41:40:b6:1a:b1:29:65:80:25:87:c4:23:cf:da:
87:b0:9e:06:01:71:03:c1:56:cd:9c:ae:e0:a8:92:0c:b1:46:
15:3d:13:61:48:6f:3a:96:e6:95:d6:0c:43:8c:0b:e0:f0:b7:
8a:61:21:e3:9d:40:76:6c:67:88:05:89:d8:40:c7:34:3a:a0:
d5:ff:16:61:80:7b:7e:5c:ee:93:9a:03:13:7e:8f:06:7d:41:
93:6f:ba:95:9e:bb:e5:d5:77:19:b8:33:b5:fa:25:e6:2d:7a:
01:1d:7b:7a:44:dd:bd:f7:7d:a7:31:15:8f:70:b4:7e:3a:0c:
c6:04:5f:15:1c:c7:cf:b7:48:5f:7f:a6:f5:f3:95:13:94:ce:
c0:58:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:34:44 2026 by rpki-client