
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
File: 0139BB0BDA0215A5AD4AB57CF22329862077511D.mft (raw, json)
Hash identifier: WgaSmRReAAiSYVjLLLC5r5OVCeqMj8vEtQ6GvNzbBco=
Subject key identifier: AF:67:B8:F1:CF:D7:4B:4E:1E:53:77:AF:BA:69:F1:A4:6D:98:92:A0
Authority key identifier: 01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
Certificate issuer: /CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Certificate serial: 35A4E61A02E2E9FEB11E59B330EC93C0BBE3FBA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 03:38:02 +0000
Manifest this update: Thu 17 Sep 2026 03:33:02 +0000
Manifest next update: Fri 18 Sep 2026 04:27:02 +0000
Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: 52S2LH7XP8/eJAv2z0VJNDFFpAYh34WjK2J7d6q8uvc=)
2: 0139BB0BDA0215A5AD4AB57CF22329862077511D.crl (hash: C0MXjM0aU5+lGLxn5uUw5vBYUA9ZV5E3cO5qgIijSEc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a4:e6:1a:02:e2:e9:fe:b1:1e:59:b3:30:ec:93:c0:bb:e3:fb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Validity
Not Before: Sep 17 03:33:02 2026 GMT
Not After : Sep 18 04:27:02 2026 GMT
Subject: CN=AF67B8F1CFD74B4E1E5377AFBA69F1A46D9892A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:1b:9d:b9:dc:f3:24:de:a4:00:b2:17:8d:
e3:80:1c:b4:22:87:c0:62:38:7e:bf:a4:b7:6a:a1:
8f:0a:7c:d2:74:b0:62:ef:15:86:ed:75:82:06:e8:
bb:c9:5d:2c:25:cf:b5:f5:81:f1:fa:85:30:36:98:
aa:36:ad:c5:66:0e:34:ba:06:f6:6c:cf:03:b5:87:
65:a6:c1:c1:dc:ae:c4:c1:c8:dc:7a:a1:36:73:fb:
b3:0b:66:89:af:fb:35:d9:ec:8e:a1:a0:24:3f:89:
ea:ca:b8:25:ef:e9:b3:4a:b4:35:e9:26:1b:db:c0:
00:a2:9d:2f:ba:1f:ed:37:5b:64:58:57:39:30:55:
90:b7:4c:58:f3:a8:f0:a7:3e:3d:63:f0:a8:5b:00:
f9:dc:e6:4c:75:24:67:23:a3:21:d0:f2:5b:ef:ca:
65:51:3f:64:03:50:5c:e7:a3:7d:a2:ba:d0:5f:83:
74:2d:f3:0e:dc:9e:c2:6c:8d:88:e4:9c:2f:b0:0f:
ca:16:f4:de:cc:99:c9:88:3d:56:d3:14:64:95:70:
ba:e0:06:f9:4c:81:81:b0:bc:28:d5:47:29:f2:9c:
02:f8:ea:50:70:a6:5c:aa:94:79:01:ea:e5:d9:a3:
06:c2:3c:57:af:a4:e5:ad:a7:3b:2b:e2:50:44:7c:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:B8:F1:CF:D7:4B:4E:1E:53:77:AF:BA:69:F1:A4:6D:98:92:A0
X509v3 Authority Key Identifier:
keyid:01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:b7:44:ac:15:5d:4d:4b:c5:00:af:a9:20:bd:a1:59:36:
5e:e7:46:54:13:27:70:1d:ce:e3:12:e7:e8:74:26:8e:f3:02:
58:bf:f5:23:5d:d3:ff:42:f3:d2:8b:f9:67:da:17:5f:ee:f4:
d5:de:e3:d0:03:e6:40:a9:16:02:ea:93:48:ff:d8:3e:35:89:
e9:5d:e8:ca:07:7b:e3:1e:2e:f9:5b:8c:aa:34:23:28:9b:fa:
40:bf:fd:74:50:b9:fb:aa:de:5c:cd:5c:fa:8d:c0:4a:59:8e:
5a:b1:d6:ec:7d:ab:6d:e9:c3:25:66:cc:00:04:f4:69:20:af:
94:f3:80:46:66:f7:2a:7c:84:c5:25:98:18:2c:ea:94:32:75:
e7:21:63:bd:b1:5f:4b:34:40:ef:5b:37:c1:6e:60:ab:8b:16:
59:4c:1c:35:6d:b0:ae:db:5b:f5:d0:38:00:9d:3e:b1:67:cd:
a2:4d:36:29:06:06:00:6f:f2:93:65:c1:d8:3b:da:6c:3a:d0:
d2:d3:92:28:6b:29:2b:54:9c:7b:a4:7a:ab:98:28:a4:bf:6b:
15:44:1f:29:7a:f7:05:92:d7:9e:1a:31:96:81:b0:b7:0d:f9:
5c:02:73:66:51:3d:9b:0c:12:05:df:74:35:91:38:45:58:b0:
86:ff:8e:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNaTmGgLi6f6xHlmzMOyTwLvj+6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzOUJCMEJEQTAyMTVBNUFENEFCNTdDRjIyMzI5ODYy
MDc3NTExRDAeFw0yNjA5MTcwMzMzMDJaFw0yNjA5MTgwNDI3MDJaMDMxMTAvBgNV
BAMTKEFGNjdCOEYxQ0ZENzRCNEUxRTUzNzdBRkJBNjlGMUE0NkQ5ODkyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11hududzzJN6kALIXjeOAHLQi
h8BiOH6/pLdqoY8KfNJ0sGLvFYbtdYIG6LvJXSwlz7X1gfH6hTA2mKo2rcVmDjS6
BvZszwO1h2WmwcHcrsTByNx6oTZz+7MLZomv+zXZ7I6hoCQ/ierKuCXv6bNKtDXp
JhvbwACinS+6H+03W2RYVzkwVZC3TFjzqPCnPj1j8KhbAPnc5kx1JGcjoyHQ8lvv
ymVRP2QDUFzno32iutBfg3Qt8w7cnsJsjYjknC+wD8oW9N7MmcmIPVbTFGSVcLrg
BvlMgYGwvCjVRynynAL46lBwplyqlHkB6uXZowbCPFevpOWtpzsr4lBEfIPjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr2e48c/XS04eU3evumnxpG2YkqAwHwYDVR0j
BBgwFoAUATm7C9oCFaWtSrV88iMphiB3UR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjAzOGYzYTEtYWMwZi00ZjdjLTljNmMtNmIyNzU2NmZlNzBjLzAvMDEzOUJCMEJE
QTAyMTVBNUFENEFCNTdDRjIyMzI5ODYyMDc3NTExRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMTM5QkIwQkRBMDIxNUE1QUQ0QUI1N0NGMjIzMjk4NjIwNzc1
MTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj
NmMtNmIyNzU2NmZlNzBjLzAvMDEzOUJCMEJEQTAyMTVBNUFENEFCNTdDRjIyMzI5
ODYyMDc3NTExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADGit0SsFV1NS8UAr6kgvaFZNl7nRlQTJ3Ad
zuMS5+h0Jo7zAli/9SNd0/9C89KL+WfaF1/u9NXe49AD5kCpFgLqk0j/2D41ield
6MoHe+MeLvlbjKo0Iyib+kC//XRQufuq3lzNXPqNwEpZjlqx1ux9q23pwyVmzAAE
9Gkgr5TzgEZm9yp8hMUlmBgs6pQydechY72xX0s0QO9bN8FuYKuLFllMHDVtsK7b
W/XQOACdPrFnzaJNNikGBgBv8pNlwdg72mw60NLTkihrKStUnHukequYKKS/axVE
Hyl69wWS154aMZaBsLcN+VwCc2ZRPZsMEgXfdDWROEVYsIb/jlc=
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:42:38 2026 by rpki-client