
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft (raw, json)
Hash identifier: R+te0jeGMjk8luwGnEKxFw6gCm1ZG3PMaOmvNqbkx3E=
Subject key identifier: 46:98:F8:44:47:3B:01:D8:1D:23:1C:1E:D4:7E:25:C5:0B:B5:72:BA
Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
Certificate issuer: /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Certificate serial: 5C641ADF17D69F2F2B52B2F22D0653AC686AB682
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 01:31:33 +0000
Manifest this update: Sat 20 Jun 2026 01:26:33 +0000
Manifest next update: Sun 21 Jun 2026 01:40:33 +0000
Files and hashes: 1: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl (hash: VoWH1sVYkNEMtisG6RNUpzLYZalFNUnb5RaBJ4FK1XU=)
2: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: XU8Cud2VRf6M0JkESJsAHgOHQmX+Y9rjUkFbsFEd38g=)
3: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: 0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=)
4: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: jeO45G4cjQWLOJ3zrv9QzySKe/sGNsFGZNj2yoHSCWM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 01:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:64:1a:df:17:d6:9f:2f:2b:52:b2:f2:2d:06:53:ac:68:6a:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Validity
Not Before: Jun 20 01:26:33 2026 GMT
Not After : Jun 21 01:40:33 2026 GMT
Subject: CN=4698F844473B01D81D231C1ED47E25C50BB572BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:ed:a3:8a:1c:27:4a:f1:eb:cd:ed:1e:c3:
23:cc:18:83:37:b6:68:c9:e1:b2:3b:2c:f7:7f:a8:
00:53:c3:f1:ab:92:5a:3f:91:b6:8c:22:bf:50:6c:
44:37:01:64:5f:cb:ed:09:c9:ff:15:1d:23:29:7a:
3f:08:d0:61:68:f1:2c:5c:00:69:85:4a:85:28:ec:
37:e4:f6:f5:69:94:e7:8f:72:4c:e8:60:9f:d6:32:
7d:e8:9a:7b:28:67:ec:7f:16:56:83:df:e6:65:0c:
a5:4e:cc:da:8d:37:37:7e:61:2c:a9:11:90:31:ac:
3e:55:dd:b2:4d:49:63:0d:2f:8a:df:76:a3:28:46:
e7:44:69:10:ee:7d:f1:b8:86:96:32:02:97:5e:6f:
64:a1:44:f4:f9:a7:d0:00:51:b0:28:50:38:e4:d0:
1e:2a:98:ee:0e:f3:15:08:c8:12:16:62:f6:8d:dc:
76:f2:08:40:6b:1f:06:9c:32:45:cb:1f:b0:ae:2b:
70:2a:a2:aa:74:8a:e5:bf:22:ab:67:64:64:76:d7:
f1:2d:f4:48:18:5f:1a:be:33:83:b6:15:e8:4f:eb:
d0:45:e3:b1:58:41:ba:51:4a:ce:55:e9:30:08:f2:
8b:19:44:04:c9:30:3c:a3:9b:e9:47:e3:73:6d:44:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:F8:44:47:3B:01:D8:1D:23:1C:1E:D4:7E:25:C5:0B:B5:72:BA
X509v3 Authority Key Identifier:
keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:6f:9d:b6:97:44:67:66:90:60:02:ec:7b:d1:48:fb:7b:
44:c3:f6:2b:61:01:ef:fb:13:4c:dd:4b:84:a1:63:cc:86:07:
ce:e6:b3:3a:bb:48:87:1b:c5:89:bd:97:ba:0c:d5:db:4d:7d:
d1:20:ed:2c:e1:7b:26:e4:0c:ef:9a:e6:52:eb:5f:d5:86:b2:
47:77:74:9c:53:df:82:42:e5:a8:5b:d3:17:46:95:03:4b:31:
b1:f9:1f:b6:cc:1e:7d:00:62:32:e4:97:ff:f9:3c:10:26:1a:
a9:8e:48:94:45:f7:1c:1d:1a:64:d3:05:6c:19:22:6e:f4:ec:
55:ac:0e:89:9e:48:ff:18:c7:49:8f:f4:67:c5:ce:e0:77:74:
4b:0d:cf:54:d4:9a:7e:84:e4:1d:28:d7:14:bf:a0:13:39:67:
11:b6:44:40:4c:26:69:73:7c:5b:52:61:2e:7c:7f:7f:ce:40:
95:98:23:04:0b:d6:29:13:64:9c:40:0f:6c:1f:b6:5a:a9:39:
30:26:f0:24:10:0d:35:fe:27:46:45:08:35:03:6d:5c:52:bf:
44:8e:7f:60:89:12:2a:59:68:9a:7c:00:42:8b:12:79:3a:59:
01:05:aa:02:42:bc:77:0a:31:ae:20:21:74:88:e1:68:44:83:
e4:9a:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:19:57 2026 by rpki-client