
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft
File: 13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft (raw, json)
Hash identifier: tqAaRU+XQwGfFnt2254EQI7ZPI9/PeArzHySGiQQrzE=
Subject key identifier: 81:F8:95:D6:5C:25:72:05:34:9F:C9:27:B1:2A:08:67:6F:65:A1:97
Authority key identifier: 13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB
Certificate issuer: /CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB
Certificate serial: 1E9E9253FB0B1C15D95220FAC4A57A554C05122D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft
Manifest number: DA
Signing time: Mon 12 Oct 2026 11:30:48 +0000
Manifest this update: Mon 12 Oct 2026 11:25:48 +0000
Manifest next update: Tue 13 Oct 2026 12:24:48 +0000
Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: NfZdw40oScaqtlsI5RivrkI1xwgmIqaZHKCKotkz/8w=)
2: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: S2eBAP9psfFve56U+XIjYmGJD4nxxtKRtJXVgPJ07vw=)
3: 13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl (hash: UIyKjdp9qotrx7HTIcULN8TSal/Gx3OYkqeFBtC+yKY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl
rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 08:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9e:92:53:fb:0b:1c:15:d9:52:20:fa:c4:a5:7a:55:4c:05:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB
Validity
Not Before: Oct 12 11:25:48 2026 GMT
Not After : Oct 13 12:24:48 2026 GMT
Subject: CN=81F895D65C257205349FC927B12A08676F65A197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:b6:97:98:35:ec:a6:91:44:54:62:d0:b3:
5c:14:42:a8:30:92:55:55:c3:f9:25:a1:f2:a5:e7:
bc:fd:9a:9e:7f:77:68:2a:71:6b:26:36:92:83:97:
9e:1b:36:8c:01:9f:dc:c3:8d:c0:c9:d7:f5:45:91:
5b:39:32:92:af:20:9d:15:84:11:50:7d:b3:f3:6d:
7b:f5:21:0a:6b:7c:d7:00:63:ae:b0:ab:27:fb:4d:
82:72:96:26:33:93:c8:9d:a7:50:ae:3e:d5:ea:9c:
f6:44:d5:54:c8:35:ae:96:7a:c9:eb:d8:a2:aa:08:
99:cb:9e:5a:e6:fa:8d:c3:ef:ec:94:ed:1d:3c:13:
ec:ee:07:ae:9b:0f:e4:c4:ee:16:b8:83:03:b1:42:
49:b2:bd:cd:cb:71:b5:d6:2f:8a:41:67:7d:3e:ad:
b7:6e:4e:7a:07:cc:78:73:36:e0:fa:39:db:21:c5:
74:02:47:e2:cd:d6:45:2c:f5:c1:3f:42:53:ef:48:
65:db:75:c1:87:95:aa:cc:ea:f3:7d:70:5b:46:a2:
9c:91:a6:5c:4e:27:0e:58:0c:dd:88:c7:4e:b3:d4:
39:01:4f:4a:13:47:7e:5f:78:7b:12:7d:c9:fd:2e:
df:c5:a0:95:e3:12:c2:77:06:eb:51:7a:5d:68:01:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F8:95:D6:5C:25:72:05:34:9F:C9:27:B1:2A:08:67:6F:65:A1:97
X509v3 Authority Key Identifier:
keyid:13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:58:8e:2b:48:ed:e7:56:01:dc:35:1e:ba:ac:1f:a7:90:
10:d7:85:89:21:57:e1:a9:7f:23:39:f9:74:6c:0d:9f:34:2e:
55:6c:9d:14:78:09:07:c4:21:74:03:21:3a:dc:af:dc:19:0b:
5f:a2:63:57:a6:08:5e:1e:cc:14:8c:cc:a8:88:37:39:cd:d6:
a7:28:8f:10:86:68:45:b0:56:90:00:3a:2e:62:87:01:a9:54:
af:b3:6e:ad:63:c2:f8:be:44:3f:ec:c2:1a:33:dd:c6:c7:52:
7c:d1:d8:25:7a:dc:52:24:df:3a:bd:7a:3d:44:98:af:44:f4:
d9:e2:7a:76:62:70:b2:a2:6b:00:41:e8:6c:5a:b0:bb:3e:df:
ff:a1:ec:76:f5:54:83:0d:5d:f3:a0:95:31:cf:d4:24:d8:27:
45:c5:00:76:33:3c:47:ff:ed:65:d1:72:36:f6:cb:1f:1a:50:
ef:41:e1:b8:33:c6:b6:58:27:97:7b:52:1f:b3:24:03:09:b0:
1c:b8:e1:60:0e:80:20:eb:cf:ca:28:b0:77:bd:21:78:00:61:
e5:c9:75:62:54:af:6d:5e:0b:03:de:dd:b9:e0:ed:34:ea:97:
19:1e:ed:87:6f:9f:8a:9f:48:b4:c8:82:2b:4f:b3:c4:72:1d:
b8:16:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:03:22 2026 by rpki-client