
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json)
Hash identifier: xaSUvoyjjSMwFJeR3da+XK/3g5nbCIO28g1mNYG4l+M=
Subject key identifier: 93:87:82:4A:0D:F7:75:B6:A7:2D:5B:E9:4E:94:CC:69:E0:F5:33:87
Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11
Certificate serial: 3B46DE753FBBABE68317A7710E863FFE0361ED52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 08:18:49 +0000
Manifest this update: Thu 17 Sep 2026 08:13:49 +0000
Manifest next update: Fri 18 Sep 2026 10:30:49 +0000
Files and hashes: 1: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: zrA0ErlQZgQydrHhUhxrWCGNd6cxZ/+bntfTrbjAgt0=)
2: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=)
3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=)
4: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:46:de:75:3f:bb:ab:e6:83:17:a7:71:0e:86:3f:fe:03:61:ed:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11
Validity
Not Before: Sep 17 08:13:49 2026 GMT
Not After : Sep 18 10:30:49 2026 GMT
Subject: CN=9387824A0DF775B6A72D5BE94E94CC69E0F53387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:26:75:87:89:d3:32:b8:e8:37:e2:62:f6:
be:9d:44:54:ba:73:56:29:5e:33:84:e7:92:d8:ff:
55:82:06:a5:2c:57:4d:fd:76:8f:34:a6:7c:87:99:
57:59:b4:a8:3e:a1:b4:8e:70:23:0e:d2:fa:7f:f1:
a3:40:59:3c:7b:a9:a5:65:f9:b0:70:b4:17:1b:7e:
be:2b:c6:fb:13:2b:0a:cd:25:86:75:ec:9a:46:07:
a2:82:f3:b6:e9:0a:6f:1a:d4:5c:fa:32:ad:10:eb:
fb:30:c7:61:51:ca:f2:f6:9f:b0:5e:19:a4:f9:67:
f5:32:c1:1e:91:f0:fe:f6:0e:0b:d2:9b:88:ed:71:
4d:24:2e:ca:72:54:76:fd:e4:2f:e1:e3:89:a8:78:
71:0b:b4:69:c7:2e:57:9c:ef:70:37:17:e1:6a:5d:
be:4c:3e:a6:56:e3:b1:38:3c:1f:f7:d2:83:2b:7b:
f5:d1:72:48:77:05:80:22:a4:59:57:a8:97:02:8e:
26:3f:bf:99:fc:dd:f2:9b:3f:bb:f9:1f:61:96:a7:
1a:02:9d:25:12:eb:b0:4b:04:dc:30:0f:6f:d9:57:
df:51:6f:61:ed:4d:da:6d:87:51:4c:d8:fb:60:65:
ac:d0:ba:e3:8c:1e:bb:a7:8a:cd:4a:d4:4d:e1:93:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:82:4A:0D:F7:75:B6:A7:2D:5B:E9:4E:94:CC:69:E0:F5:33:87
X509v3 Authority Key Identifier:
keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:0b:32:1e:29:a3:d8:c1:91:68:40:4e:ef:b4:51:8b:af:
21:f3:aa:50:be:cf:a7:6f:a2:bf:c0:1b:0c:bd:58:47:97:fb:
75:d9:16:df:af:c9:2d:f4:e6:4b:02:62:65:fc:7c:10:8f:fc:
b5:ca:6c:1f:55:99:e6:06:80:57:45:6f:70:51:2e:20:31:18:
f7:70:a6:46:e3:43:b2:40:26:7c:62:a9:a2:5b:49:bc:3d:52:
b8:e7:93:ea:23:e3:ee:cb:6c:1e:75:15:8b:b6:83:aa:15:95:
88:df:4b:36:70:48:85:e3:57:c4:16:35:41:b0:f2:3e:7c:c6:
c9:be:dc:83:cc:e0:e9:09:c2:25:df:7f:3e:cf:fb:bb:59:df:
e0:20:84:60:99:8f:1d:e1:3f:37:2a:f8:9c:83:78:d3:d5:68:
b4:a9:c7:76:0f:6b:89:e8:d3:d4:dd:df:39:5a:c6:a9:c3:57:
18:66:c2:1c:55:45:8b:29:f0:cd:fe:b5:74:c0:e5:b1:2a:93:
4d:88:7f:19:98:09:f4:75:d6:c3:fd:3f:97:0e:6f:f6:96:5d:
d7:9c:67:bb:ce:da:31:fd:f9:8e:a6:ec:5b:53:6e:94:e2:b5:
54:89:ec:b9:a9:9a:f1:d7:44:4b:79:6e:91:d9:79:75:0a:0d:
32:98:e2:08
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO0bedT+7q+aDF6dxDoY//gNh7VIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4
REU3NUExMTAeFw0yNjA5MTcwODEzNDlaFw0yNjA5MTgxMDMwNDlaMDMxMTAvBgNV
BAMTKDkzODc4MjRBMERGNzc1QjZBNzJENUJFOTRFOTRDQzY5RTBGNTMzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZCZ1h4nTMrjoN+Ji9r6dRFS6
c1YpXjOE55LY/1WCBqUsV039do80pnyHmVdZtKg+obSOcCMO0vp/8aNAWTx7qaVl
+bBwtBcbfr4rxvsTKwrNJYZ17JpGB6KC87bpCm8a1Fz6Mq0Q6/swx2FRyvL2n7Be
GaT5Z/UywR6R8P72DgvSm4jtcU0kLspyVHb95C/h44moeHELtGnHLlec73A3F+Fq
Xb5MPqZW47E4PB/30oMre/XRckh3BYAipFlXqJcCjiY/v5n83fKbP7v5H2GWpxoC
nSUS67BLBNwwD2/ZV99Rb2HtTdpth1FM2PtgZazQuuOMHrunis1K1E3hkzVbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUk4eCSg33dbanLVvpTpTMaeD1M4cwHwYDVR0j
BBgwFoAUExssQYOnkmAmCL24ZOKSuo3nWhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGJmZjFiM2YtMTE5MC00MTE5LWJiYzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4
M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4REU3NUExMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMzFCMkM0MTgzQTc5MjYwMjYwOEJEQjg2NEUyOTJCQThERTc1
QTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi
YzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjky
QkE4REU3NUExMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHitCzIeKaPYwZFoQE7vtFGLryHzqlC+z6dv
or/AGwy9WEeX+3XZFt+vyS305ksCYmX8fBCP/LXKbB9VmeYGgFdFb3BRLiAxGPdw
pkbjQ7JAJnxiqaJbSbw9Urjnk+oj4+7LbB51FYu2g6oVlYjfSzZwSIXjV8QWNUGw
8j58xsm+3IPM4OkJwiXffz7P+7tZ3+AghGCZjx3hPzcq+JyDeNPVaLSpx3YPa4no
09Td3zlaxqnDVxhmwhxVRYsp8M3+tXTA5bEqk02IfxmYCfR11sP9P5cOb/aWXdec
Z7vO2jH9+Y6m7FtTbpTitVSJ7LmpmvHXREt5bpHZeXUKDTKY4gg=
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:42:25 2026 by rpki-client