
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json)
Hash identifier: 3cWniSrNYiP12/ywumUydPM3lZSN3HYJHJfOyGIFHkc=
Subject key identifier: 33:52:87:64:0E:FB:63:10:47:2E:D2:72:7A:4C:FF:6D:35:1F:55:37
Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC
Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC
Certificate serial: 464238D552B0A43962AF00C3DBA2C3C26178EDDC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 19:04:35 +0000
Manifest this update: Wed 23 Sep 2026 18:59:35 +0000
Manifest next update: Thu 24 Sep 2026 20:21:35 +0000
Files and hashes: 1: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: HrgxvLlssVLL6/lNCSQJstj2Tefg0VcgqYLxxz6xNwU=)
2: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=)
3: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=)
4: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=)
5: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=)
6: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl
rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 20:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:42:38:d5:52:b0:a4:39:62:af:00:c3:db:a2:c3:c2:61:78:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC
Validity
Not Before: Sep 23 18:59:35 2026 GMT
Not After : Sep 24 20:21:35 2026 GMT
Subject: CN=335287640EFB6310472ED2727A4CFF6D351F5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3e:e4:97:e9:b1:b4:b6:2f:4a:78:b5:47:45:
93:ab:12:2c:6e:28:1d:8c:f7:ef:19:66:2d:a2:85:
3c:8a:c5:a2:df:2b:d6:20:21:93:09:4e:fb:85:08:
10:8f:63:0b:72:3f:a8:40:f5:79:a5:4d:46:32:ac:
e1:76:e6:7a:60:10:e4:29:82:88:10:3f:9f:2d:f6:
ad:ae:7a:7f:7f:6f:85:7b:e2:af:a9:11:34:dd:02:
35:37:44:54:b8:75:71:e7:6e:cf:33:11:99:42:7a:
de:43:c9:9a:ce:53:3d:3f:0c:30:29:ed:36:d9:69:
8a:6f:1b:48:af:99:ac:b6:8f:aa:7e:d5:99:5f:52:
25:02:2e:14:5b:10:86:92:bd:3f:27:8a:43:fb:e8:
d9:25:82:88:f5:a9:4e:44:8c:5f:a2:77:de:a4:20:
4c:6b:49:f7:9a:3b:ef:07:2a:f7:dc:c0:ed:31:63:
bd:ed:83:43:5a:06:8c:5c:d8:e3:2a:8b:72:82:1c:
b2:e6:d4:56:43:94:0d:85:80:30:1a:f0:13:10:f9:
d0:fe:9b:d1:e5:af:64:4b:a4:56:7f:85:6a:e6:64:
7a:6b:63:42:c1:7c:96:dd:a6:2f:84:59:8e:53:7d:
4c:10:97:5d:12:da:52:35:50:17:b4:0e:b7:c3:9c:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:87:64:0E:FB:63:10:47:2E:D2:72:7A:4C:FF:6D:35:1F:55:37
X509v3 Authority Key Identifier:
keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1a:e5:b3:c3:56:95:ff:54:07:55:59:f2:e9:dd:a1:33:0e:
aa:73:02:1e:8c:5b:17:0b:00:87:c5:8a:0c:66:e9:20:e0:4d:
e1:6a:50:49:3b:b0:fa:94:6a:75:31:6d:81:3c:df:66:17:0a:
53:cb:13:fb:5b:8a:dc:b1:30:01:cb:97:32:b4:c1:00:0e:ea:
24:a2:d4:a0:13:66:ef:dd:1c:a4:d4:47:a0:cd:95:de:82:b5:
d1:4a:9a:3a:8b:ae:3b:ff:4d:6e:f2:83:e5:cf:a5:fc:9f:b7:
19:df:b4:31:04:9e:d9:de:2d:27:bf:90:96:9d:38:d2:4c:f3:
06:3d:28:74:89:70:48:90:3c:2c:af:c0:93:88:fd:40:61:6c:
57:9d:e6:97:77:d7:e9:7b:ab:c4:62:37:2a:6d:b4:fe:e0:5e:
21:c0:bf:b4:7a:29:3e:3f:95:f1:cc:09:c7:e1:2c:7a:c1:98:
2d:da:5d:0a:ab:e9:4e:41:fd:05:8a:3e:41:39:43:23:a1:43:
bd:df:54:90:47:8d:40:41:d3:1d:52:4c:d7:e3:a5:bf:95:3f:
c9:e9:41:ea:b4:2e:58:07:98:04:80:7d:cd:f9:2a:f3:f0:67:
e3:dd:75:53:a8:6f:3d:87:5f:62:0b:59:e2:f0:2f:48:e8:45:
3d:08:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:54 2026 by rpki-client