
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft (raw, json)
Hash identifier: 59rzpvR/CNBfi2TqfEv4hcUpidl9OdI0d0SxqqsEY6c=
Subject key identifier: 15:32:3B:F3:FF:D0:47:CD:41:7A:A1:3A:EC:25:AC:69:A2:F5:31:ED
Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
Certificate issuer: /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Certificate serial: 019F21583E8D57456DD02CF57E6F7DF19A2B1346
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 05:52:39 +0000
Manifest this update: Fri 25 Sep 2026 05:47:39 +0000
Manifest next update: Sat 26 Sep 2026 07:59:39 +0000
Files and hashes: 1: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: 0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=)
2: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: XU8Cud2VRf6M0JkESJsAHgOHQmX+Y9rjUkFbsFEd38g=)
3: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl (hash: 5tuauabVV7oBb12d1d+KkgZiSK2EIs/dTlcuhxWGuw0=)
4: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: jeO45G4cjQWLOJ3zrv9QzySKe/sGNsFGZNj2yoHSCWM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 07:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:58:3e:8d:57:45:6d:d0:2c:f5:7e:6f:7d:f1:9a:2b:13:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Validity
Not Before: Sep 25 05:47:39 2026 GMT
Not After : Sep 26 07:59:39 2026 GMT
Subject: CN=15323BF3FFD047CD417AA13AEC25AC69A2F531ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:19:4f:01:54:92:3a:05:68:e1:04:33:38:
31:aa:c7:24:91:e1:10:a7:e5:d5:f1:98:1c:d5:eb:
3c:26:72:f3:e8:63:c8:bb:93:a4:6a:ed:40:f4:45:
23:e8:b3:b6:29:38:6a:da:69:db:f1:5d:03:ac:f6:
e8:9c:91:ad:85:cd:e6:ed:e2:46:fa:3d:43:4b:53:
82:35:86:77:c2:65:93:c3:ea:e0:34:b4:10:79:93:
0e:17:c1:d4:05:d9:2e:5d:71:d8:b3:f1:13:a3:92:
e6:26:e1:e7:6d:eb:de:1c:56:ca:a2:cb:5f:67:90:
82:a2:9b:a1:03:81:77:a4:15:2c:9d:d4:06:57:32:
0a:e5:06:6f:62:60:96:6a:78:ac:99:b1:b2:9d:2d:
65:bc:9f:72:bf:2e:ac:99:4c:52:6c:f3:16:f4:a1:
fd:9e:63:66:62:3b:09:c3:e0:9f:a4:bb:7b:f8:0a:
bc:60:5f:b0:0f:9e:c6:ea:68:0b:60:ba:54:e4:cf:
a8:a2:60:81:38:79:23:5b:4a:d9:d8:a2:03:af:72:
ff:cf:1d:39:c6:57:16:44:cc:ee:e5:57:42:1d:82:
27:6a:ea:6c:b4:3b:bf:6e:49:6a:27:bd:e3:b0:8e:
66:1a:8d:0d:9f:39:df:d9:e2:de:32:f5:6e:82:1c:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:32:3B:F3:FF:D0:47:CD:41:7A:A1:3A:EC:25:AC:69:A2:F5:31:ED
X509v3 Authority Key Identifier:
keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:19:5a:33:93:79:6e:6c:80:ca:8a:ea:f6:af:1d:2f:d5:57:
f0:b1:3f:45:ca:6e:f4:02:56:6e:ef:e0:34:a9:c7:21:4e:9e:
de:87:ad:ff:8f:4d:f6:4c:9a:03:0b:5a:f4:1f:79:37:5d:98:
a5:eb:ce:02:f1:56:18:57:bc:61:dc:37:ab:dd:ef:85:1b:35:
6a:b2:cc:bd:c5:64:17:03:6a:03:4a:64:5a:86:65:d8:af:ba:
18:e6:46:87:38:37:37:9c:50:b9:9a:92:80:1a:e8:3c:88:bf:
b3:c3:29:1e:34:8b:33:8a:cf:80:be:8e:6f:83:1d:38:eb:13:
06:72:bf:5c:b6:5d:e8:0a:94:86:af:34:8c:8b:f2:57:98:ee:
5e:c6:91:d8:c8:2f:27:f3:a4:42:fc:de:64:68:76:13:ad:64:
89:9c:5b:2a:ff:1d:c0:ef:71:a1:09:f0:6d:74:9e:72:39:73:
5a:86:ad:37:91:4d:00:7e:b9:a8:57:d7:b4:70:ab:ee:d6:d3:
99:ab:81:56:c7:70:e2:49:16:0d:83:5b:d5:ae:03:d0:86:67:
49:e0:d3:a2:ef:6c:ed:2d:8b:71:5b:04:0e:ce:8c:96:93:a9:
44:a1:54:44:20:4d:21:49:d3:ac:eb:91:9d:78:28:7f:fd:d6:
43:43:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:49:56 2026 by rpki-client