
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft (raw, json)
Hash identifier: gxY7e84G8XWruOw6hKysRBZG2TvDkO0Jd2cpG3O2rEk=
Subject key identifier: C8:22:28:4A:E2:FE:5B:0F:5A:23:CA:3B:B1:68:CF:21:0D:6D:E6:02
Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
Certificate issuer: /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Certificate serial: 3A11BDFB7E6C4F6CE2204CDDA8762E22F0C6C864
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 14:53:09 +0000
Manifest this update: Thu 23 Jul 2026 14:48:09 +0000
Manifest next update: Fri 24 Jul 2026 17:51:09 +0000
Files and hashes: 1: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl (hash: FkzrWZBqfexqja2AlWgOBJQMk2EGiJghJ/0JTsnIJR8=)
2: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: jeO45G4cjQWLOJ3zrv9QzySKe/sGNsFGZNj2yoHSCWM=)
3: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: 0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=)
4: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: XU8Cud2VRf6M0JkESJsAHgOHQmX+Y9rjUkFbsFEd38g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:11:bd:fb:7e:6c:4f:6c:e2:20:4c:dd:a8:76:2e:22:f0:c6:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Validity
Not Before: Jul 23 14:48:09 2026 GMT
Not After : Jul 24 17:51:09 2026 GMT
Subject: CN=C822284AE2FE5B0F5A23CA3BB168CF210D6DE602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:f5:7e:b5:c1:20:88:c9:d4:cc:74:55:90:
19:5d:79:e7:7c:d2:b8:11:2b:d0:92:e3:b3:d4:f8:
97:05:16:ec:6b:3b:a5:7d:db:e4:89:19:6d:97:d0:
ee:42:d5:8c:86:52:ed:6b:66:4d:4e:31:3c:64:90:
6c:fb:c5:bd:a7:9d:17:e7:83:e6:d4:aa:a2:3d:9e:
20:0e:e5:27:32:b6:7c:28:1c:ad:40:bd:28:90:53:
b4:ad:b2:01:e8:61:a2:46:59:d9:9d:27:cc:22:95:
6a:a1:60:41:3c:bf:fc:aa:8c:81:05:a5:7f:9b:a1:
0e:6e:a6:d5:13:83:f4:ef:c5:25:2e:70:a8:4c:8e:
ff:c2:bb:42:45:da:a2:22:94:fb:1a:7d:f0:2c:c0:
35:2c:c0:e0:e7:6d:df:45:44:05:2f:fe:54:d2:67:
64:da:ce:27:10:14:b7:cf:12:f2:30:94:de:76:37:
68:72:cc:87:df:2e:d5:8d:8e:4e:1a:a9:9f:fe:4e:
11:5e:f3:48:7e:dc:fe:2c:2f:68:d1:d7:3b:85:a3:
fe:45:61:f1:34:62:58:ce:22:04:24:fc:b5:a5:13:
24:30:40:0b:18:55:b7:2e:8d:34:0f:04:ab:31:54:
b8:f8:91:fa:a1:7a:33:7a:c2:63:0e:e9:83:cd:e1:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:28:4A:E2:FE:5B:0F:5A:23:CA:3B:B1:68:CF:21:0D:6D:E6:02
X509v3 Authority Key Identifier:
keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ab:d8:da:bc:4f:4b:e2:9a:af:a0:f4:c6:fb:c4:75:53:70:
23:f2:e2:7a:79:f8:de:96:b1:bd:83:4f:f5:82:76:20:cd:f7:
d7:fc:f5:1d:b9:2f:4d:1d:81:6d:86:ae:08:ff:5d:d2:82:9d:
21:79:a7:5c:be:0a:cd:1e:e1:95:a1:e6:ac:a5:6f:c0:b5:71:
af:0e:20:2b:63:93:ff:9d:df:9a:68:51:ab:73:af:b4:cd:08:
41:66:f6:66:65:53:d0:80:7c:a4:1a:c5:65:a2:63:1b:aa:61:
bc:b5:72:b6:76:80:f6:d6:d2:a2:07:7f:fc:9c:0e:91:91:b9:
03:f3:7b:58:f2:08:fd:40:2d:f9:aa:b4:27:4f:bb:43:8d:fb:
6a:20:fb:ba:1b:7e:eb:73:41:bb:57:bd:10:26:05:9e:6d:2c:
58:0f:ce:a8:fa:de:78:23:7e:c5:55:13:c2:55:58:98:7f:96:
55:7e:a2:e7:73:9e:65:a6:85:2e:10:e8:dc:fe:28:73:df:fd:
10:f5:5f:ee:82:c9:2a:30:7c:da:a2:09:b1:a3:7a:43:7d:4a:
b1:4f:e1:e6:f9:4d:b5:13:ad:06:02:f8:a2:d4:f9:3f:17:ec:
21:66:b0:49:c6:3d:d9:be:e6:a8:8c:58:87:27:b4:dc:c5:d8:
e4:6b:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:31 2026 by rpki-client