
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
File: 139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json)
Hash identifier: 3nB/xCYSmXTmou5nfUGLOqhfghuCA7DJ0iF3lPdyMQY=
Subject key identifier: 3A:81:81:8C:F6:A7:99:D6:EF:76:89:E9:2F:A9:AD:F1:90:EB:D2:A8
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial: 391F94FB8A3E6AE086570BF7690752076DBE7270
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
Manifest number: 02D6
Signing time: Wed 15 Apr 2026 23:22:42 +0000
Manifest this update: Wed 15 Apr 2026 23:17:42 +0000
Manifest next update: Sun 19 Apr 2026 02:22:42 +0000
Files and hashes: 1: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: DAb3p6A+GCIjwCXpDIF2kcbvOKbS93Svvisaez6N1FE=)
2: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 8fuakgFHy3xUm7QgcDkjO9QSLBuvkIz5uGSpSL5YMTY=)
3: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: s43qEjY0gzL014YteTAioE2Eoeed5V6KlF3ViZB578M=)
4: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: JfuES0kaATSQOVSGSxANPI5Fc3cOe+x8BKWfAi4CWYs=)
5: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: UDTJVQMfh18042dfeJjUO+1EVnoX+eeQWO16oZtQKXE=)
6: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: A42BqVzjqFV46OV6hAZdG9PjgUwdu1Wwh4Yi98wXVBI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 02:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1f:94:fb:8a:3e:6a:e0:86:57:0b:f7:69:07:52:07:6d:be:72:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
Validity
Not Before: Apr 15 23:17:42 2026 GMT
Not After : Apr 19 02:22:42 2026 GMT
Subject: CN=3A81818CF6A799D6EF7689E92FA9ADF190EBD2A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:33:86:b0:47:d8:d3:c9:ef:aa:3e:5e:de:
0c:0f:5f:38:4a:a7:e1:ef:b1:d9:dd:0a:59:a3:81:
99:4b:4d:bf:fe:80:d0:68:1c:ab:ee:4d:f8:ea:cb:
9c:cd:c7:d5:ec:77:da:d1:03:9a:5c:f1:c4:5c:7d:
ee:24:b8:33:85:e2:5e:07:d3:37:79:22:8c:fa:54:
d1:69:7a:b0:6a:8c:54:0f:bd:f0:82:52:88:eb:85:
3a:5f:57:55:56:b1:ba:8f:b5:92:93:ba:67:ca:9a:
fc:f1:59:8f:e0:4a:0a:52:6e:33:9c:aa:c3:ea:4b:
ac:72:b5:f1:1a:3f:4f:d0:01:11:20:7d:7f:13:be:
6a:60:2e:63:88:a6:5e:3a:b8:59:bc:56:e3:9d:1e:
a3:b2:7d:27:fe:99:ca:d0:27:b3:3d:7e:33:b0:62:
5d:fb:fb:fa:37:f0:3b:14:0e:0b:ff:d0:bf:ad:62:
eb:42:a0:18:68:6f:21:ea:e7:81:df:d3:b7:ea:88:
df:24:71:3b:00:18:fa:2d:7e:bf:74:f2:bc:e8:44:
4f:f7:3c:f1:a2:cc:07:8c:3a:78:a0:af:a0:69:b2:
26:c4:0d:fb:5a:1d:34:9e:5e:13:fb:73:2b:fd:da:
8c:69:cc:28:21:a9:39:8a:71:2f:e9:e0:9c:9a:d4:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:81:8C:F6:A7:99:D6:EF:76:89:E9:2F:A9:AD:F1:90:EB:D2:A8
X509v3 Authority Key Identifier:
keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:cc:9c:2e:cb:23:c7:14:54:6d:e9:73:90:99:46:0b:d6:
52:dc:96:ca:47:aa:f6:0b:e9:aa:4b:75:c4:46:ba:c2:c3:be:
5c:b5:8b:e3:73:aa:e2:d2:9b:11:46:09:e7:ff:4e:40:91:4d:
04:0f:f7:33:ef:4d:21:16:ba:fd:b7:22:b1:b9:d6:f6:0d:cd:
ae:cd:b9:76:15:fe:5b:ff:39:08:7d:9c:1c:e9:9d:99:48:d5:
68:a2:56:6b:e2:86:97:90:53:4f:5a:cb:95:aa:69:7c:54:73:
90:d7:70:bf:32:6f:4e:fd:21:6f:89:03:f0:04:24:a6:1e:ff:
a1:e8:1c:0c:58:b0:a6:86:ca:0b:fb:24:3e:ef:d4:52:b5:ce:
0c:03:16:ab:71:6a:99:63:ea:fa:b3:64:b7:5b:21:ae:fd:79:
b9:cb:92:a9:13:c0:4f:95:d0:1b:c0:29:2a:0b:ef:b8:ca:29:
2d:40:b2:1d:d2:2d:df:ab:fc:6c:c1:02:9d:48:a9:48:33:19:
bf:c2:0b:ea:a3:0c:7c:ee:d5:1e:42:4c:08:a7:af:14:9b:8e:
7e:e4:25:2b:39:5b:4d:d0:97:ee:97:ca:ee:c2:42:2a:17:ca:
4a:cb:af:47:f4:68:5d:6a:95:5d:05:b8:20:3a:50:8f:92:de:
41:df:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:39 2026 by rpki-client