
$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
File: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json)
Hash identifier: P2KGMM3RIUvUGIBvz5XT7z+KxUhHY6ljuBLe4MY5/kM=
Subject key identifier: 7E:8B:6F:32:07:69:5A:3E:7E:68:85:FC:D5:31:42:11:83:DF:E2:5B
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial: 79EB4F654F5713870773F1B3F061C03C85471678
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
Manifest number: 1D
Signing time: Sun 01 Mar 2026 01:10:43 +0000
Manifest this update: Sun 01 Mar 2026 01:05:43 +0000
Manifest next update: Wed 04 Mar 2026 05:58:43 +0000
Files and hashes: 1: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=)
2: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=)
3: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=)
4: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=)
5: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: rgBA+gKJsP3gfILWqFo9QchbNYNmveIZyFfmUhM8T3o=)
6: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=)
7: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=)
8: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=)
9: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=)
10: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=)
11: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:eb:4f:65:4f:57:13:87:07:73:f1:b3:f0:61:c0:3c:85:47:16:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Validity
Not Before: Mar 1 01:05:43 2026 GMT
Not After : Mar 4 05:58:43 2026 GMT
Subject: CN=7E8B6F3207695A3E7E6885FCD531421183DFE25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:a4:1b:4f:3f:c7:a8:51:8b:e0:67:54:ea:
b6:b9:1b:95:6d:51:34:8e:b6:58:0d:72:98:09:92:
fa:98:f3:27:4e:46:df:4b:8c:1c:be:20:aa:78:cb:
79:ac:ce:92:40:a1:5f:26:9a:bd:44:28:c5:3b:bc:
60:99:f2:d0:73:c4:0e:c7:99:90:97:02:8f:bf:4b:
23:d4:48:98:d4:3d:24:47:bd:82:51:1e:b7:ee:3c:
30:cb:24:ff:5a:2c:56:bf:5a:71:7f:77:1c:63:26:
97:d0:85:88:94:9e:cb:fd:75:1a:8e:e6:04:fa:86:
77:d4:33:1a:87:c0:a5:cb:73:b8:4f:45:01:fe:8e:
d3:38:0c:c4:86:f4:60:bb:7f:1f:94:f5:dc:32:0e:
9b:9c:14:c1:ec:6b:d3:55:6d:3a:fc:74:16:04:a3:
bb:4d:e7:3f:8d:7e:04:00:fe:46:d6:35:63:8b:00:
be:93:38:b4:3f:35:e3:8a:db:87:2e:d3:e8:42:52:
69:6a:e8:e8:c1:a9:43:2a:cf:8e:e2:54:a1:f1:3c:
03:69:66:d5:17:ae:d1:a8:31:d4:53:4a:98:e5:57:
d6:53:72:a0:4b:e9:52:d7:5e:e3:01:81:93:24:14:
ce:b1:e5:03:3e:88:22:fc:ea:00:6f:d7:32:88:34:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:6F:32:07:69:5A:3E:7E:68:85:FC:D5:31:42:11:83:DF:E2:5B
X509v3 Authority Key Identifier:
keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:89:db:59:48:ba:22:4b:18:b1:ca:d2:bc:55:ba:9a:bd:89:
b1:80:fd:bc:a5:d3:f2:86:ad:7e:22:b6:c8:1a:41:8b:b0:3e:
08:f6:d7:10:8e:e8:f6:e8:a4:c7:3a:6e:19:aa:ea:37:fe:60:
db:6d:cf:f8:f2:de:4b:9d:2e:35:17:d5:05:a6:e6:a2:52:4b:
66:ad:56:ab:1c:f6:97:0b:6b:91:00:7f:fc:ba:5c:ce:08:5e:
dd:3d:8f:af:e6:22:94:9a:27:b1:e1:d5:6d:4d:e5:4a:44:ce:
a6:ee:61:dd:01:e8:17:f5:43:0f:ad:31:8d:b1:91:ab:f4:15:
4a:91:71:91:e0:42:73:02:eb:d8:c8:1b:0d:58:a5:91:30:7c:
dc:e1:b9:59:15:ed:b8:22:c5:0d:d4:d4:bc:db:c4:65:a4:30:
94:5a:59:12:cd:4f:e1:16:d1:f8:23:e5:bf:3b:e9:c5:df:25:
6e:f5:42:1e:a9:0f:7f:af:61:d8:1e:bb:2f:fb:b7:9a:d5:dc:
f3:a3:09:d5:cd:33:a3:e5:e5:9c:fa:97:f4:2e:55:15:44:02:
ab:df:66:f5:8d:59:62:5f:ab:bf:d3:2b:de:85:ad:ec:6c:b4:
9c:42:e0:1e:0f:53:d8:72:f5:68:79:03:c1:0d:8a:79:c8:e3:
33:91:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:28:20 2026 by rpki-client