
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
File: 0139BB0BDA0215A5AD4AB57CF22329862077511D.mft (raw, json)
Hash identifier: MZZn3AtyovcV5rQOr8ewy0GUusy6MNMxzlKLUJ2Yyfc=
Subject key identifier: 0A:DE:E7:06:1F:1E:AF:92:93:A8:84:44:A4:D9:01:37:45:2D:C9:28
Authority key identifier: 01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
Certificate issuer: /CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Certificate serial: 2C3A441005ED153CEE9D8A995F70798B475D4A3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 15:20:40 +0000
Manifest this update: Mon 21 Sep 2026 15:15:40 +0000
Manifest next update: Tue 22 Sep 2026 15:59:40 +0000
Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: 52S2LH7XP8/eJAv2z0VJNDFFpAYh34WjK2J7d6q8uvc=)
2: 0139BB0BDA0215A5AD4AB57CF22329862077511D.crl (hash: ebgzymBjJysfd9sngZSLmpaCg+sWVNf7vfTI1J6wrnM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3a:44:10:05:ed:15:3c:ee:9d:8a:99:5f:70:79:8b:47:5d:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0139BB0BDA0215A5AD4AB57CF22329862077511D
Validity
Not Before: Sep 21 15:15:40 2026 GMT
Not After : Sep 22 15:59:40 2026 GMT
Subject: CN=0ADEE7061F1EAF9293A88444A4D90137452DC928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:73:c6:86:b7:20:df:0a:cc:12:53:89:be:
dd:26:fc:da:c6:4c:a3:59:b0:b9:97:e9:f6:a8:4c:
e3:e6:50:4d:45:4c:6a:c9:0a:2e:83:a8:f8:c0:23:
49:8e:97:c6:17:3f:66:25:53:e7:40:34:c8:8b:e7:
10:72:ad:99:86:62:86:85:c2:e3:7e:5d:85:6b:70:
b9:79:20:31:ef:42:b1:54:23:11:12:fb:57:57:fb:
53:2d:de:6d:b4:f8:2f:3b:aa:e7:fb:99:f6:80:ce:
ee:7a:70:a1:8e:84:6e:56:96:41:d2:84:77:75:43:
f2:99:ce:5e:ba:f9:d1:c3:4d:81:55:31:55:db:ba:
d4:6f:a6:21:4d:06:e1:4d:f3:5e:78:24:be:b3:64:
1b:ba:a7:6e:4c:3c:23:82:d4:32:17:6f:e4:3d:69:
5d:76:fd:23:24:bd:b6:7e:6b:0e:a1:9f:af:84:0c:
66:17:85:aa:ab:a1:d3:2d:71:bc:b5:72:6b:0f:05:
d2:b2:3c:87:62:58:43:a3:f0:28:9a:ab:00:01:42:
0f:0b:6f:4c:18:c8:e5:ec:22:a7:c6:c9:91:94:46:
9d:a1:cd:b5:0d:ab:36:51:65:dd:48:96:72:da:bc:
d1:e5:87:94:33:7b:a2:a2:4a:72:2a:82:11:c8:19:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:E7:06:1F:1E:AF:92:93:A8:84:44:A4:D9:01:37:45:2D:C9:28
X509v3 Authority Key Identifier:
keyid:01:39:BB:0B:DA:02:15:A5:AD:4A:B5:7C:F2:23:29:86:20:77:51:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0139BB0BDA0215A5AD4AB57CF22329862077511D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/0139BB0BDA0215A5AD4AB57CF22329862077511D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:45:c1:90:79:99:c2:46:65:8d:83:41:23:ff:7a:21:b1:
b1:88:2b:96:e8:b9:8d:90:3a:60:6c:f6:31:3c:72:1c:40:9e:
7a:86:4e:dd:04:a1:a8:de:c6:d9:b8:2f:4b:2b:00:99:58:bc:
75:83:d9:bf:6a:fc:68:95:66:76:fd:b5:18:ee:68:45:b2:79:
ef:7e:1f:b8:5f:e2:68:1c:4e:92:2a:2f:0f:c7:29:51:04:17:
ed:05:ba:ea:22:81:42:e2:0c:af:23:36:6c:c2:1f:0a:55:c3:
00:5c:08:c6:1c:09:d9:7a:53:27:64:e5:89:75:e7:5d:2a:10:
7a:6f:21:3d:03:f2:0b:7e:fa:0d:cd:aa:ba:ad:c5:53:fd:d8:
f6:fe:2a:95:18:a4:d1:18:49:42:44:67:a2:c7:88:eb:07:f7:
0c:42:dd:86:b0:67:07:fa:6d:c5:ce:67:4a:82:0f:39:41:fd:
50:98:97:aa:89:c4:1a:5d:41:3c:ff:7a:b3:ac:83:1b:9f:e7:
72:a1:3a:c2:20:12:54:db:95:a2:9f:da:6d:1f:a5:2a:3f:73:
97:8e:1a:5c:f0:b7:c9:a4:69:aa:41:5d:9a:71:d2:a6:4f:ba:
4a:f6:88:39:9d:9a:c1:21:57:63:46:09:2c:ed:0b:b5:94:5c:
13:90:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:10:42 2026 by rpki-client