
$ rpki-client -vvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft
File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json)
Hash identifier: Gigwv8OQR8e18OT9PxZygWnaYLcAlf+wc6RKv8EcvIk=
Subject key identifier: 55:7E:DA:86:75:0A:D2:06:D8:66:74:8A:8B:6A:E6:DE:44:18:56:C7
Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72
Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372
Certificate serial: 57F56874955AF188CEF89157EB308B0AE364981B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:38:25 +0000
Manifest this update: Sat 13 Jun 2026 03:33:25 +0000
Manifest next update: Sun 14 Jun 2026 04:12:25 +0000
Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=)
2: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=)
3: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=)
4: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: pzy+/yB6Hac/A6nKtj/YwR8aV0y8gpIlW0zr+ATpqxk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl
rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f5:68:74:95:5a:f1:88:ce:f8:91:57:eb:30:8b:0a:e3:64:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372
Validity
Not Before: Jun 13 03:33:25 2026 GMT
Not After : Jun 14 04:12:25 2026 GMT
Subject: CN=557EDA86750AD206D866748A8B6AE6DE441856C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:f6:64:d6:17:14:60:26:75:03:0d:d7:cc:
2e:b1:31:d3:06:74:c9:28:43:b8:ba:ea:6a:38:fb:
59:34:73:85:5b:c7:30:a9:47:aa:d4:10:b5:8a:e9:
7c:cb:6a:1e:25:a3:18:c0:27:95:a4:a4:7b:8c:1a:
6d:ff:00:de:91:c7:54:5b:e4:08:c3:eb:fc:44:55:
42:fd:7f:d6:4a:7a:54:35:18:36:6a:65:aa:ce:1d:
31:c4:a0:a0:e2:e3:2e:4d:92:3b:08:0f:12:f0:67:
34:4a:c3:65:7a:28:4f:0d:00:df:d4:f6:08:f4:d3:
f1:86:70:94:7c:23:df:ca:e9:64:5e:9a:4f:98:00:
ce:cc:d1:44:0d:34:7c:07:0d:7a:e1:2f:82:d8:92:
ae:7d:4f:3f:26:82:13:bc:92:db:e8:74:45:34:9e:
69:74:02:26:a0:3d:09:44:fe:87:13:87:84:07:a1:
49:4d:96:4a:0e:70:45:84:6f:8c:11:7d:a2:0f:8b:
cc:5d:76:30:d1:83:47:3a:cd:1d:03:56:03:1c:e9:
d3:07:88:69:3e:ed:b0:ce:dd:45:fb:60:4b:be:a4:
0d:64:1d:9f:24:aa:39:0e:1b:09:75:91:db:ee:40:
84:64:d2:84:64:c5:64:43:8d:51:71:a9:76:32:79:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:DA:86:75:0A:D2:06:D8:66:74:8A:8B:6A:E6:DE:44:18:56:C7
X509v3 Authority Key Identifier:
keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2d:d3:e5:ac:bd:b6:49:7b:f9:54:ae:dc:63:d0:86:79:1a:
29:bb:98:2e:f9:41:2d:d0:02:a4:ce:b2:cf:e0:5c:23:2c:f3:
8c:46:90:98:48:07:74:00:64:8e:84:c7:d2:e0:a6:d1:63:ad:
90:ca:41:f2:e2:95:fe:8e:92:ee:c3:fb:56:0f:a9:ae:ca:88:
8a:1f:dd:26:3a:2a:f1:6a:ef:00:b7:6f:6a:7e:70:f3:7f:72:
e2:92:1e:fa:e4:61:19:1a:e1:bb:23:f1:4c:98:28:49:b1:b6:
b8:60:9e:18:f6:b6:2f:d0:4b:61:07:42:66:7f:79:d5:5c:51:
ed:5f:4f:22:11:7e:e9:01:c9:e0:b2:9e:7d:45:0b:9b:3f:44:
f7:76:69:54:66:d4:70:db:a4:96:c7:c2:ad:46:ec:ba:ce:93:
79:5e:5b:02:1c:04:27:4e:ec:96:21:6f:03:67:2a:c3:5e:f1:
77:86:99:91:da:d2:35:1a:7c:ad:d5:61:aa:ee:dd:4e:dd:1c:
bb:4c:02:93:b4:18:4d:b8:52:98:c6:5f:88:3f:10:bf:b5:87:
77:df:f1:ff:fe:81:e3:66:12:ae:03:e6:89:a1:93:19:42:f3:
0a:3b:22:66:49:a8:e8:2f:06:47:9f:fd:e8:74:b2:35:ff:e6:
4b:79:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:59 2026 by rpki-client