
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json)
Hash identifier: UE8au8aa/KJINkxKkRwrGPoFberPB9XMDCDS+5mIThI=
Subject key identifier: 62:66:8A:06:D3:F8:37:93:FA:99:1E:36:F8:88:46:25:FE:69:1F:DB
Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
Certificate issuer: /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Certificate serial: 72580F40D44D36830D85DB255EA8059ABEDE9706
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
Manifest number: DA
Signing time: Mon 12 Oct 2026 23:36:16 +0000
Manifest this update: Mon 12 Oct 2026 23:31:16 +0000
Manifest next update: Tue 13 Oct 2026 23:50:16 +0000
Files and hashes: 1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=)
2: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: FK/U0+57UHrU4L8QiHJnWFpwxiiF4Tp8BossoWiY4ig=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:58:0f:40:d4:4d:36:83:0d:85:db:25:5e:a8:05:9a:be:de:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Validity
Not Before: Oct 12 23:31:16 2026 GMT
Not After : Oct 13 23:50:16 2026 GMT
Subject: CN=62668A06D3F83793FA991E36F8884625FE691FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:aa:e8:0f:c8:b7:11:cc:58:d0:06:4e:65:
5c:87:e8:0c:c3:0c:ae:8a:34:f2:0e:9a:dd:9d:78:
0e:76:52:90:7c:cc:77:9d:5b:11:ca:8a:b8:09:13:
26:15:4f:2c:61:10:e0:33:94:f0:23:59:27:6a:4e:
23:fa:de:05:46:9e:a4:5a:84:23:70:a5:c1:a2:54:
cb:ce:b7:cb:88:b2:14:fb:c0:1f:0a:52:d7:ad:c7:
3f:5a:54:ce:b9:c8:6e:59:37:9a:6a:b5:74:ed:f8:
f1:a3:1d:35:db:b6:d8:c5:64:01:56:3d:89:8b:49:
90:20:65:00:30:34:7f:34:2d:0f:20:5a:47:58:52:
9b:7f:08:e8:ca:4d:81:5e:70:58:d8:a9:1c:e8:3c:
25:3e:fd:67:d4:35:4f:e7:07:7c:f6:54:59:c8:28:
4a:5d:0e:b3:a8:ea:ba:7a:39:0a:94:58:80:c8:a0:
0b:57:a9:12:5f:23:fa:77:05:ed:bc:bf:b9:c8:a9:
a7:ea:dd:cf:24:da:d2:c2:56:53:bc:72:17:97:c6:
65:8c:83:11:ce:41:8e:ec:28:82:8f:42:95:7e:a7:
26:22:fe:b4:01:85:9a:a1:c9:9a:ed:fb:79:7c:c3:
c9:0a:d2:27:b8:1d:44:e6:c0:d7:b8:d1:e8:08:39:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:8A:06:D3:F8:37:93:FA:99:1E:36:F8:88:46:25:FE:69:1F:DB
X509v3 Authority Key Identifier:
keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:cd:bc:20:a4:9a:40:f0:8a:30:c1:13:8b:de:20:4d:46:
23:da:08:54:98:e1:1a:90:95:58:ee:df:41:aa:ec:00:e1:95:
3a:51:62:f6:0f:c6:49:c2:33:ad:31:75:86:91:7d:d3:9c:cd:
92:21:8a:71:80:0f:7f:8a:ff:8c:14:40:2b:de:1c:7d:c9:7d:
0c:f3:16:75:2c:33:ec:05:3e:1a:b9:c6:02:28:f7:cd:7b:bb:
8e:8f:5c:6f:76:46:5b:9e:ad:11:77:14:c0:31:40:2b:66:4b:
7e:00:99:ec:76:74:b0:54:aa:6c:51:99:f4:3f:80:a4:31:eb:
7d:8d:1f:2c:9c:5e:50:85:99:1c:e1:77:19:7b:48:bf:7a:cf:
4e:31:bb:c0:fe:7f:31:18:8f:ab:0a:5a:63:f8:e9:27:a6:b0:
e4:ed:f4:f3:89:1d:cd:1d:c1:e9:a7:04:c7:e7:70:a6:e3:d0:
4f:03:7a:e5:d8:b3:ea:a6:72:5a:e5:49:e0:e3:27:7f:07:68:
9a:d4:40:e8:82:ab:a4:c3:79:4c:1b:08:6e:7c:97:18:b4:a5:
64:5e:c1:4f:02:5d:79:ac:07:17:34:35:41:7c:a1:ff:6e:7f:
95:5c:e4:c5:00:a8:ab:64:8d:20:72:2a:1d:6f:f7:16:5c:eb:
e4:af:32:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUclgPQNRNNoMNhdslXqgFmr7elwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4REJG
RjI0Qzc5ODAeFw0yNjEwMTIyMzMxMTZaFw0yNjEwMTMyMzUwMTZaMDMxMTAvBgNV
BAMTKDYyNjY4QTA2RDNGODM3OTNGQTk5MUUzNkY4ODg0NjI1RkU2OTFGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMqroD8i3EcxY0AZOZVyH6AzD
DK6KNPIOmt2deA52UpB8zHedWxHKirgJEyYVTyxhEOAzlPAjWSdqTiP63gVGnqRa
hCNwpcGiVMvOt8uIshT7wB8KUtetxz9aVM65yG5ZN5pqtXTt+PGjHTXbttjFZAFW
PYmLSZAgZQAwNH80LQ8gWkdYUpt/COjKTYFecFjYqRzoPCU+/WfUNU/nB3z2VFnI
KEpdDrOo6rp6OQqUWIDIoAtXqRJfI/p3Be28v7nIqafq3c8k2tLCVlO8cheXxmWM
gxHOQY7sKIKPQpV+pyYi/rQBhZqhyZrt+3l8w8kK0ie4HUTmwNe40egIOSpTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYmaKBtP4N5P6mR42+IhGJf5pH9swHwYDVR0j
BBgwFoAUOe9WDgfAtC7wRX99WnD42/8kx5gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGFkMzM3NzAtZjE1MS00M2YzLTk1NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUw
N0MwQjQyRUYwNDU3RjdENUE3MEY4REJGRjI0Qzc5OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOUVGNTYwRTA3QzBCNDJFRjA0NTdGN0Q1QTcwRjhEQkZGMjRD
Nzk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1
NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4
REJGRjI0Qzc5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAa4zbwgpJpA8IowwROL3iBNRiPaCFSY4RqQ
lVju30Gq7ADhlTpRYvYPxknCM60xdYaRfdOczZIhinGAD3+K/4wUQCveHH3JfQzz
FnUsM+wFPhq5xgIo9817u46PXG92RluerRF3FMAxQCtmS34Amex2dLBUqmxRmfQ/
gKQx632NHyycXlCFmRzhdxl7SL96z04xu8D+fzEYj6sKWmP46SemsOTt9POJHc0d
wemnBMfncKbj0E8DeuXYs+qmclrlSeDjJ38HaJrUQOiCq6TDeUwbCG58lxi0pWRe
wU8CXXmsBxc0NUF8of9uf5Vc5MUAqKtkjSByKh1v9xZc6+SvMrk=
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:01:11 2026 by rpki-client