
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json)
Hash identifier: MbOQYW9zTAqp+IzNu6IldCC2aANwl2gcXJgd8gB+sj0=
Subject key identifier: 42:8A:0F:89:BE:0F:AE:E9:65:6A:96:B2:47:CE:9F:77:3B:2C:74:B0
Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
Certificate issuer: /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Certificate serial: 0F957B355DC6C34198E3A4CC1B394C9FCC3533D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:47:52 +0000
Manifest this update: Tue 16 Jun 2026 23:42:52 +0000
Manifest next update: Thu 18 Jun 2026 02:16:52 +0000
Files and hashes: 1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=)
2: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: g3k9OwYhwuQT0Sio1tnTh7bZ0Tg1pK9Ej4gO41jteic=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:95:7b:35:5d:c6:c3:41:98:e3:a4:cc:1b:39:4c:9f:cc:35:33:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798
Validity
Not Before: Jun 16 23:42:52 2026 GMT
Not After : Jun 18 02:16:52 2026 GMT
Subject: CN=428A0F89BE0FAEE9656A96B247CE9F773B2C74B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:8a:93:26:61:bc:11:15:33:c7:0e:45:e0:
56:eb:97:a3:2c:93:19:56:18:17:e7:28:0e:fc:ed:
09:9b:ed:28:5f:74:07:0e:14:5b:e6:e8:b8:98:75:
95:ac:7e:0b:d4:6c:cb:90:61:a9:bf:fd:62:92:86:
8b:19:37:7c:94:c1:7f:d2:7a:ee:7d:02:d1:98:18:
31:8f:ca:fa:a3:03:42:0c:1b:e5:9f:eb:73:c2:6f:
19:14:78:86:de:b9:6c:24:5e:c9:b4:5b:15:21:07:
1d:3d:40:c7:ec:1f:19:60:fa:a0:da:bc:4e:d9:f2:
65:3e:bb:38:42:48:a4:a5:52:3e:8b:c1:8d:7c:b1:
77:ab:1d:f2:7a:e7:d2:b5:7a:d0:b9:c4:1c:c5:d9:
b8:64:4d:46:bd:f1:d0:d0:7a:7e:04:ec:13:f3:ca:
c2:01:52:50:9a:51:2b:24:05:f4:80:98:3c:79:c1:
5d:a4:08:16:ca:bd:f2:e3:72:f2:cd:9f:53:db:c2:
23:fb:a8:ae:11:ab:fb:46:1a:4f:3d:35:58:3d:b7:
59:6c:81:b4:9d:40:85:34:c8:1d:60:70:25:e8:09:
6b:fd:3b:be:11:65:99:3b:59:22:65:af:db:18:79:
b1:d6:14:76:f4:16:1b:a2:3d:c0:53:07:76:4d:a1:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:0F:89:BE:0F:AE:E9:65:6A:96:B2:47:CE:9F:77:3B:2C:74:B0
X509v3 Authority Key Identifier:
keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3a:73:d1:ae:ba:e4:24:1b:ff:d6:38:77:49:b9:ce:c6:60:
b4:34:ba:16:a3:b7:80:b5:37:9c:c1:96:bc:9e:b0:9a:fb:0b:
bf:ae:e4:8b:4f:da:5a:ff:91:d3:43:63:00:22:98:e2:fa:31:
83:04:a1:3a:89:ac:36:fa:77:80:d4:a2:ba:7c:5a:67:4c:11:
87:cb:ac:0b:b2:4f:2b:df:72:69:46:1a:1f:d8:69:4d:d7:43:
b2:c6:cc:7e:61:11:3a:47:3d:1f:ab:d7:36:93:61:83:c1:97:
e3:37:9d:67:47:ae:c0:60:8e:d7:eb:21:6a:54:62:86:24:c4:
1f:d5:c0:7e:96:7b:26:71:76:42:2a:b1:c5:b7:f1:a0:69:c7:
32:77:10:93:18:72:25:45:2c:69:13:02:25:77:ea:8f:83:4a:
c9:40:dd:e7:29:82:9b:2b:7a:c2:2c:e8:72:b3:2e:70:41:ce:
b9:83:97:92:c0:67:81:3a:61:b6:89:f0:d4:e8:7c:13:19:8e:
ff:9b:46:49:00:6a:c5:63:7e:d5:19:dd:1e:36:11:00:8d:fe:
8d:62:0f:a2:d8:4c:68:c2:27:36:86:29:68:d5:0c:11:a5:c6:
7a:47:4e:0c:b4:96:0e:8d:39:bf:95:a1:79:d8:ee:1f:f3:b7:
73:5b:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:45:39 2026 by rpki-client