
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json)
Hash identifier: GGNxSOt0H5dYFwsDx8eXy6X3/9zt2XnNACbJkUWpiPY=
Subject key identifier: CE:C9:0D:76:70:D1:79:06:4D:4C:C6:33:96:1B:74:17:B6:56:30:FB
Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11
Certificate serial: 6687AEA7F2F986C0CC370D2A5798A1FD4BD60D8D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:37:11 +0000
Manifest this update: Wed 17 Jun 2026 03:32:11 +0000
Manifest next update: Thu 18 Jun 2026 04:04:11 +0000
Files and hashes: 1: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: v17RIseOcXidrpZAGyzJhxvj1qX66hFy6wyVzohpluA=)
2: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=)
3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=)
4: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:87:ae:a7:f2:f9:86:c0:cc:37:0d:2a:57:98:a1:fd:4b:d6:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11
Validity
Not Before: Jun 17 03:32:11 2026 GMT
Not After : Jun 18 04:04:11 2026 GMT
Subject: CN=CEC90D7670D179064D4CC633961B7417B65630FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:c8:b6:c5:99:d8:9f:42:ab:ac:dc:09:21:
9d:cb:3c:7f:19:40:a8:d8:72:ce:32:78:0e:80:b2:
e8:17:8c:cb:2d:9a:7c:43:ac:5b:31:fc:12:17:aa:
40:88:e6:30:e2:e1:23:12:b8:b5:cb:09:b9:12:39:
2a:7b:7a:a4:1e:c4:a0:02:d0:33:14:88:46:a4:9f:
63:46:11:47:11:7d:34:34:21:e1:7e:05:3f:e9:b2:
7f:7c:0f:e8:a0:9f:b2:76:53:bc:6b:24:bf:21:99:
37:c6:dd:7a:6a:e6:7b:65:3b:b9:90:dd:53:f9:0e:
d2:b0:0a:14:48:54:f8:b4:5e:5e:b5:ec:16:97:5f:
2d:3a:ed:88:c8:c5:3a:67:ce:a2:b3:cb:b9:3b:92:
74:f6:b6:be:e8:1a:d7:a9:39:c1:e9:5c:c9:e9:35:
9c:2d:46:5a:04:db:b7:e3:79:6c:73:d0:28:e4:89:
39:80:42:1f:ed:20:02:29:f9:fb:32:89:98:c4:ca:
09:10:ab:94:91:d4:95:cb:37:62:75:ba:2d:5e:82:
7c:fd:8c:3a:a1:35:c6:b3:62:40:1f:85:52:02:cc:
5b:01:e8:c1:09:87:a5:ab:0c:b6:1f:6f:e7:93:37:
22:96:34:0d:e9:43:8b:6c:39:36:30:2d:bd:67:df:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:0D:76:70:D1:79:06:4D:4C:C6:33:96:1B:74:17:B6:56:30:FB
X509v3 Authority Key Identifier:
keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:39:28:35:ff:75:87:bb:63:b0:7c:92:76:a2:6f:4b:ca:
e2:ba:9f:07:8e:1c:e1:d3:44:ab:96:38:59:c6:84:f1:5e:4d:
0d:33:2c:8d:ce:8b:06:ae:89:3e:9d:82:c3:2a:47:53:66:15:
28:4d:4a:56:b4:36:25:73:4a:1f:23:16:e2:6b:41:8d:b3:44:
8f:58:8c:c1:ac:4c:2d:8b:27:2d:f8:14:82:1d:6a:66:fe:87:
50:2b:89:de:ce:ab:61:b1:7e:eb:a6:7f:7d:13:9a:18:bd:26:
c8:a4:6c:6f:e2:7a:bb:25:ea:e4:05:ca:f3:45:88:81:ad:ad:
1b:5f:cb:e9:f3:5c:2a:1b:98:96:b2:df:e7:97:08:21:ee:5e:
cc:f8:8e:e2:1c:68:bc:88:df:19:a3:75:a8:39:47:69:a8:dc:
c2:38:2d:46:6c:90:6f:24:c1:76:eb:38:21:da:c3:0a:f1:bc:
d1:a6:9c:75:f8:64:ce:f6:34:40:cb:5b:dc:a2:f9:85:04:18:
6c:94:02:15:ff:72:02:e0:db:98:7a:ff:cd:36:09:7e:a5:f4:
fc:4d:a9:39:96:de:74:5f:bc:3d:79:94:d1:9e:85:83:4d:0b:
5d:01:9a:6c:4d:52:d3:7b:fb:4f:75:70:3e:2d:da:5f:71:55:
2d:7f:4d:5d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZoeup/L5hsDMNw0qV5ih/UvWDY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4
REU3NUExMTAeFw0yNjA2MTcwMzMyMTFaFw0yNjA2MTgwNDA0MTFaMDMxMTAvBgNV
BAMTKENFQzkwRDc2NzBEMTc5MDY0RDRDQzYzMzk2MUI3NDE3QjY1NjMwRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAF8i2xZnYn0KrrNwJIZ3LPH8Z
QKjYcs4yeA6AsugXjMstmnxDrFsx/BIXqkCI5jDi4SMSuLXLCbkSOSp7eqQexKAC
0DMUiEakn2NGEUcRfTQ0IeF+BT/psn98D+ign7J2U7xrJL8hmTfG3Xpq5ntlO7mQ
3VP5DtKwChRIVPi0Xl617BaXXy067YjIxTpnzqKzy7k7knT2tr7oGtepOcHpXMnp
NZwtRloE27fjeWxz0CjkiTmAQh/tIAIp+fsyiZjEygkQq5SR1JXLN2J1ui1egnz9
jDqhNcazYkAfhVICzFsB6MEJh6WrDLYfb+eTNyKWNA3pQ4tsOTYwLb1n3zt3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzskNdnDReQZNTMYzlht0F7ZWMPswHwYDVR0j
BBgwFoAUExssQYOnkmAmCL24ZOKSuo3nWhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGJmZjFiM2YtMTE5MC00MTE5LWJiYzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4
M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4REU3NUExMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMzFCMkM0MTgzQTc5MjYwMjYwOEJEQjg2NEUyOTJCQThERTc1
QTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi
YzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjky
QkE4REU3NUExMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACMiOSg1/3WHu2OwfJJ2om9LyuK6nweOHOHT
RKuWOFnGhPFeTQ0zLI3OiwauiT6dgsMqR1NmFShNSla0NiVzSh8jFuJrQY2zRI9Y
jMGsTC2LJy34FIIdamb+h1Arid7Oq2Gxfuumf30Tmhi9JsikbG/iersl6uQFyvNF
iIGtrRtfy+nzXCobmJay3+eXCCHuXsz4juIcaLyI3xmjdag5R2mo3MI4LUZskG8k
wXbrOCHawwrxvNGmnHX4ZM72NEDLW9yi+YUEGGyUAhX/cgLg25h6/802CX6l9PxN
qTmW3nRfvD15lNGehYNNC10BmmxNUtN7+091cD4t2l9xVS1/TV0=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:37 2026 by rpki-client