
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft
File: 0ED92E96DB5C94077B124D34469AD1D3208E3189.mft (raw, json)
Hash identifier: jHtT9jCsDGP37SqCSdDgKLrUxWNucVZr0DOnZvd8SNc=
Subject key identifier: B0:89:B2:C5:F1:6C:13:ED:FC:DF:C7:A9:D0:DD:83:EB:DF:C2:76:5B
Authority key identifier: 0E:D9:2E:96:DB:5C:94:07:7B:12:4D:34:46:9A:D1:D3:20:8E:31:89
Certificate issuer: /CN=0ED92E96DB5C94077B124D34469AD1D3208E3189
Certificate serial: 5CA36C766D9C2384C25D1CB9EE183DC2A5F8BFF5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 00:51:49 +0000
Manifest this update: Thu 24 Sep 2026 00:46:49 +0000
Manifest next update: Fri 25 Sep 2026 02:00:49 +0000
Files and hashes: 1: 0ED92E96DB5C94077B124D34469AD1D3208E3189.crl (hash: E+FlAFcsgleYshUuwWCZHgw0wnaFfBOCI7x6Qe2ccCA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.crl
rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a3:6c:76:6d:9c:23:84:c2:5d:1c:b9:ee:18:3d:c2:a5:f8:bf:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ED92E96DB5C94077B124D34469AD1D3208E3189
Validity
Not Before: Sep 24 00:46:49 2026 GMT
Not After : Sep 25 02:00:49 2026 GMT
Subject: CN=B089B2C5F16C13EDFCDFC7A9D0DD83EBDFC2765B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:75:21:88:90:bc:8e:70:ba:02:8c:7a:72:
c6:cf:79:87:bf:5a:23:38:42:7b:4c:fd:60:7c:b0:
48:f4:cd:80:40:9f:8d:41:35:b8:95:2d:22:9e:02:
7d:04:32:ca:66:8f:ed:06:c3:85:eb:f9:af:3d:3c:
35:50:0e:9f:07:e2:76:48:e9:23:af:67:36:b0:dd:
93:40:d8:9f:2f:65:f8:c5:a3:22:79:d8:54:05:03:
12:2d:87:fd:2b:50:a1:6d:c1:cd:20:fa:84:d5:e5:
51:ab:b0:0b:22:64:d1:35:24:23:4b:42:7c:fb:18:
fe:bc:fc:f9:41:07:97:6d:d7:5d:f4:e0:89:84:af:
ae:33:79:28:e7:f8:b3:3e:d2:b7:0e:e1:89:b1:e7:
ba:09:c8:8b:f9:fd:20:cc:a2:5a:29:62:dd:f5:ed:
de:73:d1:b8:60:b0:1d:e3:14:e9:71:76:40:e3:46:
8d:ef:72:cf:a3:b5:b3:fb:a5:f8:22:a3:f4:00:bf:
f0:d6:d3:18:8e:53:16:f7:6a:05:83:b3:22:86:25:
cc:7d:9f:ad:55:8b:05:fc:29:48:2c:37:37:71:98:
a3:ee:be:1c:9e:ed:2d:08:31:76:75:85:d1:cf:2b:
72:12:0a:bf:bc:58:58:3c:92:37:60:49:aa:5b:59:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:B2:C5:F1:6C:13:ED:FC:DF:C7:A9:D0:DD:83:EB:DF:C2:76:5B
X509v3 Authority Key Identifier:
keyid:0E:D9:2E:96:DB:5C:94:07:7B:12:4D:34:46:9A:D1:D3:20:8E:31:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:69:d2:d6:fa:fd:cc:3c:e6:db:53:3e:48:de:42:5a:9f:13:
38:c2:e8:bd:90:ac:4e:e8:8c:a7:7d:b6:02:de:71:ae:b8:c8:
d3:eb:3a:3b:dc:28:45:f3:74:9b:e5:13:c7:c7:e8:4d:a9:e2:
d5:71:7e:ec:4c:d1:b1:af:51:77:13:11:0f:bd:cb:0f:08:e7:
17:b4:70:37:32:7d:58:7d:7f:e1:fa:f4:ed:a3:9c:dc:86:b1:
d6:51:ec:62:d6:2e:7d:7d:99:13:c6:a4:24:09:1e:79:3b:33:
c4:97:e6:50:2b:45:2a:ea:d2:b9:31:13:aa:15:5f:9a:89:a4:
d6:32:5f:06:d7:78:c6:ae:85:52:58:b9:74:10:13:d4:c8:70:
ca:67:94:fc:28:2a:99:28:f4:82:bb:9d:56:ee:a2:e9:8f:6c:
c9:3f:29:6e:4a:27:d2:6a:4f:b8:11:b1:05:a9:9c:ea:95:a9:
ca:a4:07:e8:74:8e:a6:d6:eb:d0:ac:d5:62:0f:7e:52:54:6f:
81:29:d0:7f:c4:7a:4a:2f:a5:06:c5:1b:46:a3:08:1c:f6:61:
f6:a9:e3:a3:8d:a2:ba:c2:08:cd:47:f9:fd:c9:cf:d4:a2:b3:
78:57:64:f2:2e:12:9d:7f:88:af:0e:dc:b6:74:72:70:2c:52:
05:ea:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:57:38 2026 by rpki-client