
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json)
Hash identifier: /G5BlHVWhRagEpFpC/RmKzjWtL0Zg9XVzBHoRgizbZY=
Subject key identifier: E0:FF:E9:F1:81:77:1D:73:20:8B:EF:ED:B3:E0:59:D3:29:CB:7E:0C
Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48
Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748
Certificate serial: 602A61B16C1B975450FE18E38A6F23F3CA2BE3E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 00:15:35 +0000
Manifest this update: Sat 26 Sep 2026 00:10:35 +0000
Manifest next update: Sun 27 Sep 2026 02:32:35 +0000
Files and hashes: 1: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: yLwthCJVSwbxDykt8MBg4Izn1qamDKEiEw3yBbdQiWU=)
2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl
rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 02:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2a:61:b1:6c:1b:97:54:50:fe:18:e3:8a:6f:23:f3:ca:2b:e3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748
Validity
Not Before: Sep 26 00:10:35 2026 GMT
Not After : Sep 27 02:32:35 2026 GMT
Subject: CN=E0FFE9F181771D73208BEFEDB3E059D329CB7E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:fc:62:d2:82:c2:fc:c5:74:ef:b3:b1:b3:
3b:75:aa:11:1b:0a:7f:39:41:f5:04:16:5d:10:88:
40:2f:26:f9:99:99:7a:4c:da:f3:74:ec:55:9f:91:
63:ca:95:7b:b9:de:b4:c1:8e:62:52:0d:ce:cc:ad:
4b:6a:81:9c:35:9c:1f:46:e0:6f:a8:80:b9:a3:f3:
f4:7c:80:f3:0c:21:a0:f6:a1:8d:5d:cb:58:3c:64:
d0:29:2c:fb:31:c4:ba:fb:43:dd:5e:a6:0f:d0:2c:
8e:52:4a:ee:5d:af:55:2f:d6:64:b5:d1:d1:8b:f1:
73:0f:6f:4d:0f:16:73:a7:18:d8:b1:bd:96:d0:ea:
2c:f6:aa:6a:8e:54:45:fd:87:65:80:53:c2:a6:f9:
d7:3d:6d:88:5a:47:97:6f:5b:fd:cc:de:5e:87:93:
de:4c:08:cd:13:1e:a7:6e:1f:4b:2d:07:2c:f5:a0:
86:77:23:37:73:1b:d3:2c:ff:20:94:58:10:c6:3d:
d6:49:e9:ab:56:28:a7:70:68:35:a8:eb:6b:bc:4e:
71:5a:dc:29:ba:30:83:bc:e5:8d:c6:81:64:07:20:
c9:25:35:d5:c3:3a:13:bc:98:69:12:1e:89:4c:37:
b4:05:be:d4:1f:65:46:e9:36:4f:c7:46:ed:71:88:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:E9:F1:81:77:1D:73:20:8B:EF:ED:B3:E0:59:D3:29:CB:7E:0C
X509v3 Authority Key Identifier:
keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e6:e3:9d:20:c6:70:6d:a4:09:70:cf:fa:f8:25:ce:ca:4c:
89:47:52:00:25:b8:7f:99:17:95:7b:99:fe:42:4f:9d:82:dd:
54:37:5b:c6:96:1f:7f:0f:46:f8:b2:b5:41:a9:71:d6:e8:09:
b9:c5:c1:9f:42:2c:9e:c8:56:3c:eb:02:99:d6:f7:1b:a4:73:
61:0b:28:95:2a:2f:07:6c:8c:1a:67:91:d4:6f:91:aa:30:29:
b0:f3:1b:8b:89:bb:74:64:4f:56:89:a5:5e:35:6a:cc:d0:18:
82:bb:44:51:6e:58:a5:0a:75:a7:5c:6e:6d:58:e8:80:08:65:
63:96:d7:14:a7:92:33:63:66:e3:b9:3a:13:28:51:0c:19:b5:
7c:92:35:f4:cc:ae:73:15:3a:9c:f1:80:6e:85:cb:83:a4:01:
ce:1d:2c:b4:d7:35:a9:67:66:6c:c8:bf:88:b1:80:f3:24:bf:
26:6c:14:ba:1c:5b:39:e7:9f:b1:6e:3a:c0:41:9d:67:35:e8:
e1:d0:7b:6c:f1:f3:a4:f0:bc:a7:1d:31:49:48:e6:94:7b:f2:
3a:81:34:2c:09:66:6c:0a:58:2f:1d:6d:81:21:d8:e7:b8:0e:
cb:df:58:bc:62:66:6f:87:b4:f4:26:52:4f:d6:24:fb:f6:58:
dd:69:43:e6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYCphsWwbl1RQ/hjjim8j88or4+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx
RkRFMjc0ODAeFw0yNjA5MjYwMDEwMzVaFw0yNjA5MjcwMjMyMzVaMDMxMTAvBgNV
BAMTKEUwRkZFOUYxODE3NzFENzMyMDhCRUZFREIzRTA1OUQzMjlDQjdFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV8vxi0oLC/MV077Oxszt1qhEb
Cn85QfUEFl0QiEAvJvmZmXpM2vN07FWfkWPKlXu53rTBjmJSDc7MrUtqgZw1nB9G
4G+ogLmj8/R8gPMMIaD2oY1dy1g8ZNApLPsxxLr7Q91epg/QLI5SSu5dr1Uv1mS1
0dGL8XMPb00PFnOnGNixvZbQ6iz2qmqOVEX9h2WAU8Km+dc9bYhaR5dvW/3M3l6H
k95MCM0THqduH0stByz1oIZ3IzdzG9Ms/yCUWBDGPdZJ6atWKKdwaDWo62u8TnFa
3Cm6MIO85Y3GgWQHIMklNdXDOhO8mGkSHolMN7QFvtQfZUbpNk/HRu1xiIVhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4P/p8YF3HXMgi+/ts+BZ0ynLfgwwHwYDVR0j
BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF
MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy
NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz
NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB
MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAArm450gxnBtpAlwz/r4Jc7KTIlHUgAluH+Z
F5V7mf5CT52C3VQ3W8aWH38PRviytUGpcdboCbnFwZ9CLJ7IVjzrApnW9xukc2EL
KJUqLwdsjBpnkdRvkaowKbDzG4uJu3RkT1aJpV41aszQGIK7RFFuWKUKdadcbm1Y
6IAIZWOW1xSnkjNjZuO5OhMoUQwZtXySNfTMrnMVOpzxgG6Fy4OkAc4dLLTXNaln
ZmzIv4ixgPMkvyZsFLocWznnn7FuOsBBnWc16OHQe2zx86TwvKcdMUlI5pR78jqB
NCwJZmwKWC8dbYEh2Oe4DsvfWLxiZm+HtPQmUk/WJPv2WN1pQ+Y=
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:39:05 2026 by rpki-client