
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
File: 0565770E1E5C778DB06AD63B009F91D2D34746C1.mft (raw, json)
Hash identifier: oMosUd2cAZEk4Tlq4dtB7+SdDuMba2jo5vsbcevXd5Y=
Subject key identifier: 35:AB:BD:1A:32:D8:08:46:EA:6B:EE:F3:63:AD:FE:96:79:F7:7D:A6
Authority key identifier: 05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1
Certificate issuer: /CN=0565770E1E5C778DB06AD63B009F91D2D34746C1
Certificate serial: 20CE6C6111FF8696E5421D12003248B4E192A60E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
Manifest number: C4
Signing time: Sat 26 Sep 2026 00:05:21 +0000
Manifest this update: Sat 26 Sep 2026 00:00:21 +0000
Manifest next update: Sun 27 Sep 2026 02:18:21 +0000
Files and hashes: 1: 0565770E1E5C778DB06AD63B009F91D2D34746C1.crl (hash: edk+vteEKnbuXYiKJXwUgRUQk132+d/jkJdMrb9idAs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl
rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 02:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ce:6c:61:11:ff:86:96:e5:42:1d:12:00:32:48:b4:e1:92:a6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0565770E1E5C778DB06AD63B009F91D2D34746C1
Validity
Not Before: Sep 26 00:00:21 2026 GMT
Not After : Sep 27 02:18:21 2026 GMT
Subject: CN=35ABBD1A32D80846EA6BEEF363ADFE9679F77DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:50:20:9c:95:3c:4c:6a:52:9d:38:07:c0:
fa:30:b8:16:88:87:6e:a1:be:40:2c:a6:98:4f:52:
df:24:5f:f2:7f:9e:a7:dd:20:84:50:4a:7d:d4:57:
43:31:59:a8:ed:89:81:62:83:31:64:38:47:73:01:
22:07:8e:13:e4:a9:41:d8:77:a2:f5:65:7d:ca:f5:
b4:d6:31:8d:a4:63:72:98:7d:35:d1:62:c9:0b:56:
dd:34:66:18:80:bd:38:fd:5e:22:68:5a:f9:2b:ea:
83:5b:84:9d:3a:44:24:57:25:38:3a:5e:e4:19:e4:
2e:5c:84:37:85:63:a3:a8:bb:07:53:48:c8:b6:ef:
9e:39:ef:72:52:91:5e:b2:9b:5c:a1:4a:bc:bc:8b:
bd:ab:9f:a6:5e:1a:1b:4d:9b:07:22:b8:7a:31:4e:
be:bc:3f:96:c4:91:44:f5:a2:df:ea:ab:af:1a:8d:
67:77:9c:4f:d6:1f:b6:0e:e5:05:b9:66:f7:9a:67:
4d:67:14:bb:3e:d6:9b:2f:ff:73:7b:12:99:9e:16:
a0:d3:5d:df:a2:4d:07:9e:db:8c:b2:41:1a:a0:e1:
2f:74:05:83:8a:1a:ae:89:9c:18:7f:ec:66:e7:bf:
d3:79:65:56:a3:f5:b3:51:c1:f9:c4:d8:d2:d1:24:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:BD:1A:32:D8:08:46:EA:6B:EE:F3:63:AD:FE:96:79:F7:7D:A6
X509v3 Authority Key Identifier:
keyid:05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:89:29:72:96:9d:78:3f:26:41:c3:04:fa:d0:d0:1f:dc:
c9:de:22:cc:7f:4a:55:ef:c3:41:ad:8c:cd:d4:7a:24:68:cf:
1a:1b:30:31:4d:21:d6:7e:b0:e9:f3:57:50:8b:bf:3e:03:ab:
c1:92:d3:be:2c:fd:26:91:d0:60:1a:79:10:0d:08:6c:e4:a4:
bd:55:c2:fe:9b:c2:de:c0:6d:1f:77:89:61:5d:85:b1:8e:dd:
97:68:7b:dd:91:7d:41:8c:74:ab:e5:90:e8:e8:ff:b1:c0:32:
2c:a8:a8:d7:d8:a0:c2:e5:8e:d5:a0:40:51:c0:cc:69:f8:15:
6c:4f:96:e3:4b:f6:39:08:54:3c:e9:f7:7e:b1:76:65:85:f6:
49:fc:6e:cc:82:08:cc:25:b5:a0:f3:74:91:8c:0d:95:ec:c0:
93:5e:5d:73:50:c7:07:5b:53:85:6a:6c:44:36:c8:5c:34:d8:
5d:0c:da:ac:07:96:9a:68:2c:12:9a:95:99:26:e6:3a:f5:ac:
07:f3:ed:a9:41:63:15:d2:9f:7f:46:73:7e:1f:77:d8:f5:d9:
a1:00:a5:b6:4e:9c:56:c5:87:09:7a:80:50:09:0a:04:e9:b3:
02:7f:73:af:8e:f9:33:58:33:10:ca:e9:66:72:f2:91:e3:70:
28:13:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:00:18 2026 by rpki-client