
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft
File: 1236E394229BC623C890CC5AB178B4BFC96DCE66.mft (raw, json)
Hash identifier: UQsVg0BO50UR6uMRpYIlqCZNurt0EsBlN7lG2SH+n10=
Subject key identifier: 0E:A4:F2:58:E6:D2:19:D1:A8:DC:75:6E:D6:E2:F1:6D:93:DF:F6:B1
Authority key identifier: 12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66
Certificate issuer: /CN=1236E394229BC623C890CC5AB178B4BFC96DCE66
Certificate serial: 21B9301670BB7707C2F2B100E9AAC9D51E63A1E6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 06:01:48 +0000
Manifest this update: Fri 24 Jul 2026 05:56:48 +0000
Manifest next update: Sat 25 Jul 2026 08:39:48 +0000
Files and hashes: 1: 1236E394229BC623C890CC5AB178B4BFC96DCE66.crl (hash: WTDOyyfbdkW6FW24GraEgJSuiHXuzCVq8ku/nd2SPQ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl
rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b9:30:16:70:bb:77:07:c2:f2:b1:00:e9:aa:c9:d5:1e:63:a1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1236E394229BC623C890CC5AB178B4BFC96DCE66
Validity
Not Before: Jul 24 05:56:48 2026 GMT
Not After : Jul 25 08:39:48 2026 GMT
Subject: CN=0EA4F258E6D219D1A8DC756ED6E2F16D93DFF6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:43:a2:8c:8e:9a:0a:c9:68:9b:e5:4e:19:
ba:fd:23:4e:d6:c5:3e:fa:f1:63:49:65:5b:e8:fe:
f1:4f:f3:22:3d:7d:50:61:9a:9c:63:fa:eb:b9:ea:
f0:e5:65:ce:cc:b0:ea:29:7a:42:dc:95:5f:61:e1:
0f:95:d8:8d:06:53:c8:34:12:36:a5:db:85:0d:05:
8d:65:0f:81:b1:5f:f1:2e:7d:03:7f:98:b6:9f:52:
43:b5:54:57:39:a7:93:25:ad:91:ad:8c:c9:f3:fa:
63:90:65:7e:e7:e6:9b:dd:a6:bd:f9:b9:aa:39:f6:
aa:06:db:c7:a8:0c:ab:62:65:4f:f5:48:35:b3:cb:
0e:ed:cd:9f:21:61:2a:1f:93:f6:0d:03:0b:27:3c:
12:d0:71:04:a5:1a:26:64:a4:2f:ba:a5:ae:b4:a5:
0d:5c:97:48:28:89:83:70:27:4f:14:05:3e:54:04:
0a:32:0a:4a:5e:1b:3d:e7:de:2c:e3:2d:11:b3:d4:
69:1c:9e:27:c5:1b:b5:b6:26:65:77:0d:d0:0e:d8:
7a:89:c7:d0:b5:2e:2b:9b:c5:58:2a:dc:be:0d:d1:
93:40:51:d8:fe:aa:ed:ac:f0:44:23:3e:14:25:d6:
c0:04:b3:71:f7:20:af:6d:06:02:17:38:4a:ed:1d:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A4:F2:58:E6:D2:19:D1:A8:DC:75:6E:D6:E2:F1:6D:93:DF:F6:B1
X509v3 Authority Key Identifier:
keyid:12:36:E3:94:22:9B:C6:23:C8:90:CC:5A:B1:78:B4:BF:C9:6D:CE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1236E394229BC623C890CC5AB178B4BFC96DCE66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/1236E394229BC623C890CC5AB178B4BFC96DCE66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:c7:8d:b0:cd:85:f1:c6:b7:7c:1e:ba:c5:4f:bc:9e:fd:
35:65:04:1d:26:96:a8:9c:e6:81:dc:a0:b4:bc:b9:81:a2:c1:
ce:2e:2c:9b:ad:09:28:da:c6:a4:26:d5:d5:9b:c4:8a:d5:d9:
ba:e1:7d:7e:5f:df:46:be:42:04:06:09:c3:97:15:31:a4:59:
09:c3:7e:d6:04:41:ed:7a:1a:c1:96:27:e1:34:09:d8:26:6f:
18:ac:e0:0a:94:4a:b7:83:b1:f5:25:da:1d:77:0c:28:fb:c6:
56:08:f7:52:83:20:83:25:86:6e:68:a7:1f:03:d3:9d:6b:1b:
58:7a:f9:dc:45:95:cc:78:cb:ff:63:fd:c1:c7:32:8a:4c:7e:
ae:1a:78:5a:85:10:a2:d8:c6:1e:3f:37:24:e6:eb:c7:d1:15:
8d:69:94:3c:23:40:ed:95:e4:a9:3c:43:f5:4b:fc:00:d9:93:
d9:1f:7d:84:44:db:80:81:0a:28:6d:f1:a7:e1:27:fb:a5:97:
92:9f:ac:68:f7:5f:fa:60:8a:5d:b4:99:0c:2e:21:ac:a6:58:
a5:01:78:ae:d5:23:4f:55:54:9d:c5:e5:71:40:69:87:ba:b7:
01:50:a7:6d:6a:fa:d2:5f:fb:46:7a:22:9b:54:4a:06:bb:56:
b7:c2:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:43 2026 by rpki-client