
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft
File: C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft (raw, json)
Hash identifier: VnG6BhZliHkAymdYycChMz9XQTGK0fm9vCscpMAJ8Bo=
Subject key identifier: F9:1E:11:64:D5:D5:19:2E:61:9B:C0:C3:D5:33:9A:46:3B:31:C6:35
Authority key identifier: C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E
Certificate issuer: /CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E
Certificate serial: 06B139739FB9D6FA6705858949B9A278968A0F7E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 08:56:52 +0000
Manifest this update: Thu 24 Sep 2026 08:51:52 +0000
Manifest next update: Fri 25 Sep 2026 10:59:52 +0000
Files and hashes: 1: C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl (hash: dB/M5FKnHikgEBTQVlG4UtnPjyESEtaCJrTGnjiPvQU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl
rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b1:39:73:9f:b9:d6:fa:67:05:85:89:49:b9:a2:78:96:8a:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C46500A42F10C2E1C804F2A720233ABA2A0C445E
Validity
Not Before: Sep 24 08:51:52 2026 GMT
Not After : Sep 25 10:59:52 2026 GMT
Subject: CN=F91E1164D5D5192E619BC0C3D5339A463B31C635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:d2:a4:04:4b:26:20:66:32:73:ca:57:86:
18:3f:86:3f:8d:bf:63:62:f7:04:73:98:5b:ce:e5:
00:cd:18:8a:cf:04:09:8e:e6:54:41:17:6c:0d:d0:
a9:2d:5f:04:45:d2:da:15:12:f7:e0:9f:9c:a9:ff:
55:ae:4a:7f:8a:86:80:46:aa:86:f7:3e:1a:5c:af:
54:bc:59:ce:54:5a:ba:48:3a:10:8c:1b:23:ef:b3:
5a:02:5b:47:34:e3:08:4a:f0:65:11:46:0c:f5:4f:
96:f4:ea:30:9e:f6:3d:40:e7:c0:36:4e:01:8b:77:
d8:0a:d9:e8:f4:c1:fe:75:85:94:05:37:28:65:2a:
96:fd:20:1f:3e:b4:5d:a2:86:2f:ea:4a:06:90:a1:
69:de:0d:8a:5a:f6:77:8f:87:a3:4b:2c:51:20:27:
55:a9:1d:9b:67:c8:65:51:f9:21:55:c6:3c:e1:ef:
a0:c6:44:1a:98:e5:5f:77:44:e6:12:92:df:2f:32:
0b:a2:70:7d:70:27:93:c7:33:1d:bf:6c:51:2e:c1:
1d:01:0d:02:2f:5d:f5:fe:5a:c0:fd:75:4d:f0:82:
43:01:10:5b:82:f3:de:eb:76:93:99:61:69:7a:4f:
f3:f9:0e:a1:dc:3c:af:0c:95:7b:40:04:ff:cd:53:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:11:64:D5:D5:19:2E:61:9B:C0:C3:D5:33:9A:46:3B:31:C6:35
X509v3 Authority Key Identifier:
keyid:C4:65:00:A4:2F:10:C2:E1:C8:04:F2:A7:20:23:3A:BA:2A:0C:44:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C46500A42F10C2E1C804F2A720233ABA2A0C445E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/C46500A42F10C2E1C804F2A720233ABA2A0C445E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:53:aa:59:15:6a:60:b4:5b:2c:92:a2:29:bb:76:b8:20:94:
ae:45:2e:8b:91:fa:01:28:c3:ed:5f:47:b1:19:ef:31:c6:a2:
ae:59:3b:c4:5a:2e:5f:06:5a:ec:e0:8f:27:2f:9e:60:96:bf:
a4:28:eb:7b:20:77:fc:05:53:14:fb:ff:7c:54:0a:56:e8:41:
04:62:97:76:8a:1d:cc:47:b1:8e:1e:11:8e:b0:6e:01:c2:c3:
ec:6b:3e:b7:3e:1f:a0:b3:80:63:3a:5e:ea:f1:b2:0c:33:8e:
93:c0:98:ea:22:a4:b5:74:08:62:79:8a:1c:b7:fc:a1:61:78:
46:07:1a:f9:52:1c:da:d3:b4:0b:c4:99:0c:86:15:48:bd:0e:
0e:46:d7:d0:5e:d1:b9:37:16:95:5a:2a:25:63:c4:5d:53:fe:
8b:5c:93:bc:de:55:b1:69:6e:1e:7a:40:35:47:b9:6b:8b:c6:
94:ef:20:73:57:19:06:26:f6:8b:7d:05:1e:eb:de:11:b9:ad:
bf:7a:27:2d:13:46:d8:41:4e:fa:6f:b6:d9:34:c1:7e:93:ea:
30:49:1a:c9:18:57:a7:63:11:f7:04:82:75:08:45:7c:37:1d:
8e:fd:29:1b:72:25:97:ff:38:32:8f:94:19:65:68:d0:2d:b0:
af:fb:9a:5a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBrE5c5+51vpnBYWJSbmieJaKD34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEy
QTBDNDQ1RTAeFw0yNjA5MjQwODUxNTJaFw0yNjA5MjUxMDU5NTJaMDMxMTAvBgNV
BAMTKEY5MUUxMTY0RDVENTE5MkU2MTlCQzBDM0Q1MzM5QTQ2M0IzMUM2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7tKkBEsmIGYyc8pXhhg/hj+N
v2Ni9wRzmFvO5QDNGIrPBAmO5lRBF2wN0KktXwRF0toVEvfgn5yp/1WuSn+KhoBG
qob3Phpcr1S8Wc5UWrpIOhCMGyPvs1oCW0c04whK8GURRgz1T5b06jCe9j1A58A2
TgGLd9gK2ej0wf51hZQFNyhlKpb9IB8+tF2ihi/qSgaQoWneDYpa9nePh6NLLFEg
J1WpHZtnyGVR+SFVxjzh76DGRBqY5V93ROYSkt8vMguicH1wJ5PHMx2/bFEuwR0B
DQIvXfX+WsD9dU3wgkMBEFuC897rdpOZYWl6T/P5DqHcPK8MlXtABP/NU7UdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+R4RZNXVGS5hm8DD1TOaRjsxxjUwHwYDVR0j
BBgwFoAUxGUApC8QwuHIBPKnICM6uioMRF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjE3MmVlZjktZWM2YS00NTU4LTgxODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQy
RjEwQzJFMUM4MDRGMkE3MjAyMzNBQkEyQTBDNDQ1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNDY1MDBBNDJGMTBDMkUxQzgwNEYyQTcyMDIzM0FCQTJBMEM0
NDVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx
ODEtYTExZmU2NWI4ZmY4LzAvQzQ2NTAwQTQyRjEwQzJFMUM4MDRGMkE3MjAyMzNB
QkEyQTBDNDQ1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADBTqlkVamC0WyySoim7drgglK5FLouR+gEo
w+1fR7EZ7zHGoq5ZO8RaLl8GWuzgjycvnmCWv6Qo63sgd/wFUxT7/3xUClboQQRi
l3aKHcxHsY4eEY6wbgHCw+xrPrc+H6CzgGM6XurxsgwzjpPAmOoipLV0CGJ5ihy3
/KFheEYHGvlSHNrTtAvEmQyGFUi9Dg5G19Be0bk3FpVaKiVjxF1T/otck7zeVbFp
bh56QDVHuWuLxpTvIHNXGQYm9ot9BR7r3hG5rb96Jy0TRthBTvpvttk0wX6T6jBJ
GskYV6djEfcEgnUIRXw3HY79KRtyJZf/ODKPlBllaNAtsK/7mlo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:37:27 2026 by rpki-client