
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json)
Hash identifier: 7tYp7iTn9BLePau47akTyW9dpi0ywR6IySNmHtM/xEM=
Subject key identifier: 90:37:28:39:D9:0E:79:A9:49:F9:81:48:6D:88:7D:C8:AA:AA:65:E7
Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Certificate serial: 786E3BFE95EC614B02AFB890CE2322909E3A2568
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 06:59:43 +0000
Manifest this update: Wed 23 Sep 2026 06:54:43 +0000
Manifest next update: Thu 24 Sep 2026 09:23:43 +0000
Files and hashes: 1: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: hnzujKVRYE//MolOcdrudPZvEwLv3F53LRvcXSx27JU=)
2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=)
3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=)
4: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6e:3b:fe:95:ec:61:4b:02:af:b8:90:ce:23:22:90:9e:3a:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Validity
Not Before: Sep 23 06:54:43 2026 GMT
Not After : Sep 24 09:23:43 2026 GMT
Subject: CN=90372839D90E79A949F981486D887DC8AAAA65E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:e2:6d:ba:5c:af:f5:c5:e3:cf:bf:e6:54:
c9:8e:45:64:5c:1f:60:65:2c:d5:06:32:cc:49:3e:
a5:c3:bb:c6:5d:94:c9:d4:ad:1d:e3:be:87:f5:f2:
43:fd:62:f9:72:53:9e:c6:15:ae:7c:11:93:66:d8:
d0:72:e9:01:87:cb:a4:87:b0:8f:f6:12:56:e2:30:
9c:cf:cc:b0:52:9c:58:9c:70:cf:84:98:b0:6f:45:
f3:b2:64:13:5e:51:c9:96:04:f0:e5:91:ea:72:f6:
ab:6f:85:06:b6:03:5f:0a:bf:ba:f5:8b:7e:23:87:
31:fd:fb:a0:12:b2:c4:8f:22:00:b0:5f:1a:82:99:
32:32:43:bf:af:49:27:8e:da:16:73:4b:18:47:0a:
57:c8:2b:bd:94:c5:47:c5:f4:5a:a4:92:9e:09:e9:
c4:48:25:d1:fc:da:d0:55:d4:1c:40:13:46:73:b9:
bc:96:f8:00:b3:3d:14:4c:f8:01:0e:3a:5a:75:b4:
cf:ac:10:66:ad:fb:02:b4:32:c6:ae:1f:7e:fb:0d:
5d:87:98:7f:22:cb:27:97:65:5e:bc:65:3d:87:86:
57:0f:f5:fe:96:8e:99:93:10:72:54:37:6e:28:1c:
f3:a9:4b:3c:0c:0f:d1:a4:7a:3e:77:06:a4:fe:10:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:28:39:D9:0E:79:A9:49:F9:81:48:6D:88:7D:C8:AA:AA:65:E7
X509v3 Authority Key Identifier:
keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:17:6c:d7:71:7f:f8:51:2c:d9:58:05:43:57:f2:91:f5:fd:
93:af:78:71:07:77:bd:c2:7f:a3:a1:22:bd:35:e0:09:6d:c6:
fd:94:6b:4f:db:f2:05:24:f3:df:3b:5a:58:71:be:f1:81:06:
70:e4:42:0a:5f:13:cd:bc:4b:e0:d1:69:17:a3:72:de:d6:88:
42:40:04:db:21:b8:84:1e:02:5f:b2:dd:1d:93:fd:21:8a:8f:
a5:99:37:98:64:ad:08:db:43:9a:aa:55:57:d5:a8:84:1e:a2:
69:d2:08:40:0e:2d:0a:ea:56:d3:b5:8b:fb:87:49:dc:51:43:
f2:d7:23:e7:44:eb:96:17:6c:3a:88:aa:c3:7c:33:00:2d:78:
12:6d:68:8d:ed:2f:7d:24:ce:9b:65:28:3b:ec:47:4e:58:58:
5b:08:68:ad:f6:f7:cd:a9:f0:0f:76:66:80:40:75:77:89:17:
0c:38:07:fa:97:34:e9:74:7b:4a:c6:84:a8:2b:20:d9:61:47:
3f:7e:21:ef:8a:85:61:7f:00:2e:5e:9f:68:b5:aa:ce:6e:d0:
3a:e1:43:d8:8d:98:78:c1:06:ba:72:e7:09:51:5c:31:db:fe:
8a:aa:bc:b4:58:44:6f:a2:8b:18:99:3f:de:bc:e5:63:ec:6b:
bc:10:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:21 2026 by rpki-client