
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.mft
File: F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.mft (raw, json)
Hash identifier: RhaLRlAD0tfN3vDqC7iJy3EjUa9P8PWTmA5ly4/XkUo=
Subject key identifier: 91:12:62:18:8F:EA:36:11:0C:42:8F:42:7A:23:B7:7D:DF:60:F9:F1
Authority key identifier: F1:5C:0F:33:38:FB:AC:D5:FA:30:AB:2D:08:FC:6D:D9:5C:BA:56:C1
Certificate issuer: /CN=F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1
Certificate serial: 57487EDA8B5C194116DED8AD2D788A5DD46A5520
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 14:28:56 +0000
Manifest this update: Wed 23 Sep 2026 14:23:56 +0000
Manifest next update: Thu 24 Sep 2026 16:37:56 +0000
Files and hashes: 1: F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.crl (hash: e+dyWQ8fX9OvQhkOT2JMBH80+MHN+aAm3do6XeV/3eA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.crl
rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 16:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:48:7e:da:8b:5c:19:41:16:de:d8:ad:2d:78:8a:5d:d4:6a:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1
Validity
Not Before: Sep 23 14:23:56 2026 GMT
Not After : Sep 24 16:37:56 2026 GMT
Subject: CN=911262188FEA36110C428F427A23B77DDF60F9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:05:72:33:a8:0e:47:4c:03:e4:c2:d2:d0:
e3:5b:1b:21:14:4f:60:43:8e:eb:1a:38:e5:2f:28:
91:3a:51:32:ef:0c:b9:5a:a2:86:23:c5:c4:73:bd:
8b:7a:06:1b:41:df:2a:8e:1d:6e:ce:79:ca:12:ae:
cf:e4:c2:21:38:51:26:1e:11:39:ec:f0:15:5e:ba:
a3:79:2c:4a:39:42:b1:35:ad:b8:fa:46:6a:b9:bd:
0b:86:30:c6:76:47:b4:ba:ea:4b:5e:51:81:05:db:
c0:33:12:f0:6c:2c:6a:9a:53:43:9e:71:cd:69:d6:
1a:58:eb:71:f2:6e:2b:9c:4e:75:3b:e3:56:ea:3f:
21:ce:2d:ca:67:27:0b:2e:f0:77:93:ff:07:82:96:
1f:98:66:3a:3f:2a:52:9e:20:f3:61:45:4e:45:0b:
f7:49:51:79:93:09:9a:fb:80:db:49:1e:4a:0a:e1:
bc:a4:f9:5a:e1:bd:06:fc:60:fe:91:67:0d:b9:58:
d9:9a:51:d1:0e:39:21:51:3d:74:ff:a8:58:85:93:
13:e0:ed:e8:3b:29:03:b4:52:cd:4e:7c:41:a5:20:
e0:7c:65:b9:b0:09:49:5a:7a:7b:16:d8:ed:6e:96:
4f:50:5e:0c:a9:cd:27:40:86:6b:12:7a:71:cb:c6:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:12:62:18:8F:EA:36:11:0C:42:8F:42:7A:23:B7:7D:DF:60:F9:F1
X509v3 Authority Key Identifier:
keyid:F1:5C:0F:33:38:FB:AC:D5:FA:30:AB:2D:08:FC:6D:D9:5C:BA:56:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/F15C0F3338FBACD5FA30AB2D08FC6DD95CBA56C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0d:34:d0:49:71:5d:c7:b7:96:38:9e:af:d9:5f:eb:22:74:
94:05:7f:a8:c4:a2:8b:08:c7:05:d8:a4:aa:2f:d5:8f:6f:87:
0b:c4:4a:1c:92:63:fe:03:10:47:5d:3b:4e:00:62:fd:57:7b:
1d:a1:ac:ca:47:1f:6d:61:ce:6d:f5:cb:85:51:0c:41:b5:85:
85:02:a3:60:cf:3c:00:82:c5:08:03:74:1b:d3:c4:3b:63:1b:
3c:6b:66:ad:9b:97:d3:60:80:e8:e6:66:d8:0a:b4:1d:93:1a:
c2:1b:a8:99:31:f3:37:e9:40:3e:00:a3:04:ae:20:fa:61:78:
e0:03:80:2b:1b:ae:35:d2:b7:57:c7:e0:e5:a1:81:49:aa:46:
9a:bf:d2:ea:bc:dd:09:df:d0:3d:f8:79:b9:1a:f4:91:9b:1c:
0e:fb:db:59:b0:30:0f:85:a3:9f:46:25:22:8e:30:2b:30:35:
25:39:db:55:df:24:27:6b:49:ac:d6:ff:3f:bb:6e:83:71:af:
58:1e:b2:cb:89:d8:d8:46:ac:4c:4d:e5:f1:e9:41:11:01:c0:
80:aa:0f:1f:5c:0e:7a:b6:e6:24:83:48:cb:06:5d:c2:75:6f:
f9:ad:6a:33:d2:da:f4:d3:6a:c7:77:f3:87:13:3c:4f:6c:d0:
f5:5f:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:06:35 2026 by rpki-client