
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
File: 700131DE51ECE4C881CAC783B29EDC61B1D04592.mft (raw, json)
Hash identifier: Wzqpn4Hq/k3PUNTaISd/jF2t/VxQ/fFsftIaeeBF5ak=
Subject key identifier: E5:AB:88:31:42:71:F5:83:6A:F4:06:BA:0C:08:31:B5:56:45:B0:23
Authority key identifier: 70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92
Certificate issuer: /CN=700131DE51ECE4C881CAC783B29EDC61B1D04592
Certificate serial: 127596157A92C0D13FF3631390FB94C81A575AC2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 12:25:03 +0000
Manifest this update: Sat 26 Sep 2026 12:20:03 +0000
Manifest next update: Sun 27 Sep 2026 12:55:03 +0000
Files and hashes: 1: 700131DE51ECE4C881CAC783B29EDC61B1D04592.crl (hash: cztd0pEAe1aBNu9JDLDHmTnq+uoDrhZH1aa4AUfMRH8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.crl
rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:75:96:15:7a:92:c0:d1:3f:f3:63:13:90:fb:94:c8:1a:57:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700131DE51ECE4C881CAC783B29EDC61B1D04592
Validity
Not Before: Sep 26 12:20:03 2026 GMT
Not After : Sep 27 12:55:03 2026 GMT
Subject: CN=E5AB88314271F5836AF406BA0C0831B55645B023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:36:c8:eb:25:4c:06:8f:ae:40:24:92:ef:
13:d0:73:a1:bc:16:34:01:bc:61:92:b6:2c:2d:78:
0d:06:f9:17:2c:84:5d:a7:1d:5d:77:6b:82:99:ae:
a6:ba:b9:f6:13:e3:ab:7e:19:f7:94:f6:5a:30:11:
47:42:13:ea:7e:d2:f9:86:10:cb:a9:4d:c2:79:45:
da:ef:c1:e0:8f:64:4b:39:cf:0b:da:66:f3:e7:31:
7d:39:ae:09:ba:a2:4d:52:d3:0f:2f:fb:9d:31:7d:
16:5d:12:43:a4:a9:70:14:c1:0e:b4:36:2c:35:22:
e1:c0:65:6e:6b:d9:b8:4e:fd:66:48:0d:fd:c5:d2:
49:2d:01:ba:ff:52:3a:3e:07:11:66:cb:11:8b:79:
93:44:fd:d2:44:75:c0:3d:72:21:14:68:12:47:35:
10:86:32:35:f0:7b:6a:8b:6e:13:fe:e4:f5:d6:22:
7b:97:09:b4:e0:bb:00:c1:96:ae:06:23:57:f4:6d:
7d:00:4e:a3:b5:2c:ef:10:cb:94:b1:72:63:2e:1f:
bb:a5:6b:3b:bb:e0:d2:aa:b7:cd:c5:9b:f1:1a:6e:
33:12:b2:42:90:56:d8:7c:93:28:ce:e2:70:af:60:
f0:74:12:4b:93:42:1f:d5:6c:b1:d3:36:38:90:7a:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:88:31:42:71:F5:83:6A:F4:06:BA:0C:08:31:B5:56:45:B0:23
X509v3 Authority Key Identifier:
keyid:70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1b:3c:9a:e2:bb:11:2d:c9:79:05:d1:52:d7:cd:0e:c3:4f:
df:33:81:17:fa:66:45:cb:96:6b:d4:49:b2:e9:fa:db:0c:7b:
d8:78:15:e8:36:b1:c8:08:0c:8e:de:3f:c5:c6:0c:eb:0c:8f:
7d:46:1d:89:ee:b2:e8:5d:a6:7a:22:e9:d8:78:85:2a:b0:13:
62:35:f6:45:19:fc:39:5d:5a:d4:d4:c8:7f:f1:45:76:62:f2:
7d:45:c8:47:f9:31:6a:d1:c1:ee:8c:88:4f:03:03:59:36:f9:
aa:54:d4:b1:5e:db:78:f6:00:b8:33:cf:f9:77:84:88:91:ea:
29:4a:90:d1:64:ae:61:66:c1:28:d6:49:5e:df:64:ae:b3:6b:
77:0b:8a:aa:5b:d5:a5:0f:74:13:ca:db:4b:27:9f:e6:aa:ae:
4c:9e:bb:46:b5:94:8a:d8:2f:90:15:d5:dd:b4:ee:a9:cb:d8:
d0:c2:f1:99:3b:93:9e:3f:1b:cd:dd:2a:62:c4:66:0a:05:85:
06:1e:97:9d:6e:a3:47:b2:90:70:30:f3:4c:0d:26:1b:9f:86:
47:de:f1:45:64:da:63:a7:7a:f9:09:25:7e:bd:bc:07:67:45:
9f:8a:12:e4:4d:21:d6:56:93:32:72:f4:28:50:e5:4b:d8:ae:
2f:99:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:45 2026 by rpki-client