
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
File: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft (raw, json)
Hash identifier: n9ngikx8fxi3JYilfReiZBYlL/fS4pVoF6DQ45ehsJk=
Subject key identifier: C2:9D:66:99:5E:49:42:58:08:F3:37:D3:2B:EF:40:61:CD:63:13:FF
Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
Certificate issuer: /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
Certificate serial: 6A2349384C5796C57555690CDB41C17DE1875C34
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
Manifest number: 89
Signing time: Wed 23 Sep 2026 16:35:28 +0000
Manifest this update: Wed 23 Sep 2026 16:30:28 +0000
Manifest next update: Thu 24 Sep 2026 19:25:28 +0000
Files and hashes: 1: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl (hash: PjY8nEwXtgDvJI2fMPHhgtoVby1ZnaOrU/TPAvzm2/E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:23:49:38:4c:57:96:c5:75:55:69:0c:db:41:c1:7d:e1:87:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
Validity
Not Before: Sep 23 16:30:28 2026 GMT
Not After : Sep 24 19:25:28 2026 GMT
Subject: CN=C29D66995E49425808F337D32BEF4061CD6313FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:16:65:e1:fd:82:48:da:9d:80:b5:48:11:
ec:be:6f:54:ef:43:62:d3:02:64:30:c4:b0:eb:09:
cd:81:0e:00:9e:64:22:3d:89:1a:18:af:f4:e5:53:
10:8b:9c:9e:74:29:5d:13:b4:02:e3:a6:ff:0f:45:
d9:13:02:8e:44:96:9f:7c:d8:01:c2:ff:f0:9a:bd:
05:95:b7:d2:bf:c3:f2:a0:36:a2:ec:78:ac:e1:b8:
2d:b8:f5:c6:f4:ba:32:d8:91:ff:f7:fb:70:45:cf:
50:e8:9c:a3:9d:dd:1d:ff:65:37:de:e5:18:7a:95:
28:9d:21:ea:7e:29:7f:c1:8b:37:d7:6b:8c:4d:b0:
09:44:48:15:7a:e3:49:f2:2a:73:b0:51:c3:ef:e2:
5a:da:73:f1:8d:6a:d9:cb:f9:42:c0:3f:b6:a9:6f:
d2:c2:98:1c:65:a7:49:a9:9a:fa:21:69:f8:ca:b7:
61:27:8a:7b:6a:0e:db:ae:91:34:f0:8b:d7:3d:48:
7c:5e:92:04:8f:18:13:b8:d3:1c:9a:63:e8:58:8a:
d2:a9:8c:28:45:21:56:6f:e8:62:4c:40:82:50:bb:
bc:d5:be:e7:51:a6:ca:c1:ff:e5:f1:9c:0a:34:b4:
ca:6d:40:1e:59:22:f3:9d:cd:2e:6b:4c:18:0d:56:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:66:99:5E:49:42:58:08:F3:37:D3:2B:EF:40:61:CD:63:13:FF
X509v3 Authority Key Identifier:
keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:57:63:39:89:68:56:9f:5f:e3:bb:e7:5e:fb:39:32:7c:65:
8f:71:4c:b2:6e:3f:9e:b6:fb:a7:40:5c:90:03:eb:bd:43:6e:
28:09:12:3f:f8:9a:b7:8e:6b:7f:7e:6c:95:a3:64:b8:46:fe:
8c:99:10:b9:a7:81:cc:48:bb:19:4b:d8:28:0e:43:61:ea:28:
2b:92:58:07:5b:97:b6:7c:b1:f2:c0:46:72:f4:9a:94:6f:f0:
4b:66:cf:1d:46:f3:5b:26:d4:36:b2:fd:10:cf:61:c6:92:8b:
a1:df:10:6c:a6:40:be:ee:ff:70:1e:5b:81:3f:1d:4a:2d:7a:
c3:83:23:7e:e7:4d:d0:13:4e:7c:ef:46:e9:b6:0d:55:d0:9e:
d8:f0:1c:b4:69:de:9a:2c:14:dd:d2:d3:10:91:21:e6:7b:1b:
6b:00:8a:3c:7e:d3:2d:25:d8:f8:7c:72:b7:7f:ab:34:de:4c:
1c:0f:79:93:53:dc:29:ef:06:62:f1:8f:f6:4e:fd:96:dd:09:
57:d2:17:bc:93:78:29:13:44:5c:d6:25:32:9e:fc:ba:81:68:
13:04:ee:1c:a8:a0:99:01:45:b8:c4:af:49:f4:9e:a7:ba:96:
f8:8f:2e:c1:ca:ed:d7:36:8b:ba:ef:63:42:dd:bd:dc:c4:fe:
6e:d5:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:39:54 2026 by rpki-client