
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
File: 405E6B7463BC0531CCD985CD4D468E60B5078B16.mft (raw, json)
Hash identifier: 4A0NTSIz7GCgbWoVysdA5lduT+0jUd+gSpUNYCTjRCs=
Subject key identifier: 61:E4:FF:04:8B:16:05:FF:9D:B3:97:4C:F6:83:55:C4:A7:FA:89:CE
Authority key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16
Certificate issuer: /CN=405E6B7463BC0531CCD985CD4D468E60B5078B16
Certificate serial: 06777D1987338BB34D128BD281DB874980BDCC15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 21:58:14 +0000
Manifest this update: Wed 23 Sep 2026 21:53:14 +0000
Manifest next update: Thu 24 Sep 2026 23:04:14 +0000
Files and hashes: 1: 405E6B7463BC0531CCD985CD4D468E60B5078B16.crl (hash: TXbb0Oy0FT5hUBOo2X8SzNDyUDDDz8iBWo6dUjKbzZ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl
rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:77:7d:19:87:33:8b:b3:4d:12:8b:d2:81:db:87:49:80:bd:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16
Validity
Not Before: Sep 23 21:53:14 2026 GMT
Not After : Sep 24 23:04:14 2026 GMT
Subject: CN=61E4FF048B1605FF9DB3974CF68355C4A7FA89CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:82:61:64:6e:01:1b:76:b4:4d:de:ad:3d:
df:dc:73:44:ad:68:3d:0a:7e:06:15:c3:9f:b3:8d:
2f:90:f6:f6:46:54:5b:bf:bb:90:10:fd:70:8c:76:
7c:d9:e3:a8:3c:b9:3d:38:22:f3:bf:f1:43:ba:8b:
f4:31:9a:74:8e:8d:a3:9d:0a:d5:ee:34:91:0f:62:
46:36:6c:89:e2:8e:c2:81:11:39:d4:23:05:1d:67:
ba:63:cd:61:c6:11:d9:3c:d2:08:4a:67:ca:c8:ad:
44:9e:d2:7b:9e:f5:ea:16:e7:50:35:07:11:e7:35:
69:f1:79:b2:97:3f:4b:1c:56:c2:25:8f:60:77:48:
24:83:08:5a:eb:0b:05:d5:ff:a6:61:e5:92:cd:43:
9c:ab:69:56:c3:47:df:67:ec:2d:c9:86:9d:a8:9f:
db:8a:af:b6:09:1b:70:a5:f1:0d:ab:c9:dd:a9:06:
76:e3:8f:97:d4:34:96:dc:0a:35:17:2e:0e:4d:d2:
a6:e1:37:a8:b4:59:7e:ff:18:b1:db:f9:51:22:fc:
7d:98:32:c4:81:21:78:a7:54:df:89:99:3c:68:36:
c0:35:ee:02:56:97:12:44:ec:f5:3f:06:26:66:8e:
63:91:d2:af:b7:69:48:a4:71:d2:dd:4e:da:6b:b2:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E4:FF:04:8B:16:05:FF:9D:B3:97:4C:F6:83:55:C4:A7:FA:89:CE
X509v3 Authority Key Identifier:
keyid:40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:07:d5:d2:d7:b6:50:29:49:30:06:ce:d7:c2:15:d4:0c:30:
d1:e6:2a:be:4c:a3:87:54:65:8d:fb:9a:d1:0d:78:7f:e5:2b:
31:54:90:de:ba:b0:d1:92:c6:ab:d9:40:f7:53:b8:7d:7a:76:
b8:75:31:8e:80:bf:ff:80:c6:5e:2e:9d:0d:0c:8c:f5:c6:38:
02:bf:53:fb:ff:96:33:c1:3e:3f:fa:c4:ca:cc:c0:98:1c:71:
08:03:fe:63:6e:40:12:f5:ed:5a:b3:5e:d4:cc:7b:94:90:25:
7e:60:5d:b4:5a:87:7e:ad:c7:f2:32:1e:fc:54:5f:36:25:cf:
63:dd:a2:63:f5:6d:b2:a9:ba:c9:87:08:e7:8b:10:5f:37:16:
4c:90:c9:f2:cb:9b:49:cb:0b:ae:5a:ea:63:50:84:35:ef:9b:
55:3b:6a:66:bd:9b:d2:0b:1a:34:7a:cf:ac:a8:98:a8:e8:ab:
fc:32:16:b0:15:a7:e7:80:c4:3b:19:a0:01:a6:07:6d:42:0a:
c1:f9:b6:0b:5f:48:d5:9a:ee:ed:fd:1c:f4:4e:da:e0:55:14:
50:99:c3:6c:58:48:12:79:29:19:b5:f5:aa:a8:9f:52:3c:30:
a8:64:54:7d:d0:87:6d:87:0f:5f:5f:d5:79:cb:8d:c4:41:cd:
58:e5:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:43:39 2026 by rpki-client