
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft
File: E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft (raw, json)
Hash identifier: BCnnoR3FXJdQ2aFgSU/EAB0Dd1B8tW28VJyLiXKHwPY=
Subject key identifier: 9D:6A:3D:93:36:B3:FA:DA:B4:F5:E5:20:D5:EE:1D:B1:E3:67:01:97
Authority key identifier: E4:62:22:C6:A7:E7:CD:E9:21:08:B0:C0:DC:8B:DC:74:B2:B6:1F:C0
Certificate issuer: /CN=E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0
Certificate serial: 105F91D1E09615DE690455B3B4C4E4282117C7E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft
Manifest number: C0
Signing time: Thu 24 Sep 2026 00:31:19 +0000
Manifest this update: Thu 24 Sep 2026 00:26:19 +0000
Manifest next update: Fri 25 Sep 2026 03:22:19 +0000
Files and hashes: 1: E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.crl (hash: IHh7gvzkOcpUJhjwpMSmN2pQPMImS1VyTEhPsM/JR78=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.crl
rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 03:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5f:91:d1:e0:96:15:de:69:04:55:b3:b4:c4:e4:28:21:17:c7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0
Validity
Not Before: Sep 24 00:26:19 2026 GMT
Not After : Sep 25 03:22:19 2026 GMT
Subject: CN=9D6A3D9336B3FADAB4F5E520D5EE1DB1E3670197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:00:cf:47:8c:df:d6:b4:8c:75:8a:cf:dc:
9d:15:e6:5e:4f:c8:c0:f9:c4:49:12:84:63:00:f5:
91:6e:9d:9a:c8:61:9e:ee:be:d9:bf:7b:f2:35:f4:
a0:58:39:01:8c:3c:d8:f9:f0:a8:b3:ff:4a:f4:95:
3f:d7:0e:a8:7b:48:91:ba:f3:c6:1d:5c:7c:4e:85:
05:13:aa:b4:bb:c2:f0:c3:39:c7:ac:5f:2d:30:88:
fc:83:31:01:3d:d0:13:5c:7a:97:48:d6:5d:ed:f3:
32:f1:7a:4d:07:f5:9b:4b:c5:dc:96:43:0d:7b:07:
c7:ab:3c:44:f9:57:25:1c:84:ef:5d:58:cf:14:03:
63:d9:e2:32:65:a8:41:01:14:7e:c0:c8:61:fa:83:
99:33:f7:0f:cf:38:2c:19:13:17:97:cf:1c:33:26:
75:47:78:55:f0:7a:b4:c5:4c:91:83:11:8c:0c:03:
97:11:be:cd:d7:66:04:4e:dc:0d:a9:df:2e:fc:3e:
4e:1a:d0:8f:d0:71:5b:a2:0d:58:1a:57:55:ee:36:
af:96:1b:e9:88:bf:7b:c3:6b:0c:3a:79:1c:ab:d1:
fe:db:bc:f9:b6:98:62:e3:5e:43:99:e3:55:b5:be:
62:c7:be:c1:a7:64:30:87:52:03:be:de:17:97:b8:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:3D:93:36:B3:FA:DA:B4:F5:E5:20:D5:EE:1D:B1:E3:67:01:97
X509v3 Authority Key Identifier:
keyid:E4:62:22:C6:A7:E7:CD:E9:21:08:B0:C0:DC:8B:DC:74:B2:B6:1F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:37:a5:4d:69:82:23:7c:c7:d4:65:ee:fa:5a:ac:c1:cb:38:
d5:61:55:c4:73:10:bb:8b:93:b3:c7:3e:38:45:45:25:69:5e:
45:38:ea:44:37:57:2a:c1:27:5e:20:60:72:88:19:e8:3e:46:
1b:e0:78:e7:94:50:4b:8e:6e:58:c1:0f:6c:1d:d0:24:40:1c:
34:7a:5f:ab:de:8f:e7:b6:82:63:0b:22:e7:1d:c4:80:3f:c2:
43:88:06:fb:64:0f:6d:ca:f1:82:0f:19:6f:e5:00:f3:45:c3:
60:db:18:15:0d:80:9a:a1:c8:6e:9c:99:10:7f:70:f9:c4:00:
4b:1c:29:7b:3f:64:2b:53:02:58:be:c6:0d:9c:fa:83:32:81:
7d:61:30:50:11:d5:c0:08:03:29:27:cd:f6:b9:ae:b1:e6:c8:
15:50:52:f7:23:6a:55:73:e5:bb:3f:7e:99:01:48:99:af:6f:
2d:32:bf:b0:c9:43:c1:58:9a:25:7e:3f:89:0b:24:88:a5:61:
22:20:ab:5a:b7:35:c9:90:65:4a:f5:25:44:6e:08:2c:28:7b:
c4:4f:ac:0b:11:18:8b:b5:3f:b7:d2:17:22:57:35:87:e4:52:
06:12:42:2a:db:e3:14:53:b1:50:ee:fc:20:ca:fe:6f:a6:7d:
c2:c6:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:27:27 2026 by rpki-client