
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
File: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft (raw, json)
Hash identifier: JZj65Hmj9+xWSuyiI4UmtwN/pZwuLFLGbzZGIWFPAmM=
Subject key identifier: 2C:5E:45:5B:0E:9B:AD:54:65:10:84:DC:B4:1B:49:EB:B9:7D:B4:A6
Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Certificate serial: 48812ACCCB14DD8B67B2CB2A14223201F9AF3E7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
Manifest number: C6
Signing time: Wed 23 Sep 2026 21:12:17 +0000
Manifest this update: Wed 23 Sep 2026 21:07:17 +0000
Manifest next update: Thu 24 Sep 2026 22:45:17 +0000
Files and hashes: 1: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl (hash: S4csKPTmFZg90lMVeD2+AOjyvf4RKB+/drztIqCHhMA=)
2: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 22:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:81:2a:cc:cb:14:dd:8b:67:b2:cb:2a:14:22:32:01:f9:af:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Validity
Not Before: Sep 23 21:07:17 2026 GMT
Not After : Sep 24 22:45:17 2026 GMT
Subject: CN=2C5E455B0E9BAD54651084DCB41B49EBB97DB4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:a0:5b:5e:c4:94:4d:e8:74:45:ff:f6:d4:
b9:a5:07:e1:ea:3c:d6:e5:67:92:91:10:74:e1:17:
c4:1f:ae:72:0c:6f:f3:84:28:24:b5:a8:80:5a:84:
4e:51:bf:32:c7:2e:cb:57:63:a9:04:1c:3b:4d:a9:
d9:0c:56:36:cf:b3:52:35:53:33:c5:e3:cd:29:32:
8e:30:91:ce:fd:30:e0:b3:75:8b:ec:ad:f2:90:7b:
6a:8c:8a:29:eb:fc:9b:0c:aa:71:12:ac:e7:3c:04:
a4:25:f2:13:ad:80:02:cc:9a:b1:11:18:d9:d3:a3:
c3:33:60:d0:5f:8f:8d:48:5f:1e:26:26:9c:84:6c:
ca:17:8e:f9:a0:25:55:bf:15:52:04:2a:59:43:8b:
f9:f4:b8:d2:9d:99:fe:f3:de:2a:a2:f5:a8:41:0a:
8d:09:8d:40:6d:ab:4b:1f:5e:7f:24:79:39:c9:e3:
69:c2:19:f1:c5:8e:33:32:b7:af:01:54:d9:85:6c:
74:35:c7:4c:6c:4a:e1:f0:0d:1f:55:c4:be:0f:ca:
0c:f3:2f:a0:7c:39:31:a8:ef:f4:e2:d4:fb:95:2a:
90:ba:18:f5:52:6b:d6:7e:e3:15:dd:eb:c5:34:6b:
48:2b:d5:63:f8:6d:f1:cb:6c:06:14:c7:07:50:c0:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:45:5B:0E:9B:AD:54:65:10:84:DC:B4:1B:49:EB:B9:7D:B4:A6
X509v3 Authority Key Identifier:
keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b2:1a:11:8e:f1:b3:43:86:20:fb:bf:11:c1:eb:ef:20:33:
a6:58:9a:97:3d:e1:23:07:9b:99:fb:ed:d3:b4:6a:18:93:9d:
4d:a0:52:fa:af:6c:5f:70:ad:bd:5d:f0:4f:39:06:ca:9f:48:
52:c6:0c:ab:db:e2:d4:73:45:d9:58:3b:ac:e9:d9:12:6c:84:
4d:e4:62:0b:cf:af:96:76:d7:a5:35:bf:5d:76:34:f9:70:2d:
96:79:4d:14:7a:fc:2c:16:1f:38:f3:f6:f4:5c:20:7e:62:8e:
5c:b4:98:0d:3d:9b:e9:e0:01:ae:2d:b3:e2:92:5d:e7:69:d2:
c5:86:fa:70:ea:03:dd:7e:7b:f2:16:20:d2:ac:79:6e:05:03:
88:97:19:e9:5a:3e:8e:52:26:ec:c2:c8:66:d2:12:e9:6d:11:
e9:44:1d:f5:50:85:4a:65:f1:3f:2a:c9:0b:99:e9:84:8a:82:
a2:db:59:08:af:e5:39:b0:49:23:db:79:b9:f9:54:7a:5a:d4:
26:5b:34:90:5d:b4:45:da:ff:ec:e6:b2:3c:41:d7:c3:25:ab:
f2:bd:51:02:7f:2a:98:83:a9:95:f8:17:bf:2c:16:ad:ac:d0:
51:6b:df:66:8f:29:5b:c2:d8:f1:9f:66:5c:88:cb:c3:c3:93:
40:69:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:16 2026 by rpki-client