
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft
File: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft (raw, json)
Hash identifier: PteNSXk/i7ZWu/xxU5Rjmwjgq3B7KwwIZ8qZth22Gyk=
Subject key identifier: D4:6A:0C:9F:14:95:73:63:0E:FE:45:58:39:23:36:1D:0B:7F:88:65
Authority key identifier: E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88
Certificate issuer: /CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788
Certificate serial: 0E252AECF40D19046B8554722780016283DBB57B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft
Manifest number: C5
Signing time: Sun 27 Sep 2026 02:32:16 +0000
Manifest this update: Sun 27 Sep 2026 02:27:16 +0000
Manifest next update: Mon 28 Sep 2026 06:01:16 +0000
Files and hashes: 1: E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl (hash: 8a2/blS4ZZM+S7SxzUZxv/fuXacot7qHNvaaFh/Xgys=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl
rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:25:2a:ec:f4:0d:19:04:6b:85:54:72:27:80:01:62:83:db:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788
Validity
Not Before: Sep 27 02:27:16 2026 GMT
Not After : Sep 28 06:01:16 2026 GMT
Subject: CN=D46A0C9F149573630EFE45583923361D0B7F8865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:58:dd:cd:11:27:a8:c4:e1:df:ab:df:7d:
78:97:33:b5:85:91:07:19:03:15:51:dd:3d:f5:36:
5a:ad:9e:41:28:4d:a5:64:3d:86:f8:62:bf:61:95:
6a:a2:36:43:f3:5b:89:91:a2:c7:3a:f0:7e:9c:a7:
f7:e9:0b:f1:db:1b:08:95:20:0c:87:82:cb:4d:ff:
e4:1a:7a:0e:ab:59:7c:76:8c:7f:ae:11:84:3a:dd:
95:92:11:75:dd:51:2f:29:c8:47:b5:14:a6:da:f5:
fb:96:27:c3:ba:d9:01:14:9d:41:a6:8e:c1:90:96:
79:b4:aa:96:7f:2a:82:4c:e8:6b:27:48:27:aa:86:
a1:54:fa:0e:02:fb:7a:8f:24:10:44:06:9f:27:91:
e9:4e:17:8f:7e:22:bf:8e:59:bc:a9:a7:d9:42:82:
ac:2c:84:f2:6b:69:7a:5d:8d:51:d7:10:53:3b:57:
7c:09:9b:56:c9:7d:ac:b1:a7:d6:72:5d:dc:df:db:
0d:f5:5b:bb:aa:9a:6c:a9:d9:25:fc:13:06:65:44:
6e:5b:4c:1b:16:da:e1:6a:4b:1d:46:11:d6:80:db:
e3:df:0a:e2:a8:fe:0f:90:99:5a:86:f8:b9:0e:15:
d6:8c:f0:2d:69:ee:7a:62:56:f1:39:0d:06:7c:da:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:0C:9F:14:95:73:63:0E:FE:45:58:39:23:36:1D:0B:7F:88:65
X509v3 Authority Key Identifier:
keyid:E0:63:3F:E9:AA:4E:1B:B8:C1:4C:B8:76:4B:6A:FA:38:FD:0C:A7:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/E0633FE9AA4E1BB8C14CB8764B6AFA38FD0CA788.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:22:5e:19:e1:2f:f5:ee:a4:27:26:9e:29:0a:a5:ed:86:09:
99:63:f4:16:98:75:95:1d:f6:74:ac:bb:36:fd:6b:97:8f:a5:
13:90:d8:fc:ab:33:6a:de:dd:b8:bc:b6:a3:e3:b8:02:b1:5e:
2d:21:5c:ed:58:91:85:de:96:cd:e1:67:d5:43:9c:ff:f7:e3:
71:5f:4b:8c:97:c3:bb:d2:9f:04:85:cc:fe:78:35:bc:1c:81:
bb:2c:8b:df:a1:3d:eb:ee:cc:d6:0d:45:0d:e6:7c:5a:98:f2:
0d:fe:fc:48:c2:84:51:86:0f:e5:33:8e:1a:d9:13:d3:2d:9e:
35:51:84:b1:4f:db:c9:87:10:09:1b:d4:a3:1f:46:84:96:be:
c5:a8:92:7a:29:f9:21:08:cf:b4:65:0a:a6:fe:95:24:49:e5:
91:3f:55:d8:e0:3f:bb:cc:b5:7a:bc:8d:8f:75:06:c6:71:fe:
26:eb:15:b5:64:d2:92:d6:53:55:05:8e:4c:2f:1d:c8:56:7c:
1e:e6:12:61:10:af:a8:4f:47:c9:cf:dc:b9:c4:d4:56:62:61:
e0:6b:27:90:e3:0d:87:f6:7a:39:ff:79:fc:9f:b8:f9:e6:d9:
a1:f3:ea:15:4c:2e:43:df:c1:79:0a:96:d5:e8:cb:b0:a4:ad:
21:fd:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:00:46 2026 by rpki-client