
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
File: ED0555AA515B40985A93B902D748993DD2FE4B8F.mft (raw, json)
Hash identifier: 3wugFR8N+wxCk4YGo0JZgGtThpyd3PEgElZGnciMgCk=
Subject key identifier: E5:21:66:7A:E0:C7:46:A5:4A:D8:16:26:41:7F:F5:C2:6D:7D:C7:37
Authority key identifier: ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F
Certificate issuer: /CN=ED0555AA515B40985A93B902D748993DD2FE4B8F
Certificate serial: 1EDE83AF7A9DCE7B0AA21D94BB1BCAC0503A487C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 02:38:57 +0000
Manifest this update: Thu 24 Sep 2026 02:33:57 +0000
Manifest next update: Fri 25 Sep 2026 03:10:57 +0000
Files and hashes: 1: ED0555AA515B40985A93B902D748993DD2FE4B8F.crl (hash: gkbrJ4bhnnlTNt3UY0F1Bqp4DslN39FydEoAzsyh1Wo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl
rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 03:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:de:83:af:7a:9d:ce:7b:0a:a2:1d:94:bb:1b:ca:c0:50:3a:48:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0555AA515B40985A93B902D748993DD2FE4B8F
Validity
Not Before: Sep 24 02:33:57 2026 GMT
Not After : Sep 25 03:10:57 2026 GMT
Subject: CN=E521667AE0C746A54AD81626417FF5C26D7DC737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:c4:6f:79:74:83:fb:2b:48:58:da:12:5e:
c8:f9:fc:f1:80:8b:51:28:a6:63:39:2d:a0:99:fa:
9a:88:6b:b3:f8:9b:4d:ca:f9:d3:55:09:a7:41:57:
f5:dc:9f:3f:12:dd:84:9f:22:ea:2b:fa:f8:42:84:
f5:d7:d4:3f:5b:fb:70:58:0c:32:78:b3:5e:7a:0f:
73:b6:a1:f5:56:6e:14:da:0a:03:11:f5:2a:9c:ef:
02:6f:c0:c5:c7:7f:e3:bc:45:9f:a4:dc:7d:6e:d8:
53:6c:f2:60:27:37:4e:d6:bb:10:17:0c:15:92:94:
1c:b5:6e:c3:02:0e:83:96:4f:e8:86:79:b1:5e:71:
df:0b:66:19:32:5f:dc:6f:f8:df:cc:34:39:82:d2:
dc:af:81:9e:f8:ad:50:58:ec:d2:63:4d:12:d9:9f:
6b:a3:07:e1:28:aa:26:12:08:e1:e8:9a:39:32:c8:
bf:93:5a:61:43:8b:6a:a8:f1:52:72:68:c5:52:a7:
76:47:9b:71:5a:2d:05:85:06:3d:13:0e:7b:6c:5b:
73:c5:3b:0d:d8:54:fb:37:08:92:1a:56:0a:9c:55:
50:6f:f3:32:ee:0d:81:c3:04:61:45:1e:a4:22:3e:
ed:80:2e:d7:a7:23:1c:3c:62:1c:f5:a4:80:b1:83:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:66:7A:E0:C7:46:A5:4A:D8:16:26:41:7F:F5:C2:6D:7D:C7:37
X509v3 Authority Key Identifier:
keyid:ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:38:6a:2a:f1:05:09:ba:6c:60:b7:96:49:7d:b6:d4:79:73:
c8:11:6a:fd:77:3e:26:ec:62:dd:7e:00:13:92:f6:11:3b:f2:
60:12:c3:d6:0f:50:b4:26:2c:3c:84:1a:e8:56:56:c5:5f:49:
84:71:4d:83:55:9a:08:4e:51:dc:cd:a9:c9:2f:70:d5:34:21:
50:79:89:cb:2c:1d:55:60:93:9c:0b:67:8f:78:c9:3b:75:41:
06:5e:69:cd:50:0d:7d:1a:6c:cd:05:38:df:7b:a0:fb:53:94:
40:9d:39:38:7e:17:a5:8b:b8:5e:58:bf:59:ee:79:06:59:ee:
54:68:ce:49:67:30:12:15:f8:3e:09:8a:ed:f5:09:90:0c:81:
52:4e:c9:14:b4:c1:07:fb:f2:39:7b:3b:87:03:c5:5d:67:47:
c0:c8:31:f6:c7:f9:70:3f:8f:f4:31:20:4c:b5:ee:62:f5:63:
7d:12:e1:76:d8:b2:cf:d3:9d:19:fa:66:47:b7:b6:0a:5e:d9:
f0:b5:b2:1d:5f:f3:ff:7d:97:14:16:1b:49:75:14:05:9f:1f:
8e:e3:0a:c3:91:8f:67:0e:29:0b:c3:5f:5d:72:bd:05:8d:f1:
82:eb:2d:b5:fd:73:e1:17:90:5a:b5:dd:2e:f7:e9:c6:fc:52:
10:11:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:46:07 2026 by rpki-client