
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
File: 976FB6C4EC175847196F26D9D507157A16E77592.mft (raw, json)
Hash identifier: XEqMKHRVu7dhOuZONsNpI4NMjLpStzT1iMm3UEIj7ck=
Subject key identifier: 9F:FD:FA:80:D0:91:11:D2:C7:38:4F:49:F6:66:AF:A3:78:36:21:70
Authority key identifier: 97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92
Certificate issuer: /CN=976FB6C4EC175847196F26D9D507157A16E77592
Certificate serial: 2AD3C5D1581A738B5406CDA29E2D07A10C485ABB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 18:03:01 +0000
Manifest this update: Tue 12 May 2026 17:58:01 +0000
Manifest next update: Wed 13 May 2026 18:56:01 +0000
Files and hashes: 1: 976FB6C4EC175847196F26D9D507157A16E77592.crl (hash: uTy5XZF/bEmgfF8sqCLo0yIlE/LHutVg5rP6jlb17Gs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl
rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d3:c5:d1:58:1a:73:8b:54:06:cd:a2:9e:2d:07:a1:0c:48:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976FB6C4EC175847196F26D9D507157A16E77592
Validity
Not Before: May 12 17:58:01 2026 GMT
Not After : May 13 18:56:01 2026 GMT
Subject: CN=9FFDFA80D09111D2C7384F49F666AFA378362170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:31:aa:c8:70:a0:3c:8c:5c:13:3b:5e:d3:
7e:fe:11:44:a3:8a:33:a0:a7:60:d5:13:a0:88:83:
b0:1e:d1:7c:a4:81:5e:26:95:ab:09:01:04:c5:21:
2e:0c:8b:c7:97:45:8f:cf:0a:f0:43:a7:53:80:92:
a1:74:c6:ed:44:2f:e4:ec:e7:01:4f:52:1a:94:49:
56:73:fd:15:4b:04:87:25:ab:8e:f9:c0:cf:de:8a:
17:f0:69:d6:f8:76:51:3a:fe:82:b7:dc:07:53:b3:
98:22:f5:7d:65:98:f4:54:91:0c:15:f1:8c:5a:b3:
f7:02:0b:f1:21:74:55:b1:cc:19:97:13:e0:6d:74:
79:2f:e1:f0:02:e2:dd:98:f6:bc:f9:27:30:3c:dc:
cf:b1:bc:68:83:ef:fb:2a:b2:b8:1a:94:28:ff:a1:
15:31:f8:09:ef:b6:5c:34:18:68:9e:03:6a:09:42:
93:f3:1a:13:25:8c:63:48:43:28:c9:a3:3d:75:af:
07:53:8a:d5:ac:65:83:9e:85:f6:2c:41:f9:b8:11:
d5:13:ba:af:9b:66:f3:d4:ba:95:eb:e8:6f:42:6a:
05:9f:93:30:2e:24:a8:e3:b1:4c:31:69:0d:68:9d:
e4:f3:d0:3d:2d:39:b3:56:a2:9c:8b:87:55:34:5b:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:FA:80:D0:91:11:D2:C7:38:4F:49:F6:66:AF:A3:78:36:21:70
X509v3 Authority Key Identifier:
keyid:97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1f:98:d9:21:be:6e:db:22:a1:69:7f:37:5f:8c:f2:9f:56:
9e:75:2d:bd:87:8a:44:24:bd:09:3c:2b:ab:3d:7f:c0:05:86:
41:00:0f:fb:c9:7c:bb:7b:28:51:3f:b2:3e:d5:d6:70:c3:d5:
44:da:b4:99:be:6c:f4:86:1f:0c:9c:53:0c:bb:a3:36:9a:a0:
8a:02:93:46:85:73:d0:8a:3f:94:65:d6:32:d9:83:f1:97:90:
bb:a8:d5:46:d9:69:5a:ac:ae:12:b7:df:89:d2:cd:bb:ad:75:
31:01:a0:03:7d:52:b4:b5:7d:49:23:96:05:91:b3:91:04:b4:
08:52:a0:3f:78:96:2a:0b:39:3c:f4:72:1b:6d:50:3a:b2:29:
f1:f2:06:ac:14:75:7e:2d:31:78:ee:c1:25:40:f3:60:29:5d:
d3:74:76:ae:58:fb:2f:b8:0b:15:15:ae:09:05:9b:22:7b:ae:
2a:21:8b:be:64:5a:66:46:bb:16:34:3c:b6:da:75:be:40:6d:
a8:5f:15:1f:ca:02:24:b2:6b:2e:7e:03:b3:fb:84:57:c4:5f:
2d:8b:cc:84:97:59:0b:67:55:c1:bd:b3:19:61:70:08:c7:94:
c9:cd:b7:3d:c5:a7:94:e5:59:78:63:b8:aa:43:bf:b0:39:91:
b3:4d:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:44 2026 by rpki-client