
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
File: 976FB6C4EC175847196F26D9D507157A16E77592.mft (raw, json)
Hash identifier: HfYTNCjiuIrJc5YVYlK60m7BPwPoaPfzXyX8EczExa4=
Subject key identifier: 41:C8:A8:DB:B6:D8:69:17:22:96:28:4C:7F:33:52:52:DA:BE:07:F8
Authority key identifier: 97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92
Certificate issuer: /CN=976FB6C4EC175847196F26D9D507157A16E77592
Certificate serial: 0FF0376B689977147BD5DFBA378C604E7F2BDE5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
Manifest number: C0
Signing time: Thu 24 Sep 2026 11:04:18 +0000
Manifest this update: Thu 24 Sep 2026 10:59:18 +0000
Manifest next update: Fri 25 Sep 2026 14:16:18 +0000
Files and hashes: 1: 976FB6C4EC175847196F26D9D507157A16E77592.crl (hash: WGlvBqiUCmP+sRL9EiQcaYZWjHH3NQAVgfMkLCA/DUY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl
rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f0:37:6b:68:99:77:14:7b:d5:df:ba:37:8c:60:4e:7f:2b:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976FB6C4EC175847196F26D9D507157A16E77592
Validity
Not Before: Sep 24 10:59:18 2026 GMT
Not After : Sep 25 14:16:18 2026 GMT
Subject: CN=41C8A8DBB6D869172296284C7F335252DABE07F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:19:6e:e1:ad:a1:22:48:a7:a7:8f:e3:2a:
40:33:53:f0:0d:b3:e0:a3:b1:b0:81:16:6e:39:bd:
50:c7:97:b6:04:31:3f:28:c6:ce:56:0b:a7:e5:c6:
1c:18:bb:ff:c2:56:31:5b:b7:32:13:b2:df:dd:79:
21:e8:b4:fc:a8:6a:71:1f:a0:3f:24:9c:e3:f8:9a:
16:e6:b4:38:7f:b0:69:6a:c4:5a:c3:12:8f:76:a3:
54:29:21:1a:0f:f0:88:95:f0:26:09:15:7b:ef:f2:
59:d9:3c:fa:d2:57:ee:fa:59:02:51:32:d1:52:fb:
87:a4:3d:1b:e4:1e:30:84:5d:78:6a:1e:2b:2c:fe:
23:be:96:aa:ce:ed:87:46:e1:8f:c1:0b:61:80:da:
de:b3:b4:58:4a:bc:11:55:9d:f9:12:f9:13:13:85:
05:f5:6f:3a:cf:52:47:ea:23:ef:d9:77:02:7f:04:
b5:e4:1e:50:f3:41:9a:21:2e:8d:cb:2e:bf:7c:f3:
56:17:26:99:9d:5f:2f:f9:3d:df:d1:96:32:a1:4e:
87:f7:46:7b:83:35:64:6a:13:23:78:d9:38:9e:d8:
87:1e:8b:38:d5:e2:ff:4a:f9:a5:54:fe:67:2d:b4:
8b:23:f2:56:45:eb:2d:00:86:b8:73:0c:dd:92:9b:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C8:A8:DB:B6:D8:69:17:22:96:28:4C:7F:33:52:52:DA:BE:07:F8
X509v3 Authority Key Identifier:
keyid:97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cf:79:6f:dd:fc:bf:e3:a2:d1:74:54:16:31:8c:27:e5:dc:
a0:47:85:50:62:95:86:69:8c:b3:84:d4:c5:80:7f:8f:aa:30:
29:d6:f2:3b:ed:49:8a:87:c1:cf:a5:78:fc:e0:00:60:a5:ab:
df:9f:37:bc:d6:01:45:9f:1e:60:c2:67:80:c9:54:ae:d4:f8:
cb:b9:9b:52:59:d8:0a:75:18:d2:d7:00:2e:c8:ba:f7:ec:c3:
16:ea:69:51:d6:a7:94:57:6e:9d:6a:f0:97:3c:9b:e7:0a:8e:
85:b7:1b:83:79:da:71:b5:75:65:61:2a:3f:c0:af:44:c0:e0:
60:b9:8d:52:7f:c2:97:be:00:b3:bc:48:d7:7a:c9:02:2a:70:
25:ab:99:11:65:a7:89:6b:13:7a:2d:fd:b3:23:20:4d:d4:fe:
c4:2c:a0:2f:3d:4c:a2:61:e0:2f:67:21:f0:b3:77:ce:61:e7:
4c:00:e7:97:83:b2:ef:33:d3:8f:1a:b0:8f:c1:25:50:f9:82:
60:6d:04:6e:02:10:e6:18:73:b5:da:af:1e:54:f5:4c:d4:cc:
ad:78:4f:03:6f:84:36:a4:ce:9b:1a:88:9f:55:d6:bf:5b:b5:
5b:fb:2a:15:9c:60:c6:eb:f0:e9:a3:a9:01:dd:b2:7c:9b:a8:
50:1d:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:42:17 2026 by rpki-client