
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
File: 11B59A73410511C9A6E01CB13423495DDC1B58CE.mft (raw, json)
Hash identifier: uhMpCDb++nn+cC34XW+GOZStKvmjoIQ/kNNuSCnFmLM=
Subject key identifier: C4:29:06:FF:A3:B7:9C:CB:D6:CB:E2:39:80:B8:7F:E0:14:60:1B:DE
Authority key identifier: 11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE
Certificate issuer: /CN=11B59A73410511C9A6E01CB13423495DDC1B58CE
Certificate serial: 48C2ACC527DEFBAD573A93388DEA4A556CCBE89B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 14:08:24 +0000
Manifest this update: Thu 24 Sep 2026 14:03:24 +0000
Manifest next update: Fri 25 Sep 2026 16:31:24 +0000
Files and hashes: 1: 11B59A73410511C9A6E01CB13423495DDC1B58CE.crl (hash: OtHHYdO3BGIHkfTejgyzu2iTEvxfH43WMvSBmtpK+Xg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl
rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 16:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c2:ac:c5:27:de:fb:ad:57:3a:93:38:8d:ea:4a:55:6c:cb:e8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11B59A73410511C9A6E01CB13423495DDC1B58CE
Validity
Not Before: Sep 24 14:03:24 2026 GMT
Not After : Sep 25 16:31:24 2026 GMT
Subject: CN=C42906FFA3B79CCBD6CBE23980B87FE014601BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:10:c7:69:53:28:a1:44:b9:4a:18:de:35:
7f:31:75:92:44:72:4d:87:ca:2b:5a:25:21:c4:77:
f3:46:b9:84:fc:aa:5b:75:54:88:62:5c:78:e8:ad:
29:ac:07:fa:fa:50:bd:c4:58:97:3f:a0:31:c5:26:
b8:37:83:26:40:24:c4:8f:e8:13:f5:07:c7:99:cc:
e9:81:a1:af:57:a5:b2:ed:61:2f:d3:00:de:dd:cc:
ae:c2:e0:c8:72:62:f5:bc:32:57:74:8e:12:2d:34:
3f:3b:09:2f:21:8a:23:1f:7f:a2:76:86:dc:e8:f4:
dc:bd:3a:94:c2:f3:dd:b2:27:37:c8:a3:23:c6:21:
05:79:1c:c2:2d:ea:2e:01:1c:09:35:42:2e:75:11:
35:14:74:96:3e:b8:f1:19:84:47:1a:ec:81:e4:de:
7b:74:83:31:87:88:93:34:62:cb:9f:8c:14:ea:93:
3d:3c:74:a8:e1:2d:69:c4:d7:c9:b8:a9:03:42:5b:
df:b8:ef:ad:19:3b:2e:36:5b:55:81:06:a4:61:dd:
d4:67:5a:bd:81:9e:55:8c:c6:c2:16:1a:3c:7d:a6:
1d:c9:19:82:a0:af:b6:a1:c5:58:3a:18:da:19:72:
05:1b:9c:d6:76:54:a1:4c:73:cd:32:dc:d7:54:86:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:06:FF:A3:B7:9C:CB:D6:CB:E2:39:80:B8:7F:E0:14:60:1B:DE
X509v3 Authority Key Identifier:
keyid:11:B5:9A:73:41:05:11:C9:A6:E0:1C:B1:34:23:49:5D:DC:1B:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11B59A73410511C9A6E01CB13423495DDC1B58CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/11B59A73410511C9A6E01CB13423495DDC1B58CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8e:14:64:04:f6:23:b9:85:b2:5f:77:42:65:5b:97:e2:3d:
1f:63:6b:14:55:e8:78:fa:ec:e0:13:14:61:21:13:1f:d9:36:
d7:cb:74:b4:77:06:83:3f:76:10:ff:0b:a6:a4:0f:82:c2:f4:
77:82:51:8c:1e:64:eb:32:f1:70:74:6d:17:f5:85:f5:0d:b2:
30:40:9a:52:7c:ad:ea:2b:a2:ed:e7:64:f2:82:51:ec:b9:38:
ed:76:2a:a8:fb:4a:e6:e6:89:66:c7:f8:8f:ec:45:20:78:64:
ec:64:f6:ef:e4:36:ec:49:2e:c8:72:2d:25:26:e5:4d:57:7a:
4f:43:ee:c8:b3:13:7d:ba:44:86:ae:81:fd:39:68:6c:a4:da:
80:f6:01:cd:e6:f5:ec:74:e0:4b:75:20:32:84:86:e0:ae:13:
7b:17:4b:fe:8b:6e:9a:3f:29:44:84:e4:09:0d:65:73:77:45:
70:be:a6:6f:8b:4f:10:c8:2e:47:cf:16:06:78:14:3e:3a:5d:
7d:44:7c:36:90:df:60:ed:f2:c3:0a:4a:7e:3f:8b:a6:be:da:
a8:5f:5c:a3:5f:99:0d:24:20:f4:8c:52:94:2a:23:34:18:f9:
cb:d5:99:71:d8:08:13:71:8b:da:ae:40:12:b8:a1:17:4e:57:
8a:1a:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:54:21 2026 by rpki-client