
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft
File: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft (raw, json)
Hash identifier: wzZ85JtKsVu4KLtIAF7rLowH0iCsEaIEoEOy41oaLIY=
Subject key identifier: 52:A5:88:0B:55:8C:D8:9E:75:47:B3:45:30:36:32:09:17:6B:FF:70
Authority key identifier: 36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA
Certificate issuer: /CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA
Certificate serial: 2E0D8A75AC44C76ED60E8F69A2128AB237ACD2C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 07:14:58 +0000
Manifest this update: Wed 23 Sep 2026 07:09:58 +0000
Manifest next update: Thu 24 Sep 2026 09:06:58 +0000
Files and hashes: 1: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl (hash: AXXWWuaCdKcc1YlDE69U7NCNzGlXpmn49o4jUNDrPuM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl
rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0d:8a:75:ac:44:c7:6e:d6:0e:8f:69:a2:12:8a:b2:37:ac:d2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA
Validity
Not Before: Sep 23 07:09:58 2026 GMT
Not After : Sep 24 09:06:58 2026 GMT
Subject: CN=52A5880B558CD89E7547B34530363209176BFF70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:98:6a:40:d3:d3:60:5e:d4:f7:52:c9:03:
77:04:c5:61:ca:27:89:80:b3:c0:1f:8e:a2:e2:5f:
86:83:47:46:c7:26:bd:4e:a0:52:62:c8:33:85:9b:
3a:9d:1c:f4:e0:c6:21:71:0e:39:b9:0f:af:c2:79:
d7:3d:4d:56:b8:14:9a:3c:16:1e:7c:f9:c4:5d:27:
62:aa:b1:b2:93:c1:e1:fe:97:b0:4e:07:b6:f0:94:
c0:8d:c8:d7:fc:d3:6c:eb:2f:0e:fe:ff:eb:7a:96:
e6:7b:b9:04:d2:d5:e8:d2:db:8c:7a:ba:66:28:d8:
91:38:f0:ee:68:c9:7e:e7:09:f8:39:33:7c:4e:a0:
30:86:25:42:9e:c8:c7:23:55:d0:11:66:47:84:ff:
68:31:dd:28:07:62:09:83:b8:b5:c8:a2:d4:88:f6:
e1:50:30:ac:3b:b7:a6:94:e9:7d:e2:12:c6:c4:fd:
96:b7:74:f8:f2:22:27:b5:8b:ce:5e:8f:0d:e0:38:
a0:1c:06:24:57:52:9e:4b:25:d6:f9:8e:42:fc:27:
ce:08:b4:f0:1d:0f:65:8c:87:d7:cb:2a:22:72:d2:
c5:1d:61:74:56:18:f7:63:39:8c:70:da:e7:90:46:
39:dc:b8:e7:d0:ed:96:f9:f5:10:44:29:7f:35:27:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:88:0B:55:8C:D8:9E:75:47:B3:45:30:36:32:09:17:6B:FF:70
X509v3 Authority Key Identifier:
keyid:36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c4:11:d0:61:00:62:bc:cb:94:8a:89:16:63:8b:ad:7a:14:
cb:c0:52:25:77:c2:ac:51:63:8a:a8:7c:40:a8:47:fb:46:dc:
16:80:f7:4f:3e:aa:f8:77:a4:37:ef:69:21:8b:8e:58:4b:19:
97:f1:96:27:a8:fc:b4:6b:bf:fc:eb:53:55:b9:54:63:86:4c:
af:8a:5b:62:c3:61:31:4a:bd:1a:80:19:b5:00:f7:8a:e8:09:
24:99:01:28:02:92:dd:96:2a:df:aa:3b:f3:a7:a0:46:10:36:
8a:38:fb:cb:6f:3c:e5:b9:2f:ef:79:29:f5:35:9f:7b:e7:13:
e1:af:1d:87:7b:d4:a5:b7:d2:db:d6:f8:69:75:3e:4e:bb:bc:
a6:8b:8e:67:96:df:fd:ed:da:1a:4d:e9:90:29:e4:01:b6:70:
83:a4:68:5f:5d:2a:cf:27:29:96:d0:6f:7b:0e:db:0b:7c:22:
6d:75:b0:5a:41:df:b8:4d:0c:35:ae:52:bb:22:ff:a0:0a:b3:
3a:e1:e8:ac:6a:db:dd:6b:f6:25:8f:4a:9d:8d:38:c4:9c:ef:
3f:1f:73:23:2f:8f:25:ec:af:5e:a4:03:6a:d7:ca:12:30:7a:
80:5f:a3:7f:08:f9:ad:d6:45:8c:ae:41:ea:88:7a:04:08:48:
cb:ed:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:57 2026 by rpki-client