
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
File: 271068E54464101C4BF23BC5A4339C1CA88116CD.mft (raw, json)
Hash identifier: XALAmmL2jE0zwwQWbXZ2c73fs5DNUiJkTzP4LoA6M2g=
Subject key identifier: B4:9C:B4:BA:31:27:63:D0:E5:67:AE:5C:92:06:76:8B:5A:D5:18:4D
Authority key identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
Certificate issuer: /CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Certificate serial: 431CC0666CF74B99E7D61C473BCEC843BC7DB1B2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 22:00:04 +0000
Manifest this update: Tue 12 May 2026 21:55:04 +0000
Manifest next update: Thu 14 May 2026 00:43:04 +0000
Files and hashes: 1: 271068E54464101C4BF23BC5A4339C1CA88116CD.crl (hash: Wyf+tERMLJg9/KZOQAekY6KBqdAvMLPu6injYsFsVSI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1c:c0:66:6c:f7:4b:99:e7:d6:1c:47:3b:ce:c8:43:bc:7d:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Validity
Not Before: May 12 21:55:04 2026 GMT
Not After : May 14 00:43:04 2026 GMT
Subject: CN=B49CB4BA312763D0E567AE5C9206768B5AD5184D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:d3:a2:c3:72:ed:88:6a:97:c4:ac:c1:71:
66:2c:35:fa:b7:79:e7:d0:87:25:fb:09:56:54:0f:
92:37:d7:02:d3:ce:a9:4f:77:c2:2b:a9:ff:75:b2:
f9:e8:c7:01:ea:d0:4c:fc:84:07:f6:5c:07:9c:e2:
f6:2e:13:61:5b:75:e4:b5:71:df:2a:92:84:8f:ad:
70:67:5d:e9:ed:2e:c6:04:45:c5:c1:d8:fa:a9:c8:
38:f8:54:0e:84:7d:29:0e:65:40:cb:bc:59:4d:29:
ce:1a:f7:20:34:24:4c:18:29:da:37:23:5b:ad:06:
94:ad:be:34:82:52:db:82:cc:89:04:fb:34:99:79:
74:21:2b:9c:6f:86:48:01:22:19:6e:82:82:67:23:
3f:f6:c3:b2:b4:09:6f:a5:12:fb:8f:99:6d:18:8d:
f1:27:1d:40:02:a4:36:7b:de:45:93:d8:da:e5:4c:
cb:f8:25:71:aa:e0:00:23:91:fc:92:f8:de:9c:7c:
37:18:30:32:04:c7:1f:00:6c:0f:66:29:24:27:73:
33:5c:a3:c9:1f:a0:97:7f:ac:8d:2d:9b:8b:7e:d5:
5f:e1:8c:ea:17:96:bb:a2:9d:54:ef:6d:cd:34:c9:
3f:54:69:bb:9f:a4:e2:15:04:ed:81:3f:74:ed:ec:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:B4:BA:31:27:63:D0:E5:67:AE:5C:92:06:76:8B:5A:D5:18:4D
X509v3 Authority Key Identifier:
keyid:27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:41:5c:2e:5d:7d:39:cb:8b:13:e9:6e:6f:c4:a1:a1:8f:98:
e9:69:75:67:8a:2e:01:ce:d8:48:48:c5:84:da:d9:9e:7a:b1:
3d:69:0f:67:e8:22:d6:dd:c6:fb:83:e0:56:e3:da:3b:ab:dd:
ee:f4:3b:fb:a1:60:04:19:8e:36:24:2f:73:05:ca:1b:32:c7:
7a:02:9b:df:0b:ce:36:b9:6d:39:19:28:bd:9c:ae:fb:16:2a:
5c:a7:f7:88:d5:a7:1c:ac:9d:e6:20:e5:ba:41:d9:65:da:78:
53:ce:46:3b:03:b8:7e:0e:2b:96:58:8f:d8:0c:b1:bc:8f:6d:
d6:b1:45:c6:01:16:f8:6e:be:e8:eb:bf:b5:fd:77:09:fd:56:
d8:54:8a:0c:5b:92:c7:27:1f:df:2e:d1:fb:25:95:0b:5c:1a:
58:a1:15:e0:9e:b1:1f:2c:3d:80:42:0d:b4:20:23:cc:1b:12:
b5:db:1f:cd:45:4d:e3:af:dd:7d:e0:c8:f0:b9:48:07:0f:b6:
10:aa:ce:5b:06:ca:fd:66:e7:f9:70:2f:91:d7:27:d7:4c:76:
4c:b6:aa:12:95:de:3a:c1:b6:0b:7f:38:e2:fb:e8:26:d7:d3:
11:51:02:a4:bb:7d:4c:d4:72:b6:74:e0:92:0f:29:71:02:54:
08:9c:a0:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQxzAZmz3S5nn1hxHO87IQ7x9sbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxMDY4RTU0NDY0MTAxQzRCRjIzQkM1QTQzMzlDMUNB
ODgxMTZDRDAeFw0yNjA1MTIyMTU1MDRaFw0yNjA1MTQwMDQzMDRaMDMxMTAvBgNV
BAMTKEI0OUNCNEJBMzEyNzYzRDBFNTY3QUU1QzkyMDY3NjhCNUFENTE4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCna9Oiw3LtiGqXxKzBcWYsNfq3
eefQhyX7CVZUD5I31wLTzqlPd8Irqf91svnoxwHq0Ez8hAf2XAec4vYuE2FbdeS1
cd8qkoSPrXBnXentLsYERcXB2PqpyDj4VA6EfSkOZUDLvFlNKc4a9yA0JEwYKdo3
I1utBpStvjSCUtuCzIkE+zSZeXQhK5xvhkgBIhlugoJnIz/2w7K0CW+lEvuPmW0Y
jfEnHUACpDZ73kWT2NrlTMv4JXGq4AAjkfyS+N6cfDcYMDIExx8AbA9mKSQnczNc
o8kfoJd/rI0tm4t+1V/hjOoXlruinVTvbc00yT9UabufpOIVBO2BP3Tt7PcxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtJy0ujEnY9DlZ65ckgZ2i1rVGE0wHwYDVR0j
BBgwFoAUJxBo5URkEBxL8jvFpDOcHKiBFs0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjZjN2U1YjEtNTE5ZC00NTZjLWIzYjYtNzU1Nzk0NzAyNjY0LzAvMjcxMDY4RTU0
NDY0MTAxQzRCRjIzQkM1QTQzMzlDMUNBODgxMTZDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNzEwNjhFNTQ0NjQxMDFDNEJGMjNCQzVBNDMzOUMxQ0E4ODEx
NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz
YjYtNzU1Nzk0NzAyNjY0LzAvMjcxMDY4RTU0NDY0MTAxQzRCRjIzQkM1QTQzMzlD
MUNBODgxMTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJBBXC5dfTnLixPpbm/EoaGPmOlpdWeKLgHO
2EhIxYTa2Z56sT1pD2foItbdxvuD4Fbj2jur3e70O/uhYAQZjjYkL3MFyhsyx3oC
m98Lzja5bTkZKL2crvsWKlyn94jVpxysneYg5bpB2WXaeFPORjsDuH4OK5ZYj9gM
sbyPbdaxRcYBFvhuvujrv7X9dwn9VthUigxbkscnH98u0fsllQtcGlihFeCesR8s
PYBCDbQgI8wbErXbH81FTeOv3X3gyPC5SAcPthCqzlsGyv1m5/lwL5HXJ9dMdky2
qhKV3jrBtgt/OOL76CbX0xFRAqS7fUzUcrZ04JIPKXECVAicoNU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:07 2026 by rpki-client