
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
File: 271068E54464101C4BF23BC5A4339C1CA88116CD.mft (raw, json)
Hash identifier: LyImiUE7yzcTXZZiipOfabLVjWV5QP+iA6gk594N7bA=
Subject key identifier: 14:B0:71:53:84:14:4B:19:E5:50:3F:34:83:66:15:E4:E8:51:20:71
Authority key identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
Certificate issuer: /CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Certificate serial: 43C5A4280FB36B8112A6C7F77E94062039A47DEE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 08:51:38 +0000
Manifest this update: Fri 25 Sep 2026 08:46:38 +0000
Manifest next update: Sat 26 Sep 2026 12:16:38 +0000
Files and hashes: 1: 271068E54464101C4BF23BC5A4339C1CA88116CD.crl (hash: czYVH3Th92ntpZT9b89pk+2oW0j6nXV3EpnpAWrmJ+8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 12:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c5:a4:28:0f:b3:6b:81:12:a6:c7:f7:7e:94:06:20:39:a4:7d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Validity
Not Before: Sep 25 08:46:38 2026 GMT
Not After : Sep 26 12:16:38 2026 GMT
Subject: CN=14B0715384144B19E5503F34836615E4E8512071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:90:ae:c2:d9:7b:c5:84:0b:38:23:fe:22:
96:0d:bc:eb:31:3d:cd:4e:69:a4:e5:74:bb:2d:b6:
8c:33:7c:8f:00:5f:54:ab:2d:35:94:90:df:02:b1:
2c:ea:c0:6f:d9:fd:2c:c5:1c:94:93:8c:ed:69:6a:
1a:2e:1b:0f:04:93:04:cb:37:c7:f2:0c:6f:2b:48:
a1:4f:38:b0:a2:d9:da:04:97:f1:56:52:6c:4d:db:
9b:dd:71:4f:fa:64:8d:7e:04:40:c2:16:cc:67:83:
19:fc:53:d6:33:10:04:d8:f2:f3:af:ba:6b:e7:7d:
b2:bc:6e:c8:f9:5e:11:8b:24:4e:4e:79:20:76:54:
3a:47:ae:ef:70:36:ec:e6:78:a0:40:8d:3e:81:da:
88:4a:08:71:8d:24:d2:7c:cb:cf:fb:89:20:f4:b1:
50:67:1c:df:88:24:d7:17:dc:56:4e:1e:60:73:73:
df:1f:9e:71:a4:eb:cd:73:60:76:4e:a5:e5:ba:20:
6e:19:5f:22:56:3c:af:25:4e:bb:03:99:2e:1f:0a:
51:e0:c9:eb:48:fd:65:e1:f6:41:03:e9:cc:54:cc:
09:55:cd:a6:ca:f0:32:11:72:e2:16:67:d9:02:fb:
fd:81:4c:78:4e:cf:22:86:a6:41:46:f6:e3:6a:ad:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B0:71:53:84:14:4B:19:E5:50:3F:34:83:66:15:E4:E8:51:20:71
X509v3 Authority Key Identifier:
keyid:27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7c:38:b6:f0:e6:cc:9c:e5:41:f2:ec:8b:cd:71:68:71:4e:
58:4f:06:6f:65:bd:64:b5:21:8a:25:da:02:22:c8:0a:b8:52:
37:18:97:c7:f6:38:a7:bc:c1:a0:5b:18:c9:9a:94:a7:ab:7d:
4d:f0:b3:31:58:53:eb:53:12:47:82:4a:a3:c0:70:7d:5a:da:
d8:5b:36:fb:30:5d:41:77:f2:57:38:ac:94:01:a6:a5:be:68:
31:23:e8:f6:61:53:47:32:02:d6:9f:b6:b5:db:a7:c0:91:47:
8d:d8:32:a1:fc:08:fc:04:e1:57:0d:38:77:c6:ac:c3:04:88:
90:e4:f0:db:f6:17:c0:13:38:8e:7e:bd:cc:73:f6:fb:ec:37:
22:31:99:99:a9:36:6c:b7:a5:53:1b:8b:8b:fc:79:b3:41:e6:
d9:c4:90:9d:03:7f:43:61:e2:13:07:c1:b6:8f:a2:ad:25:02:
29:25:81:c9:ab:2d:74:78:e2:be:e8:24:d7:cf:94:cd:d2:4c:
22:44:3e:be:37:f7:28:67:a2:f5:19:e5:e1:04:6c:bd:2f:5b:
5d:a8:a5:98:03:2b:31:86:c6:c6:d3:da:b3:2b:bb:55:7a:24:
54:5d:c3:b0:55:66:73:66:73:cc:1b:e8:e2:e9:64:a6:dc:be:
34:7a:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:56:41 2026 by rpki-client