
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft
File: 56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft (raw, json)
Hash identifier: JOq7c0dwJH7JwOem/M60NzKglozMUsLgmwwd9kMt5ck=
Subject key identifier: A9:85:6E:26:BC:C4:9B:33:C1:32:32:5F:20:EE:B3:06:74:F9:8A:3D
Authority key identifier: 56:DB:54:1E:BF:E1:0F:1F:3E:3B:60:3A:BB:D1:61:2F:05:91:D3:1D
Certificate issuer: /CN=56DB541EBFE10F1F3E3B603ABBD1612F0591D31D
Certificate serial: 1C4DE9C9D806F36A6D9F8F44DAFE19602E30AD53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft
Manifest number: FA
Signing time: Wed 04 Nov 2026 13:40:12 +0000
Manifest this update: Wed 04 Nov 2026 13:35:12 +0000
Manifest next update: Thu 05 Nov 2026 15:51:12 +0000
Files and hashes: 1: 56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.crl (hash: 6JpA59Vwc+DniwKIpMeGlN1B2veukE8dwde7eRDPxgY=)
2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: K6VGpUzpPJUCTZHdvgUeS/XrMGF4d7bqHd7S+ohIF1g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.crl
rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 11:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4d:e9:c9:d8:06:f3:6a:6d:9f:8f:44:da:fe:19:60:2e:30:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56DB541EBFE10F1F3E3B603ABBD1612F0591D31D
Validity
Not Before: Nov 4 13:35:12 2026 GMT
Not After : Nov 5 15:51:12 2026 GMT
Subject: CN=A9856E26BCC49B33C132325F20EEB30674F98A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:c5:dc:cd:ce:c4:65:34:42:26:35:07:3d:
62:37:3e:76:5c:96:d5:41:13:5b:88:85:0a:1d:ef:
d6:49:1d:9a:5f:45:a5:65:46:50:c4:b8:b9:73:e5:
d2:9c:ba:22:89:cf:c7:53:72:7b:f6:d6:17:f6:cd:
44:3e:af:38:8e:7c:c2:e4:86:04:b5:28:39:46:00:
98:59:5d:0d:24:95:c2:25:ad:51:3f:b9:b0:81:b6:
eb:89:42:56:ff:e2:5f:8f:a2:12:e3:fe:68:13:1f:
5b:41:c7:c5:bb:1a:85:f3:59:ae:37:e7:10:63:1a:
fb:ff:55:c6:79:34:e3:b5:30:19:a8:cc:74:1b:08:
da:17:68:90:8a:9b:49:aa:0f:b7:9f:62:83:cf:38:
37:3b:75:b1:9c:05:a2:09:a6:85:a0:fd:a3:22:5c:
c1:f8:35:72:56:e3:cc:1c:cb:90:61:8a:90:f0:e1:
ca:cd:2c:f1:a3:c1:52:20:d4:f0:69:4d:2f:a1:46:
f5:92:19:89:6e:a2:2b:89:d1:0f:c7:9f:86:83:54:
6a:2d:cd:f4:37:e9:39:76:8e:25:8a:84:84:71:04:
41:29:7c:df:6d:67:bf:89:ea:69:76:bf:21:ef:d6:
57:0b:83:1a:33:dd:80:8e:ea:44:b7:f9:76:10:a3:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:6E:26:BC:C4:9B:33:C1:32:32:5F:20:EE:B3:06:74:F9:8A:3D
X509v3 Authority Key Identifier:
keyid:56:DB:54:1E:BF:E1:0F:1F:3E:3B:60:3A:BB:D1:61:2F:05:91:D3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a6:59:0c:eb:e9:64:fa:8b:39:5b:6d:ea:60:3a:b9:e7:6a:
4c:0e:27:b3:9f:c5:6c:09:d5:d3:2a:e9:b4:dc:c1:d4:12:6f:
e8:3b:b6:ff:62:6d:7e:d0:0c:79:37:88:5b:16:f3:f0:d8:0f:
56:f9:60:b0:55:4c:3b:f0:e5:5c:fc:e4:8d:30:19:4e:9b:0d:
4c:81:fd:68:87:73:32:3b:20:1d:24:e6:a3:e1:21:4b:0e:25:
79:ee:cf:27:8d:7f:79:ac:e7:b9:00:32:48:29:b9:90:dc:36:
3c:1f:89:67:0f:59:fe:37:37:df:17:db:20:af:74:5e:fb:e6:
e3:68:60:d3:a4:5a:3f:62:3a:ca:a5:6d:8f:0b:71:aa:e5:e1:
8c:b1:a3:85:0b:48:8e:e3:9b:2a:88:d2:4d:8c:a3:8c:3a:0c:
2b:a7:77:db:8b:45:2b:3d:62:44:ce:29:63:95:ad:ff:de:7e:
64:1e:e4:31:89:2a:7e:5a:c2:63:24:40:6b:3b:1c:1a:15:e2:
be:62:85:f4:1e:00:dc:b5:67:1e:27:e4:9c:ad:c9:7c:79:5b:
0a:a3:84:1a:0e:af:40:cd:b9:c5:36:0e:c9:bf:46:c9:6e:16:
5b:7f:87:37:ca:85:87:7a:d2:f8:76:46:18:c6:31:25:e6:e8:
69:5f:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:11:18 2026 by rpki-client