
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft
File: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft (raw, json)
Hash identifier: k1Po/dF0iRHLHYWrCmJK7nm2lavUK/RDEEAXfA7G9m4=
Subject key identifier: C5:85:3B:DB:BF:8A:E2:31:93:34:74:72:46:63:B1:AF:9C:BF:FE:6E
Authority key identifier: D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC
Certificate issuer: /CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC
Certificate serial: 10C369AEB787454A3F0917DCE3FAD187B37CAB0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 12:39:44 +0000
Manifest this update: Wed 16 Sep 2026 12:34:44 +0000
Manifest next update: Thu 17 Sep 2026 14:21:44 +0000
Files and hashes: 1: D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl (hash: WrEd12n0/hmGwPYfg44RoM34kvLZaG7Ji3NrAAa20mU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl
rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c3:69:ae:b7:87:45:4a:3f:09:17:dc:e3:fa:d1:87:b3:7c:ab:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC
Validity
Not Before: Sep 16 12:34:44 2026 GMT
Not After : Sep 17 14:21:44 2026 GMT
Subject: CN=C5853BDBBF8AE231933474724663B1AF9CBFFE6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:47:56:3a:7f:33:e9:57:cc:50:ae:e9:48:
9f:54:ce:4a:e4:4b:fe:7b:d3:f4:ef:6f:e7:30:5f:
a0:38:bf:55:18:67:57:c3:6b:8b:4e:f0:44:9a:0f:
09:2e:1f:1d:3d:d6:aa:d6:c9:1f:4f:40:05:d3:8b:
35:e7:90:37:23:38:18:6d:ae:bf:d2:13:08:3a:65:
af:e3:4e:06:d1:b0:7a:a4:eb:bb:e9:ed:e6:2c:37:
04:71:fb:76:ac:ef:27:c7:6a:5e:8e:f9:e9:70:38:
d8:b3:e6:84:8a:9e:04:4e:25:a3:03:21:f3:20:a3:
79:45:23:25:aa:03:af:f1:4b:b8:c6:d7:fd:c1:b2:
29:cd:a1:d1:46:98:66:fb:c4:3e:2a:fb:b7:2e:af:
16:91:2b:a5:2e:88:9d:d6:23:78:1c:f5:c8:73:e0:
d9:57:c1:27:4e:b1:25:79:97:18:9b:8d:ae:09:3a:
44:e4:66:75:76:f2:db:16:ff:d0:3c:5e:c0:01:fd:
f1:45:bb:93:79:ff:91:a9:70:cc:6f:34:6f:0f:dc:
47:20:6c:18:59:27:3b:6b:cf:1e:50:ac:09:de:94:
4c:5a:36:e0:61:70:07:07:01:b1:a6:e8:c2:48:9a:
5b:20:64:15:b2:8e:0a:7c:68:5f:76:b3:68:7a:76:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:3B:DB:BF:8A:E2:31:93:34:74:72:46:63:B1:AF:9C:BF:FE:6E
X509v3 Authority Key Identifier:
keyid:D6:C0:95:71:57:A1:ED:A2:4F:0D:EF:F6:D0:FE:F2:81:37:C1:97:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/D6C0957157A1EDA24F0DEFF6D0FEF28137C197DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:45:b3:60:1a:45:8f:d5:54:d9:f2:29:6a:9d:e5:65:2a:55:
40:4e:3a:74:03:67:98:ad:95:21:e9:4c:bd:40:bd:d7:8a:ce:
dc:b7:74:e7:29:b9:e8:ff:55:6b:39:99:77:d2:8a:fe:a4:aa:
93:0e:8d:b2:a1:49:14:65:85:00:02:b4:42:e6:b4:6b:31:65:
8d:58:55:c3:77:dd:93:65:ce:de:1e:96:80:e2:d7:55:76:3e:
3c:a2:81:e2:c7:b3:dc:8f:59:f4:a9:b1:b1:48:12:d6:0e:16:
f8:1d:5d:d4:54:c3:62:26:1d:e9:b1:9c:70:c8:ff:30:4c:b3:
07:8c:03:92:94:fc:8d:f9:57:09:4c:be:2e:64:fa:88:a4:11:
6b:f4:19:70:b3:f2:62:48:ce:4e:4f:0e:26:53:d8:8a:3a:29:
92:de:cd:06:8e:d2:4d:a2:33:37:ba:e8:02:2a:94:19:80:39:
1c:3c:3d:ea:09:14:9a:5c:7f:37:92:37:d7:ff:1b:da:7b:58:
d4:71:19:fb:42:14:e4:4a:9f:36:38:d0:8a:de:8d:03:01:4f:
00:2f:08:42:65:f6:a9:67:42:93:45:ee:50:12:af:77:72:81:
6d:9c:2c:d7:67:c2:8f:8f:8c:bb:60:b3:15:49:a6:97:e5:23:
e9:61:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:36:17 2026 by rpki-client