
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft
File: 13605A136F0092B1019BDEF64A0199270705BFA5.mft (raw, json)
Hash identifier: e8iHjgshO3XTBgoPH22EkKWBg6Z4L3iFLLRiHJ4sKyY=
Subject key identifier: 91:F3:D9:34:B0:86:9A:7E:E0:8B:41:BF:3F:02:24:65:87:19:16:B3
Authority key identifier: 13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5
Certificate issuer: /CN=13605A136F0092B1019BDEF64A0199270705BFA5
Certificate serial: 51406312F2617F25331D2D7EDCDBC093E82E1D2B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft
Manifest number: 41
Signing time: Sat 20 Jun 2026 05:36:35 +0000
Manifest this update: Sat 20 Jun 2026 05:31:35 +0000
Manifest next update: Sun 21 Jun 2026 09:11:35 +0000
Files and hashes: 1: 13605A136F0092B1019BDEF64A0199270705BFA5.crl (hash: HN3cIzNrPuwbsWKGAROOwt1O91jRWX4bXu5XKSCEPZM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl
rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 08:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:40:63:12:f2:61:7f:25:33:1d:2d:7e:dc:db:c0:93:e8:2e:1d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13605A136F0092B1019BDEF64A0199270705BFA5
Validity
Not Before: Jun 20 05:31:35 2026 GMT
Not After : Jun 21 09:11:35 2026 GMT
Subject: CN=91F3D934B0869A7EE08B41BF3F022465871916B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:55:dc:f8:b2:1a:32:ea:48:a2:b3:77:3b:
10:75:92:70:bb:13:99:cd:65:76:30:87:0a:1d:fa:
da:db:04:e7:24:e9:df:92:5d:ef:af:44:2c:51:43:
6e:be:6a:8e:41:96:fd:af:d9:2a:33:d1:12:dd:24:
60:5d:7a:d1:b6:d4:57:12:79:59:09:dc:7e:a0:70:
8b:cf:23:ab:59:f6:29:97:6d:a7:ac:10:89:90:6a:
c3:b7:e3:05:3e:cf:53:f4:16:45:35:8a:8c:24:0a:
69:0e:d9:e0:41:52:ec:5a:de:2b:76:b9:64:25:06:
f0:03:60:79:bc:37:3e:f3:25:4d:e0:ca:64:85:0c:
3c:78:e6:11:36:77:61:b8:d4:67:26:11:6c:d4:81:
a2:60:a3:14:78:a7:f0:7a:36:d5:6e:be:70:ff:d0:
ea:ec:95:da:ce:f7:39:a7:36:d6:03:05:8a:86:d6:
cf:9f:a5:dd:3c:a4:42:93:05:4e:3e:41:ae:21:85:
26:5c:37:e1:61:e1:ea:50:8d:8b:78:3d:3b:3e:c1:
8c:97:57:a3:ca:a7:ae:20:dc:f4:98:86:a5:bb:ef:
44:be:d9:04:4e:73:27:1e:d6:e1:ff:33:38:f2:c5:
8d:71:de:11:25:3f:5e:73:3f:60:9e:f6:9e:57:81:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:D9:34:B0:86:9A:7E:E0:8B:41:BF:3F:02:24:65:87:19:16:B3
X509v3 Authority Key Identifier:
keyid:13:60:5A:13:6F:00:92:B1:01:9B:DE:F6:4A:01:99:27:07:05:BF:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13605A136F0092B1019BDEF64A0199270705BFA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/13605A136F0092B1019BDEF64A0199270705BFA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:d2:d5:bc:be:25:ee:5f:ee:8f:05:81:4b:23:46:95:2c:
6a:74:62:b6:17:2c:83:f7:d9:4c:f4:e3:5e:ce:25:b2:56:dd:
a0:ef:4c:93:69:2f:ae:54:91:da:64:83:74:df:11:fb:99:74:
a9:07:f4:46:29:9e:fe:f4:25:c4:5e:99:41:ef:b7:6b:6e:5a:
cf:90:ed:f2:ee:9d:0e:1c:64:f3:92:9d:fa:bc:07:d9:f5:ae:
b8:61:72:04:9c:5e:72:f9:2e:40:bf:f9:48:c9:ad:65:35:9c:
4e:36:fc:89:5a:17:94:2d:26:41:7b:9f:d6:0e:0d:ed:b4:1e:
bc:8f:a6:29:89:bc:41:5f:54:23:c3:12:2d:53:a4:00:aa:dd:
fb:17:e6:22:1e:6d:d0:f0:b7:e7:e1:13:6b:6a:15:c7:b4:c7:
ef:10:11:8d:c6:e4:19:d4:a6:4c:77:53:76:d0:1c:02:f2:55:
d3:04:c8:de:03:c9:ac:ce:63:d4:05:d3:03:2d:92:0c:4f:a4:
09:31:a2:17:57:19:ab:64:05:e8:55:17:f5:7d:0d:49:6e:f0:
e3:bc:8b:30:8a:58:0b:76:ae:d6:24:f4:58:cb:2f:d2:af:33:
6e:37:aa:5b:de:cd:2b:64:c5:84:a7:93:7b:6f:61:e9:02:08:
ea:5b:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:01:31 2026 by rpki-client