
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
File: C2B50C176FE80567FC831542D1C8AC57BD65209A.mft (raw, json)
Hash identifier: 7d6XdnJgMfT7+3GaD3mA7gNaGxl83hdUVItWYvrjmUs=
Subject key identifier: 6B:3A:A5:8B:D7:A3:9D:BF:1E:78:0A:38:42:53:5F:34:EC:6B:B4:28
Authority key identifier: C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A
Certificate issuer: /CN=C2B50C176FE80567FC831542D1C8AC57BD65209A
Certificate serial: 713776901F6B762EC412620F0B3487A69609F643
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 23:58:30 +0000
Manifest this update: Wed 16 Sep 2026 23:53:30 +0000
Manifest next update: Fri 18 Sep 2026 01:12:30 +0000
Files and hashes: 1: C2B50C176FE80567FC831542D1C8AC57BD65209A.crl (hash: +c4L4m/w7GeRr3k3ECLNDlEKPpw1Kk2eGzbFbCAMqKs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.crl
rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:37:76:90:1f:6b:76:2e:c4:12:62:0f:0b:34:87:a6:96:09:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B50C176FE80567FC831542D1C8AC57BD65209A
Validity
Not Before: Sep 16 23:53:30 2026 GMT
Not After : Sep 18 01:12:30 2026 GMT
Subject: CN=6B3AA58BD7A39DBF1E780A3842535F34EC6BB428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:b3:0c:c2:2c:13:30:3c:cc:a6:bb:52:f3:
74:ba:f7:eb:d6:b7:8d:b9:12:fd:cb:c3:e5:d4:de:
7b:b0:fd:09:cd:b6:f4:eb:dd:7a:6a:28:b5:34:ac:
6a:06:14:da:1c:50:e4:25:2d:3e:17:0c:74:24:af:
d3:9c:b4:a2:8e:50:1b:e4:13:08:99:e3:99:79:99:
1b:48:70:36:68:80:5a:45:f8:d1:cc:50:28:53:34:
95:1c:6b:d0:95:87:f5:22:9c:3c:b9:0a:38:9e:9b:
84:9d:64:19:bc:54:75:f0:52:95:22:d9:ac:24:a4:
8c:fb:e2:12:49:2b:46:bf:af:4a:a5:c0:5a:3d:ac:
2b:07:c5:bd:b7:4b:7f:d6:0d:d6:67:87:2a:40:51:
9e:68:9f:2e:3c:48:ae:2e:f0:91:5b:4d:ee:ed:63:
10:7a:e1:64:6d:65:ce:34:9a:4b:30:85:d3:d6:a3:
9e:14:e5:91:86:0e:11:56:99:0c:1e:99:52:44:56:
84:98:8e:03:84:fd:89:30:b2:c5:e9:fe:b5:19:85:
01:d0:11:0b:5d:47:09:8a:9e:76:1d:de:ae:40:5d:
a1:9e:fe:51:cf:b9:ec:54:8f:54:89:3f:21:14:ab:
0e:31:62:7c:88:ed:74:cd:33:95:a8:a9:3b:52:f4:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:A5:8B:D7:A3:9D:BF:1E:78:0A:38:42:53:5F:34:EC:6B:B4:28
X509v3 Authority Key Identifier:
keyid:C2:B5:0C:17:6F:E8:05:67:FC:83:15:42:D1:C8:AC:57:BD:65:20:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2B50C176FE80567FC831542D1C8AC57BD65209A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34ad5b05-d787-4c6f-8277-59daf1eac6e6/0/C2B50C176FE80567FC831542D1C8AC57BD65209A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8d:57:27:76:f7:89:11:c0:aa:2c:31:b9:b4:fb:cd:82:6f:
99:43:fc:0a:13:04:a1:2c:0a:59:fd:8f:fd:21:14:76:b4:05:
b8:b9:ee:39:04:2c:df:b6:c5:c3:c2:05:03:d5:f1:bd:78:a8:
5b:c4:29:7c:0c:24:c9:a5:f1:48:be:cd:af:83:39:90:e3:63:
d7:a0:b4:d4:83:5b:9b:1d:8a:ed:bf:89:1a:b6:c7:ef:4a:ee:
7a:e7:9c:6c:38:5f:31:2b:44:84:7d:03:d0:31:81:97:11:73:
73:9b:a6:82:4b:ab:20:68:61:57:1c:6f:80:64:6a:4b:a2:fe:
b2:30:b1:d5:07:08:2d:39:ad:b0:bf:b1:fe:37:09:a9:d0:34:
82:a6:83:06:e0:92:c2:06:74:77:f0:71:f3:3a:88:08:28:82:
82:dd:a0:23:91:d4:7f:69:0f:2b:82:a3:7a:e8:28:8a:a3:1f:
65:93:82:75:d4:19:dd:da:f3:8d:f8:a4:c1:41:0f:26:ba:7d:
46:22:9f:18:58:b4:c6:3e:c2:3e:51:e9:0b:50:3e:2b:27:ab:
73:35:d0:2a:77:f9:ab:eb:6f:9f:0a:45:80:a9:e1:7d:f1:fd:
38:af:fd:c7:80:d5:5e:b1:1a:af:e1:b1:7f:fc:df:6b:29:52:
9a:03:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:25:02 2026 by rpki-client