
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
File: 0565770E1E5C778DB06AD63B009F91D2D34746C1.mft (raw, json)
Hash identifier: 5KZcv5PnwGDqhvKOe1IgEv1kS9vi2i6lXZDcNR9FOGI=
Subject key identifier: 8E:85:03:B9:00:76:4A:30:3F:A3:81:1F:C0:D4:D4:D9:FB:12:2E:43
Authority key identifier: 05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1
Certificate issuer: /CN=0565770E1E5C778DB06AD63B009F91D2D34746C1
Certificate serial: 5DA0633A6CFDA30EA3719C69D494A2BE574AA356
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:29:00 +0000
Manifest this update: Thu 17 Sep 2026 04:24:00 +0000
Manifest next update: Fri 18 Sep 2026 07:00:00 +0000
Files and hashes: 1: 0565770E1E5C778DB06AD63B009F91D2D34746C1.crl (hash: evbCtQ9paZ3YPKhFvPbbqKNx+/FNAM32GoK3GiwHYeM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl
rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a0:63:3a:6c:fd:a3:0e:a3:71:9c:69:d4:94:a2:be:57:4a:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0565770E1E5C778DB06AD63B009F91D2D34746C1
Validity
Not Before: Sep 17 04:24:00 2026 GMT
Not After : Sep 18 07:00:00 2026 GMT
Subject: CN=8E8503B900764A303FA3811FC0D4D4D9FB122E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:36:49:0d:78:13:85:8b:ca:66:f2:b0:0e:
d7:c6:e5:d1:69:0b:a0:e0:8c:04:fa:9f:2a:58:24:
bb:ca:26:bb:6f:d0:de:14:16:de:e5:17:c2:cc:ce:
03:41:ed:32:91:90:60:76:f9:54:29:0d:9e:6f:c4:
7f:46:17:bc:73:ef:45:2c:27:b4:61:71:b4:19:c3:
48:41:04:fe:3f:c3:20:c9:83:79:3f:12:d6:15:1e:
9f:5c:9f:ea:a0:93:97:ed:41:b0:87:ba:af:da:64:
b7:6c:26:bc:68:78:a5:61:75:51:21:a5:c7:61:c0:
d7:0f:cd:83:bd:75:78:ff:3a:e3:85:a0:c0:b4:b2:
b0:3f:69:77:35:d2:bf:ba:48:ae:15:16:7b:46:7f:
4f:68:08:85:14:2a:bd:7c:9b:29:b5:ab:0d:67:fa:
14:c3:e0:fc:b3:13:92:cb:4e:23:44:a0:7f:60:06:
d3:82:e4:16:9f:57:06:6d:45:ef:4a:ec:58:cf:8c:
13:ae:b4:03:84:ab:c2:e7:37:f9:fd:ef:d1:12:40:
c1:6a:eb:29:9f:9d:8d:33:11:c5:d5:c4:d0:61:90:
5c:20:6d:4a:ef:f4:c2:d3:01:23:04:50:61:eb:20:
b0:31:fd:1e:a2:dd:2f:30:17:83:22:fb:63:a0:03:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:03:B9:00:76:4A:30:3F:A3:81:1F:C0:D4:D4:D9:FB:12:2E:43
X509v3 Authority Key Identifier:
keyid:05:65:77:0E:1E:5C:77:8D:B0:6A:D6:3B:00:9F:91:D2:D3:47:46:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0565770E1E5C778DB06AD63B009F91D2D34746C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/0565770E1E5C778DB06AD63B009F91D2D34746C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:18:80:fb:82:61:5a:6a:66:4a:f2:de:de:36:45:70:c4:27:
27:cb:d8:18:73:cf:76:af:f3:2c:5d:7d:4e:20:aa:30:45:dd:
88:80:6b:d6:e0:f5:bb:a8:6d:2d:e9:13:65:f1:df:73:65:61:
85:26:c4:7a:ae:72:1a:1c:26:a7:1d:d8:55:c0:a5:80:a0:e2:
63:c9:0f:a1:e3:99:4b:58:02:60:89:a6:b9:c8:20:24:d4:fd:
d8:2f:57:1d:2e:db:a5:52:62:80:1c:cd:63:00:1d:d0:b0:b7:
d8:45:06:9b:39:0a:44:39:a2:07:fe:12:83:65:4a:d8:8e:dc:
7b:ed:bb:d7:d4:62:48:70:c3:92:20:9c:72:88:1b:25:df:d7:
80:ad:10:c0:46:10:bc:22:e2:11:6f:8f:6a:ab:98:13:5e:51:
6b:26:40:74:4f:08:21:55:65:97:d8:b5:34:1f:e3:8f:32:7b:
60:4c:48:92:2f:6b:3e:54:bd:60:17:ed:ac:4b:76:27:d8:b9:
58:42:fd:78:3b:4e:d3:1d:2d:31:50:3c:10:12:7c:cf:4b:4a:
1f:94:2a:e6:95:e6:04:85:41:d8:35:35:aa:2b:96:42:ec:22:
12:72:c8:53:d7:9c:d3:b5:3d:00:0e:c3:59:3b:a4:a5:9f:4f:
84:fd:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:45:26 2026 by rpki-client