
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft
File: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft (raw, json)
Hash identifier: mVHq7JuwFf6xqrInvoqEUJXhZTYGK3tDt3MZA4cHuQU=
Subject key identifier: A1:8A:07:BD:AD:27:F4:F8:BC:2F:C1:32:48:D9:83:CB:E2:3B:B2:2A
Authority key identifier: F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92
Certificate issuer: /CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92
Certificate serial: 29E76B126B224E969D1FF1B41281822DE74D41A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft
Manifest number: 40
Signing time: Fri 19 Jun 2026 13:37:28 +0000
Manifest this update: Fri 19 Jun 2026 13:32:28 +0000
Manifest next update: Sat 20 Jun 2026 15:04:28 +0000
Files and hashes: 1: F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl (hash: 0Rh1UAIFT6lSc7nWA2Dl1lYqZ0kmA7ANPeaW71cZGrc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl
rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 15:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e7:6b:12:6b:22:4e:96:9d:1f:f1:b4:12:81:82:2d:e7:4d:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F96E6B3F2C8CDED68463F5F24C79EB2429C92F92
Validity
Not Before: Jun 19 13:32:28 2026 GMT
Not After : Jun 20 15:04:28 2026 GMT
Subject: CN=A18A07BDAD27F4F8BC2FC13248D983CBE23BB22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:60:d3:34:e5:14:33:b4:ef:43:d9:d7:fc:
cd:b7:5c:4a:78:4d:13:94:e9:39:35:41:64:39:41:
3c:00:57:17:96:ac:cd:e5:a6:e0:37:31:65:f6:e0:
11:05:42:f3:ad:01:b1:fe:59:86:35:e2:ae:ec:96:
bd:25:29:f9:3c:a9:53:d5:b8:bb:03:a7:e6:d2:6d:
fb:14:74:16:a0:26:ef:ab:42:d5:bf:0f:45:28:f6:
47:60:96:f1:e7:bb:08:60:f9:6d:8a:4e:44:71:db:
79:d8:36:a6:8a:40:6e:59:bd:e3:f4:a8:35:f7:97:
bb:51:8c:6f:5b:77:74:d9:fd:04:23:52:81:10:a8:
57:ae:60:ac:14:ec:d7:de:1f:d6:c8:92:6a:56:49:
c1:52:ce:12:d8:df:21:ee:11:b3:db:3f:8c:00:a0:
e6:c5:46:5f:e0:89:23:e0:d6:6e:3d:e9:30:ab:eb:
e2:2e:06:34:24:b9:b1:5b:fb:20:d1:c7:00:f3:db:
e6:cc:0e:89:bf:5d:6e:9b:b0:f1:87:46:74:da:c5:
73:9d:44:61:82:cf:62:ac:bc:7d:ff:f9:fa:8b:d8:
11:f1:66:7f:58:fd:54:e5:b7:2a:57:a1:59:b7:60:
62:44:70:f3:7b:07:d1:17:5c:f8:62:bb:aa:79:dc:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:07:BD:AD:27:F4:F8:BC:2F:C1:32:48:D9:83:CB:E2:3B:B2:2A
X509v3 Authority Key Identifier:
keyid:F9:6E:6B:3F:2C:8C:DE:D6:84:63:F5:F2:4C:79:EB:24:29:C9:2F:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/F96E6B3F2C8CDED68463F5F24C79EB2429C92F92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:79:7e:b3:09:4a:e2:46:c1:4f:fe:76:76:06:de:22:8b:3d:
69:51:92:e0:34:15:23:6e:a1:e6:30:c8:bd:18:c4:a7:86:90:
84:c9:b4:0c:85:23:db:44:f5:de:ce:fc:d5:37:59:9e:51:e3:
f9:5e:39:49:59:f0:55:5b:6c:1d:c8:34:80:2c:86:7d:22:a1:
dd:97:17:5d:d4:3f:be:9e:4e:a1:c0:b9:f4:c2:ee:34:d8:31:
fe:ca:48:f4:14:77:00:9f:34:3e:6b:e3:88:59:85:17:dc:bc:
c0:f7:ad:dd:9f:36:ba:9b:cd:47:a8:7a:49:76:37:8b:b0:b8:
db:55:aa:f0:50:13:a6:27:04:65:bb:75:c9:95:06:95:84:dd:
e4:bf:dd:dc:e4:1b:98:2f:27:0c:98:58:f9:3b:49:64:dc:97:
ec:ac:d8:5c:2b:08:ea:69:4f:32:c4:5f:6a:78:15:9f:6c:0c:
c6:5b:d2:3e:f1:4a:a8:cf:94:ed:42:ec:fc:ab:24:f2:39:db:
f6:3d:ae:df:80:60:9a:47:e5:61:00:ad:e7:4d:73:19:62:b8:
03:0d:26:fd:a8:58:89:d3:2c:96:18:ee:d2:dd:dc:14:fa:b4:
14:24:b3:4a:87:b8:cd:5b:84:de:6e:f4:1b:ba:8c:8e:46:42:
7a:87:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:35:38 2026 by rpki-client