
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
File: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft (raw, json)
Hash identifier: 34VQQVff4gnPVkimTtsISrtrHRHXWeEisFdjw97XA+c=
Subject key identifier: D1:27:34:24:03:75:AC:EF:48:43:B8:79:91:30:66:0C:A4:6A:CF:70
Authority key identifier: 91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41
Certificate issuer: /CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41
Certificate serial: 2187F5EB46D301A9E20BFBEF08A61AE59987375B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
Manifest number: ED
Signing time: Mon 26 Oct 2026 22:07:54 +0000
Manifest this update: Mon 26 Oct 2026 22:02:54 +0000
Manifest next update: Wed 28 Oct 2026 00:43:54 +0000
Files and hashes: 1: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl (hash: QdOobrHqCmx26ZSfd2VKWAuZRZurP4jXKK9ZlC7Gick=)
2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: KARQhCrE6x4QilAtBVcaX71G9RZ5SUbJQcCY3G68Dvc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl
rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:87:f5:eb:46:d3:01:a9:e2:0b:fb:ef:08:a6:1a:e5:99:87:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41
Validity
Not Before: Oct 26 22:02:54 2026 GMT
Not After : Oct 28 00:43:54 2026 GMT
Subject: CN=D12734240375ACEF4843B8799130660CA46ACF70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:df:63:e5:15:f5:6b:17:38:b7:23:6e:5b:
7d:68:09:d8:1e:da:31:d5:07:be:4a:9e:ed:63:fd:
b4:19:c2:49:d5:f2:87:de:ce:e7:93:d4:35:38:f8:
d2:9c:f6:79:c6:dd:16:c1:2a:da:15:19:91:11:00:
be:cb:16:14:12:02:09:bf:33:0a:cb:ae:48:ed:da:
f4:98:1c:f3:63:fd:4d:fb:2c:37:58:32:bc:d5:78:
2d:fa:ed:ce:a2:35:b4:3a:5a:9c:30:d9:9d:e8:2d:
b4:42:df:41:b9:c5:61:a9:9f:6b:39:0f:4b:3b:b3:
bc:91:18:95:1d:58:bb:4e:68:99:38:d8:5e:e6:3c:
1c:c9:66:2c:b9:b4:12:22:c5:0e:4f:4f:1f:04:f1:
bb:ef:65:fb:f7:33:01:15:a1:34:8c:7d:c7:ec:0e:
a6:69:3d:17:d8:8b:8c:ee:b3:57:83:d8:a1:ac:33:
ce:f7:63:fa:0d:5d:86:9c:fa:83:ab:5b:41:e3:89:
b7:dd:2a:54:4b:20:9b:44:be:ac:d6:a7:1d:0e:4e:
c7:de:2c:0e:5b:6a:30:3d:b0:38:ce:5d:da:11:c1:
7b:81:06:cb:28:7e:aa:7a:b7:da:e2:68:8b:62:c2:
d7:fd:2e:8a:df:d2:39:be:52:f1:2f:82:19:2a:45:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:34:24:03:75:AC:EF:48:43:B8:79:91:30:66:0C:A4:6A:CF:70
X509v3 Authority Key Identifier:
keyid:91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:39:07:c3:42:84:4d:87:11:00:d8:e2:91:e9:3f:cb:f5:fa:
b1:30:b3:9d:7c:82:9c:2a:8c:9d:be:db:5e:9e:8f:1e:4d:f5:
cd:44:62:e6:fb:37:4c:6f:75:23:78:63:71:a3:ff:6b:77:66:
dc:8d:97:d1:07:2c:f4:99:f6:fd:7c:cb:35:ea:c6:50:a6:56:
6b:13:06:96:2d:e3:8b:d2:24:9c:18:22:6d:e6:b6:46:04:fa:
4e:6f:fa:06:9e:3c:61:ea:92:42:3c:ec:64:b7:c8:5b:26:de:
15:e3:a8:12:1e:98:cf:5f:cb:61:db:3a:31:15:dd:f4:4c:dd:
52:2e:ee:10:0e:b7:ef:8d:7a:1b:2f:82:89:a1:d5:a4:e7:5f:
4b:9a:77:b2:85:bd:5c:5d:8a:b6:bd:03:36:dd:35:6b:58:08:
65:39:24:21:e7:69:75:c4:56:30:54:c8:6d:b1:b2:2a:ec:b9:
c1:9b:ae:2e:2f:f2:53:81:32:61:25:8b:6f:ff:ab:a4:f2:3a:
3d:14:3d:b9:88:12:8f:d8:92:68:ab:40:10:88:75:15:4a:04:
5c:c2:7b:9f:4a:4b:c6:2c:33:19:a0:4f:b5:6a:13:ce:c7:51:
30:3d:d9:6f:c6:05:65:d9:56:08:e7:ad:67:61:73:c7:53:46:
de:2d:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:20:37 2026 by rpki-client