
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
File: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft (raw, json)
Hash identifier: S6wHGjijpQ/buGjfvMokeRnGwj18EtYXdy1tDyzGOHU=
Subject key identifier: A3:1E:3D:13:83:F0:F0:FD:BF:7C:AB:08:B3:5A:C3:12:97:9B:AF:9B
Authority key identifier: 81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
Certificate issuer: /CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
Certificate serial: 07F3B62C048D06E921A38E47988CC72671E6AE1A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 11:43:05 +0000
Manifest this update: Thu 17 Sep 2026 11:38:05 +0000
Manifest next update: Fri 18 Sep 2026 15:34:05 +0000
Files and hashes: 1: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl (hash: YgJBpteqQurCvZjnNvTFvX9iLVAz8feoukrWIGEP6jA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl
rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f3:b6:2c:04:8d:06:e9:21:a3:8e:47:98:8c:c7:26:71:e6:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
Validity
Not Before: Sep 17 11:38:05 2026 GMT
Not After : Sep 18 15:34:05 2026 GMT
Subject: CN=A31E3D1383F0F0FDBF7CAB08B35AC312979BAF9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:75:9d:0b:76:bf:ca:e6:00:76:f8:16:ee:
a9:a5:e0:b9:aa:d5:9f:c5:60:06:1e:dd:a0:10:de:
91:a6:43:09:95:7d:50:bb:91:7d:61:ae:fc:99:b9:
49:a2:96:25:c1:3e:b0:23:50:f6:2b:1c:bc:fa:fd:
c9:23:b7:ec:70:6d:d4:1e:98:90:e6:e3:76:3b:99:
b1:5b:36:99:65:a9:8c:92:bb:90:70:ee:69:02:0b:
61:88:c6:53:d4:36:5c:f6:87:ec:21:59:02:92:f5:
07:9e:90:79:e1:73:d9:96:5f:97:d8:1c:4b:c0:0d:
68:d9:a4:33:1a:25:2c:3b:a3:e2:1c:08:a8:10:28:
0c:ba:92:91:ff:e0:e3:53:e4:2d:6a:e5:23:8c:39:
14:99:08:6b:fe:cc:b5:fa:da:ad:27:99:cb:88:1a:
a7:a3:6a:bc:ea:fa:34:9d:29:cf:3a:ae:fe:b9:50:
15:9a:80:dd:13:b8:f4:d1:a9:a2:22:0c:0a:e4:5a:
96:08:51:0b:d7:ee:a7:83:97:38:f1:55:d7:f8:54:
11:5a:6d:26:23:8e:9e:02:bf:d7:8f:1c:d1:db:fc:
d9:52:38:d6:f3:a4:d8:23:ff:70:01:73:25:97:8d:
e2:c8:db:ad:d1:1f:f3:5b:e3:41:67:e0:10:fd:82:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:3D:13:83:F0:F0:FD:BF:7C:AB:08:B3:5A:C3:12:97:9B:AF:9B
X509v3 Authority Key Identifier:
keyid:81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:10:fc:2d:c1:83:26:98:9b:de:44:ae:f4:22:bf:53:29:52:
db:23:b7:01:2e:43:ce:fc:f2:8a:82:d4:d4:e6:72:a9:d8:3d:
35:fe:d5:46:f9:66:d5:ad:56:89:7c:56:dc:1d:91:39:f9:41:
9a:0b:64:52:34:53:b0:6a:23:39:a1:de:04:06:68:ec:27:ed:
74:5c:08:c1:19:03:bb:aa:d6:3a:69:3a:6f:17:af:0d:de:65:
b9:99:fd:fa:a0:aa:c2:99:63:09:f1:ae:c5:67:89:ab:d1:f5:
70:ab:b6:36:2d:c0:e8:23:cd:f7:eb:c6:1d:51:64:7e:da:36:
3f:ab:6f:8b:c5:75:a0:2a:1d:54:9c:a6:36:88:d8:09:b3:0b:
f1:79:3c:7c:27:03:b1:07:e5:d1:7a:d9:96:f9:fe:d9:ce:ad:
cd:5a:82:da:d8:a7:ad:32:58:6f:a4:e9:a0:eb:c1:b7:2b:80:
6f:83:3d:5c:09:f9:5a:42:c0:67:4e:96:3c:f5:3f:9a:b5:38:
c6:41:22:0f:68:a4:00:23:76:a2:b0:d2:28:b0:4c:83:58:49:
49:ba:9a:97:74:e0:3b:08:0b:21:46:1e:4a:c0:3a:54:8a:55:
9a:e7:ab:06:fa:c8:08:bf:19:d2:06:87:10:7e:a5:29:81:c7:
0a:7f:ba:99
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUB/O2LASNBukho45HmIzHJnHmrhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3
QTVGM0U1MDAeFw0yNjA5MTcxMTM4MDVaFw0yNjA5MTgxNTM0MDVaMDMxMTAvBgNV
BAMTKEEzMUUzRDEzODNGMEYwRkRCRjdDQUIwOEIzNUFDMzEyOTc5QkFGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxHWdC3a/yuYAdvgW7qml4Lmq
1Z/FYAYe3aAQ3pGmQwmVfVC7kX1hrvyZuUmiliXBPrAjUPYrHLz6/ckjt+xwbdQe
mJDm43Y7mbFbNpllqYySu5Bw7mkCC2GIxlPUNlz2h+whWQKS9QeekHnhc9mWX5fY
HEvADWjZpDMaJSw7o+IcCKgQKAy6kpH/4ONT5C1q5SOMORSZCGv+zLX62q0nmcuI
Gqejarzq+jSdKc86rv65UBWagN0TuPTRqaIiDArkWpYIUQvX7qeDlzjxVdf4VBFa
bSYjjp4Cv9ePHNHb/NlSONbzpNgj/3ABcyWXjeLI263RH/Nb40Fn4BD9goOJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUox49E4Pw8P2/fKsIs1rDEpebr5swHwYDVR0j
BBgwFoAUgZbHa1BjJ9fbNV1ary90UnpfPlAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODlhZDMxNGEtNzY1Ny00OTAxLWI3ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1
MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3QTVGM0U1MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MTk2Qzc2QjUwNjMyN0Q3REIzNTVENUFBRjJGNzQ1MjdBNUYz
RTUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3
ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0
NTI3QTVGM0U1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAQQ/C3BgyaYm95ErvQiv1MpUtsjtwEuQ878
8oqC1NTmcqnYPTX+1Ub5ZtWtVol8VtwdkTn5QZoLZFI0U7BqIzmh3gQGaOwn7XRc
CMEZA7uq1jppOm8Xrw3eZbmZ/fqgqsKZYwnxrsVniavR9XCrtjYtwOgjzffrxh1R
ZH7aNj+rb4vFdaAqHVScpjaI2AmzC/F5PHwnA7EH5dF62Zb5/tnOrc1agtrYp60y
WG+k6aDrwbcrgG+DPVwJ+VpCwGdOljz1P5q1OMZBIg9opAAjdqKw0iiwTINYSUm6
mpd04DsICyFGHkrAOlSKVZrnqwb6yAi/GdIGhxB+pSmBxwp/upk=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:26:35 2026 by rpki-client