
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
File: CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft (raw, json)
Hash identifier: Ss8BwD4oqA8o0h/TUx2uWU0vG+8AytN985E/jNeMdyE=
Subject key identifier: F7:90:92:0D:E6:BC:F8:E8:93:83:05:F4:8A:B4:61:32:7B:49:51:C7
Authority key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
Certificate issuer: /CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Certificate serial: 3BCDE33727D75CCBB54A7E2B2D1CBD0D5E4C27D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
Manifest number: EB
Signing time: Sat 24 Oct 2026 21:25:45 +0000
Manifest this update: Sat 24 Oct 2026 21:20:45 +0000
Manifest next update: Sun 25 Oct 2026 21:39:45 +0000
Files and hashes: 1: CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl (hash: TrR0R5hzHNmf+OOtAdW8DMH1NdiSoPhuPKgne47okR8=)
2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: Om/3/8RVQVP4CmrlSjOFvYcq6slIyV0KgfonhTO00tc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cd:e3:37:27:d7:5c:cb:b5:4a:7e:2b:2d:1c:bd:0d:5e:4c:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Validity
Not Before: Oct 24 21:20:45 2026 GMT
Not After : Oct 25 21:39:45 2026 GMT
Subject: CN=F790920DE6BCF8E8938305F48AB461327B4951C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:1f:cd:77:3f:9a:c0:8e:3f:d4:e8:09:e9:
72:bd:84:3b:b1:af:d3:b7:50:ee:d8:43:e7:c2:89:
10:b4:19:13:69:bd:e3:3c:54:84:74:85:96:5a:e8:
60:4c:f4:2a:06:87:07:01:72:4b:1f:46:53:63:e2:
ad:23:d9:90:35:0f:07:45:20:13:81:df:ae:42:ee:
9c:e3:69:69:6b:65:49:e6:66:db:78:60:6c:b5:ef:
a3:b5:78:5c:55:97:cc:79:9f:00:0a:f8:1e:18:70:
e8:3d:b8:da:87:f3:03:55:8a:44:02:ec:c8:07:61:
df:69:92:db:c4:c5:7e:f0:71:62:9f:38:35:d1:c9:
ee:0c:4d:57:cb:ed:76:31:af:77:f7:b9:04:06:a5:
7f:50:f8:d3:3b:f1:55:c9:cd:bf:f6:f7:49:86:23:
5d:b8:8c:02:9b:0e:b1:b5:f1:73:ef:38:42:9e:0f:
ff:a3:33:fd:23:c2:38:f1:48:ca:ee:39:09:1c:32:
93:a7:14:0f:28:9e:14:9e:a0:b7:cd:97:df:fe:82:
85:a8:d1:8f:1b:a5:e7:6d:9b:1f:16:23:30:68:bd:
f8:e8:d7:5d:90:ba:01:83:7a:e6:23:98:f5:a5:98:
bc:4b:5c:9b:de:3c:12:9d:5f:6c:4c:2f:4b:13:69:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:92:0D:E6:BC:F8:E8:93:83:05:F4:8A:B4:61:32:7B:49:51:C7
X509v3 Authority Key Identifier:
keyid:CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:54:d1:cd:9b:bd:2d:6a:f3:79:6a:fb:7c:91:78:3a:28:
b2:fa:86:0f:23:8d:43:40:75:31:39:a0:0b:e1:77:3d:5d:b8:
c2:53:c4:22:64:90:83:aa:b8:cb:bb:a7:0c:b5:4b:b7:26:0f:
04:b5:20:30:d2:77:d4:7c:ff:e1:32:53:1d:3f:37:75:7f:27:
f4:c6:87:2a:fd:fc:da:68:a5:0f:ca:4b:2e:c6:81:7e:80:f7:
c5:90:23:37:af:43:a3:93:8b:7b:11:ad:7c:d8:a0:23:d0:df:
f5:22:42:86:da:97:d7:78:fb:8c:f5:8a:85:37:3f:f5:8e:bd:
3d:f3:d0:b2:b3:7d:73:67:2a:5f:6a:61:c2:9c:60:c5:c5:d6:
9d:64:12:a5:62:69:b5:1a:a0:6c:81:22:17:78:78:c5:64:e0:
9c:ff:67:b0:5f:5e:dd:b8:49:40:06:92:7e:a6:e5:b9:e5:21:
62:d1:01:31:ce:2b:0e:13:75:bf:bf:ef:ee:7e:3b:44:fc:c2:
d5:0c:d8:bc:a5:f0:d1:36:6c:05:8a:13:55:6f:3d:21:00:04:
c3:8a:2d:30:63:70:c5:c1:b2:73:da:88:79:4f:50:9f:02:63:
64:ca:ad:43:65:0e:a9:12:3d:fe:91:1b:a6:38:87:20:23:3f:
6b:bf:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:35:11 2026 by rpki-client