
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json)
Hash identifier: bch3yRucX6Tba3fpYhTH4B2WWoJuKHVPRcIU83ndFxY=
Subject key identifier: 15:CC:09:B8:B2:6B:60:DB:42:E0:19:D0:FA:8C:84:9F:2B:A7:69:C6
Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D
Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D
Certificate serial: 080816F9492D88A42CD61921113A3203FB97CD1A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 16:20:30 +0000
Manifest this update: Fri 19 Jun 2026 16:15:30 +0000
Manifest next update: Sat 20 Jun 2026 18:53:30 +0000
Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: 6yWrjORLP85HN5/h/+AiD6M/E8w0woEvQrqL8aoGzo8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl
rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 18:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:08:16:f9:49:2d:88:a4:2c:d6:19:21:11:3a:32:03:fb:97:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D
Validity
Not Before: Jun 19 16:15:30 2026 GMT
Not After : Jun 20 18:53:30 2026 GMT
Subject: CN=15CC09B8B26B60DB42E019D0FA8C849F2BA769C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:98:cd:d5:c5:a8:3c:03:bf:7c:c0:d0:6d:
c8:39:fa:c3:a5:0d:7c:76:c9:b0:24:8e:bd:65:a2:
2c:04:f4:7c:73:c2:47:ef:8a:1a:b6:85:6f:eb:41:
d2:d2:38:cb:c5:5d:01:f9:f5:44:a9:34:34:ba:e6:
b8:5b:65:26:34:a1:cd:ab:21:50:63:19:78:6e:91:
86:d5:e0:1b:cc:55:b1:c3:02:ac:23:33:d7:f0:14:
69:5a:15:80:79:d3:2f:0d:15:4c:a2:9a:1e:0d:e8:
19:9d:a5:e2:47:ff:10:11:ac:c7:39:d6:c6:3b:29:
6c:57:b1:93:99:25:5f:f5:44:4c:24:37:c3:9b:29:
70:d7:72:e7:90:5f:72:4b:a6:ca:07:11:66:0b:41:
4b:b0:6c:e7:93:66:34:e2:92:06:ab:ce:fb:70:54:
6b:02:43:bd:29:95:e4:f4:99:19:ce:80:71:06:c8:
6f:b5:e2:54:4a:87:d7:24:09:59:f4:56:8d:4d:ec:
5c:6f:57:bc:0c:a4:71:60:8e:fc:2b:e0:11:10:fc:
95:60:20:21:6f:5d:a1:96:c6:0b:9b:fe:ef:2d:31:
c6:f4:fc:f2:bf:42:e6:a1:b3:62:32:7f:cc:c0:0c:
4d:1d:31:75:00:51:bd:b5:d7:23:37:31:58:54:f6:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CC:09:B8:B2:6B:60:DB:42:E0:19:D0:FA:8C:84:9F:2B:A7:69:C6
X509v3 Authority Key Identifier:
keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ef:82:3f:0f:37:7e:c4:f8:b0:e3:a9:d3:cf:c3:4f:b7:37:
0c:9f:5e:23:8c:c6:7d:33:1b:28:30:4d:d8:ed:0d:4d:62:37:
ad:06:48:b0:94:dc:6d:0a:e7:45:26:ca:d7:50:51:05:73:c1:
20:05:61:97:12:43:b6:02:ca:dc:36:d6:bb:fc:e4:f6:dd:97:
fb:9f:43:ed:89:92:fa:e5:da:91:3c:1f:fe:94:ac:01:25:67:
e8:2d:72:71:de:14:c9:13:be:75:52:6c:5a:51:92:0b:48:99:
5e:69:1b:b4:ef:b4:b5:2d:25:64:82:49:e5:57:03:3d:27:bb:
d7:2e:34:1a:9b:14:47:b9:a2:ab:d0:b6:c8:e5:0f:73:c8:dd:
b0:64:79:d9:e8:8a:6f:e2:3e:98:e1:b8:71:7d:5f:76:83:aa:
ff:63:03:0d:f4:c7:e0:d2:d8:dc:c3:24:d8:ab:e7:4f:ab:ae:
fc:e8:1b:13:e2:af:ac:19:ec:82:18:a0:22:c5:76:16:e4:0d:
be:93:e8:d9:74:3d:bd:81:2b:63:18:cb:15:ef:af:55:d0:5a:
d0:64:1c:88:86:7d:65:33:4b:99:8f:98:c1:b2:91:90:c8:b7:
b4:e7:c9:d8:b7:bf:53:c8:bb:fa:5e:ca:a2:04:6d:89:73:13:
cd:fe:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:04 2026 by rpki-client