
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
File: ED0555AA515B40985A93B902D748993DD2FE4B8F.mft (raw, json)
Hash identifier: rdGnqtCZ9VyjLpdPHbbzNxiiz07C6XIRcNAYtlk+8hw=
Subject key identifier: 99:B9:D7:35:B7:9F:41:7A:04:D7:C0:AD:2A:3D:6E:FF:4A:5C:D5:B8
Authority key identifier: ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F
Certificate issuer: /CN=ED0555AA515B40985A93B902D748993DD2FE4B8F
Certificate serial: 71991D800E4160AC9F204E07A33B48776A9371A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 05:55:50 +0000
Manifest this update: Thu 17 Sep 2026 05:50:50 +0000
Manifest next update: Fri 18 Sep 2026 09:04:50 +0000
Files and hashes: 1: ED0555AA515B40985A93B902D748993DD2FE4B8F.crl (hash: 8M5tbzEg7yvX+GgrZ4tF1V6MQDEZKSScllx5OIccjKI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl
rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:99:1d:80:0e:41:60:ac:9f:20:4e:07:a3:3b:48:77:6a:93:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0555AA515B40985A93B902D748993DD2FE4B8F
Validity
Not Before: Sep 17 05:50:50 2026 GMT
Not After : Sep 18 09:04:50 2026 GMT
Subject: CN=99B9D735B79F417A04D7C0AD2A3D6EFF4A5CD5B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:78:93:a0:f0:87:82:c4:13:8e:7c:93:ab:3e:
fa:a9:94:24:ce:2a:61:e6:02:bf:02:79:77:b8:28:
54:ac:5d:a4:ca:f7:80:71:6c:9d:a0:45:83:83:0a:
f1:c4:95:8d:7b:41:b1:ab:fd:f2:1b:3b:39:f6:50:
a4:7f:bd:56:6f:37:6e:7e:28:88:bb:7d:99:84:dc:
79:d4:08:b5:80:6a:10:7f:45:78:3f:90:04:a8:8f:
58:24:fa:f0:89:e2:77:21:96:d2:4d:cd:96:67:76:
21:6f:dd:3c:54:92:2c:8d:d9:af:c0:b7:2f:fa:e0:
83:74:e5:73:77:9b:74:cb:cd:7d:16:e6:8a:e6:8b:
89:de:9c:8c:5c:04:9f:d5:a2:6e:e0:f5:ae:c2:aa:
9a:35:44:ac:b9:21:72:8a:ac:84:ea:3e:4d:d3:9f:
36:08:0f:3d:9d:ac:67:5d:d7:47:65:a3:86:38:14:
c4:e9:f5:4e:21:cb:5f:c5:cb:10:af:fc:57:a7:eb:
c8:13:a5:7e:1d:9b:df:57:f9:54:03:9e:44:d1:37:
21:92:14:74:06:e9:88:b7:24:c8:a9:da:83:55:5a:
c8:78:bb:6a:ac:cf:25:cc:cb:77:4d:44:2c:95:22:
38:c5:86:ae:6f:1e:c3:19:db:2c:7f:d9:c9:1f:76:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:D7:35:B7:9F:41:7A:04:D7:C0:AD:2A:3D:6E:FF:4A:5C:D5:B8
X509v3 Authority Key Identifier:
keyid:ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ea:52:1e:cf:64:7e:08:14:d7:24:ad:c4:5a:23:21:63:ba:
75:f7:ac:7c:71:58:16:a4:4c:ab:a6:42:c3:b0:93:bc:25:b8:
57:68:aa:cd:75:3b:2f:44:38:65:34:93:7a:b4:5e:3c:b4:ea:
ca:ce:f2:7e:fa:e7:b0:37:01:51:dd:ca:7a:ba:f8:ad:c5:6e:
75:c8:6f:39:bf:b5:75:cf:9b:bf:bc:bf:ca:2c:3a:97:d2:ee:
57:6d:d7:3b:b9:19:55:de:9d:24:1b:86:f3:86:b2:94:fd:c1:
e8:10:04:52:05:f0:de:4a:bc:90:72:a9:ca:1a:46:2b:68:e1:
ee:6d:b5:4c:ee:4f:95:2b:93:82:fa:46:0b:ed:3d:c2:d6:f7:
6b:95:6a:8a:cc:99:51:80:a2:5f:53:49:54:df:28:e9:8b:f1:
8d:b1:87:04:40:a3:cb:6e:66:d3:ab:0c:93:a1:7b:b1:5c:95:
92:88:42:6b:98:3c:33:69:01:c6:a6:64:51:f0:08:a8:cf:51:
b0:e6:6b:7b:0d:3a:79:91:70:2f:6d:42:7f:98:f8:e0:6c:14:
78:19:78:e4:0b:12:17:b4:e9:5d:7b:dd:eb:51:32:7e:9a:d3:
0d:f6:31:d5:eb:ba:6c:15:2d:6e:3a:95:2c:aa:4c:bc:1a:64:
2c:3e:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:31:46 2026 by rpki-client