
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft
File: 2262D2B74952F0176503770B9C0C005B5CF77FA2.mft (raw, json)
Hash identifier: pTgLmOTRs9I2Wqb4WQKP9F/03S4co8SQ/22+mdyALQ4=
Subject key identifier: 25:24:D2:0C:27:D4:42:05:6A:B4:36:6B:AF:0E:D5:65:E2:9F:76:E6
Authority key identifier: 22:62:D2:B7:49:52:F0:17:65:03:77:0B:9C:0C:00:5B:5C:F7:7F:A2
Certificate issuer: /CN=2262D2B74952F0176503770B9C0C005B5CF77FA2
Certificate serial: 1C45C19D8E060346D4C934169E4E1FDC523ADCC1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 05:35:26 +0000
Manifest this update: Thu 17 Sep 2026 05:30:26 +0000
Manifest next update: Fri 18 Sep 2026 05:48:26 +0000
Files and hashes: 1: 2262D2B74952F0176503770B9C0C005B5CF77FA2.crl (hash: LwwiztwH2FDWtRzEx6yPqW4PieAUYjmqWj6Yq80TtyU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.crl
rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:45:c1:9d:8e:06:03:46:d4:c9:34:16:9e:4e:1f:dc:52:3a:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2262D2B74952F0176503770B9C0C005B5CF77FA2
Validity
Not Before: Sep 17 05:30:26 2026 GMT
Not After : Sep 18 05:48:26 2026 GMT
Subject: CN=2524D20C27D442056AB4366BAF0ED565E29F76E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:83:da:e5:fa:1a:b8:28:82:64:b3:8f:02:
0c:85:56:5f:a2:47:88:88:b3:a9:7e:d5:b2:75:7f:
f3:bd:9c:74:65:64:c7:39:97:34:f7:3f:49:25:8f:
4f:26:0e:a1:aa:67:eb:d8:2b:dc:27:b8:53:d8:5a:
d1:21:d0:85:68:23:5c:bf:a3:cc:65:f4:e8:9e:54:
a8:b2:f8:20:61:4e:86:6b:63:41:5f:40:eb:64:b3:
5c:25:f3:1f:02:53:14:35:bf:9e:06:50:7f:22:31:
d6:79:56:4c:fe:97:51:d4:d3:22:ef:99:32:6c:7b:
1b:f1:53:ab:84:fc:84:ed:9f:68:0f:ad:6b:df:e6:
f6:20:e2:40:2b:db:e8:80:8c:1f:43:46:fd:9f:11:
8f:37:a5:d2:99:86:2e:af:41:83:16:d5:7d:38:47:
3a:4d:a6:4f:b9:96:52:9e:98:ed:c2:1e:4a:51:f9:
f4:f9:a5:82:19:8b:fc:dd:3e:d6:84:0d:03:00:c7:
5f:c2:f6:e9:28:56:42:ef:61:0f:d3:86:4f:38:e4:
51:67:e4:75:4e:02:af:67:08:72:c3:42:86:25:60:
01:53:dc:94:cf:98:8a:5f:e4:6a:a6:f1:69:e4:ad:
10:72:21:bc:99:2a:a1:10:28:84:88:fc:12:22:0e:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:24:D2:0C:27:D4:42:05:6A:B4:36:6B:AF:0E:D5:65:E2:9F:76:E6
X509v3 Authority Key Identifier:
keyid:22:62:D2:B7:49:52:F0:17:65:03:77:0B:9C:0C:00:5B:5C:F7:7F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2262D2B74952F0176503770B9C0C005B5CF77FA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/2262D2B74952F0176503770B9C0C005B5CF77FA2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:85:89:d2:e4:3b:f3:7b:53:af:62:8c:13:7e:6e:a5:88:97:
da:cb:a8:a8:b2:d9:be:d9:33:78:fc:04:99:28:96:5a:8a:1e:
c2:cf:66:26:4c:f7:18:09:f9:ca:ee:7e:65:be:3c:42:a8:ef:
b3:9d:9d:26:71:92:9b:df:0c:65:b5:e7:92:8f:f9:53:29:6c:
ec:fb:5e:05:8d:d4:7a:df:11:ba:83:02:14:72:90:ec:e4:6f:
d2:25:81:4d:85:ba:89:33:e4:4a:7c:58:8f:e0:cb:54:6d:00:
9c:93:84:71:55:9b:0e:9e:26:c8:26:f9:f9:e3:25:d2:aa:c2:
0c:ff:f8:96:57:33:13:6b:4a:59:40:89:ee:e1:f7:39:cb:d9:
b3:1c:18:39:ec:fa:ae:ca:9a:c4:1a:f4:22:f9:7a:ed:58:ed:
49:d0:46:d5:8d:df:b2:99:f4:aa:7c:19:c3:23:55:44:bc:57:
59:a1:13:5a:6a:06:df:c0:96:4d:ef:78:c7:02:9f:05:7a:8f:
12:19:d1:f7:5c:5b:8f:1e:b0:9a:95:e9:f6:8a:06:63:b6:e1:
43:5a:80:25:e2:4a:3f:e2:14:12:d0:10:38:11:0b:e1:c8:21:
a7:84:2d:58:f9:63:c4:7f:b5:73:8c:da:14:e5:15:c9:21:c0:
ce:8e:05:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHEXBnY4GA0bUyTQWnk4f3FI63MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2MkQyQjc0OTUyRjAxNzY1MDM3NzBCOUMwQzAwNUI1
Q0Y3N0ZBMjAeFw0yNjA5MTcwNTMwMjZaFw0yNjA5MTgwNTQ4MjZaMDMxMTAvBgNV
BAMTKDI1MjREMjBDMjdENDQyMDU2QUI0MzY2QkFGMEVENTY1RTI5Rjc2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeYPa5foauCiCZLOPAgyFVl+i
R4iIs6l+1bJ1f/O9nHRlZMc5lzT3P0klj08mDqGqZ+vYK9wnuFPYWtEh0IVoI1y/
o8xl9OieVKiy+CBhToZrY0FfQOtks1wl8x8CUxQ1v54GUH8iMdZ5Vkz+l1HU0yLv
mTJsexvxU6uE/ITtn2gPrWvf5vYg4kAr2+iAjB9DRv2fEY83pdKZhi6vQYMW1X04
RzpNpk+5llKemO3CHkpR+fT5pYIZi/zdPtaEDQMAx1/C9ukoVkLvYQ/Thk845FFn
5HVOAq9nCHLDQoYlYAFT3JTPmIpf5Gqm8WnkrRByIbyZKqEQKISI/BIiDtkFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJSTSDCfUQgVqtDZrrw7VZeKfduYwHwYDVR0j
BBgwFoAUImLSt0lS8BdlA3cLnAwAW1z3f6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMxMzI4Y2ItZGQ0OC00M2JiLWIzMWYtMDdlYjgwMzBjOGY0LzAvMjI2MkQyQjc0
OTUyRjAxNzY1MDM3NzBCOUMwQzAwNUI1Q0Y3N0ZBMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMjYyRDJCNzQ5NTJGMDE3NjUwMzc3MEI5QzBDMDA1QjVDRjc3
RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMxMzI4Y2ItZGQ0OC00M2JiLWIz
MWYtMDdlYjgwMzBjOGY0LzAvMjI2MkQyQjc0OTUyRjAxNzY1MDM3NzBCOUMwQzAw
NUI1Q0Y3N0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+FidLkO/N7U69ijBN+bqWIl9rLqKiy2b7Z
M3j8BJkollqKHsLPZiZM9xgJ+crufmW+PEKo77OdnSZxkpvfDGW155KP+VMpbOz7
XgWN1HrfEbqDAhRykOzkb9IlgU2Fuokz5Ep8WI/gy1RtAJyThHFVmw6eJsgm+fnj
JdKqwgz/+JZXMxNrSllAie7h9znL2bMcGDns+q7KmsQa9CL5eu1Y7UnQRtWN37KZ
9Kp8GcMjVUS8V1mhE1pqBt/Alk3veMcCnwV6jxIZ0fdcW48esJqV6faKBmO24UNa
gCXiSj/iFBLQEDgRC+HIIaeELVj5Y8R/tXOM2hTlFckhwM6OBVM=
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:52 2026 by rpki-client