
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft
File: C53650EF45967BD821B00241E9B0355EE9A79B4B.mft (raw, json)
Hash identifier: hluocUahxdTo4/++s6gJwuArCXRYVpoO8j1pJV48CAQ=
Subject key identifier: 4F:D8:A8:07:B2:7D:35:FB:49:A8:6F:1A:51:71:F5:24:11:6C:1E:19
Authority key identifier: C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B
Certificate issuer: /CN=C53650EF45967BD821B00241E9B0355EE9A79B4B
Certificate serial: 0D68388415E5D88EBF296119D3CA7E5CE79D23FD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 09:20:10 +0000
Manifest this update: Thu 17 Sep 2026 09:15:10 +0000
Manifest next update: Fri 18 Sep 2026 11:32:10 +0000
Files and hashes: 1: C53650EF45967BD821B00241E9B0355EE9A79B4B.crl (hash: fQh9EeNCJzxK7WYaWqVMLOFG18qcFFWgJ2WCWKwTSvY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl
rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:68:38:84:15:e5:d8:8e:bf:29:61:19:d3:ca:7e:5c:e7:9d:23:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53650EF45967BD821B00241E9B0355EE9A79B4B
Validity
Not Before: Sep 17 09:15:10 2026 GMT
Not After : Sep 18 11:32:10 2026 GMT
Subject: CN=4FD8A807B27D35FB49A86F1A5171F524116C1E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:77:2d:98:13:c8:41:29:75:b5:da:61:f8:
16:64:95:47:7f:a5:bc:c8:69:87:f0:cd:5e:30:0e:
9c:c3:eb:7a:83:96:7c:c2:dc:b4:b9:c5:99:f6:ac:
a1:f9:3e:7b:e8:e5:ce:4c:4a:9e:b6:f2:94:1a:06:
31:cb:c6:be:4a:af:80:22:6e:e5:cd:d1:0e:ae:d5:
aa:19:c9:90:e4:f0:9d:9d:d2:ef:17:c2:6d:01:8e:
52:65:e5:f8:02:c3:21:f0:88:1f:c1:af:f4:d6:95:
43:6c:ca:ba:5d:d0:97:12:ec:f0:68:67:77:12:d1:
ff:1f:0b:f6:d2:bf:dd:57:5b:74:7e:c0:b7:5b:2f:
75:d9:8a:5f:f7:46:af:2b:0a:b3:81:f8:8f:06:ae:
d7:64:bf:37:2d:39:ac:ba:d7:7c:72:92:c3:57:33:
7d:21:59:b1:e2:e6:fb:ae:0f:d3:82:e4:d2:ad:64:
c4:38:c7:62:49:42:0b:56:7a:0a:7e:bf:b1:f9:bd:
16:be:1a:d1:75:e1:ee:e7:29:3f:46:ab:5d:b3:67:
ac:fb:6c:9b:d8:99:a1:6b:7e:55:6d:bc:0e:2d:8c:
57:ae:3f:21:f7:cc:60:03:f2:8d:66:9f:03:4a:c1:
86:8e:e2:72:29:97:29:f4:7b:d3:b1:16:d3:5b:73:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D8:A8:07:B2:7D:35:FB:49:A8:6F:1A:51:71:F5:24:11:6C:1E:19
X509v3 Authority Key Identifier:
keyid:C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:24:15:89:82:68:24:65:e0:b1:c4:50:8c:b2:82:a4:ea:2b:
93:bf:5e:11:7c:b9:df:c3:5a:ee:e3:26:dc:4b:e1:44:95:ad:
44:5b:fd:fb:fe:14:28:c9:ba:ff:87:a7:ad:40:7c:d6:c0:9d:
6f:84:bc:67:c1:37:27:8a:4b:f1:f3:9f:c6:9a:18:05:b3:ad:
3b:68:0d:b8:6d:aa:fb:a0:1a:69:35:f6:26:90:46:c6:10:29:
4b:73:38:e0:fd:07:88:cc:79:de:34:98:e5:62:a4:ff:cd:de:
ee:e6:6a:0f:f7:e4:29:f0:89:ff:86:3d:2c:a3:b2:0e:90:e3:
f2:20:05:c9:7e:5d:91:70:04:ae:24:55:7e:c8:15:e4:cb:ed:
ba:74:a4:56:d6:e5:e6:c3:a5:2c:6b:85:d2:96:ce:01:e2:e2:
29:aa:b2:6f:d2:7f:c7:ec:92:82:86:72:04:14:73:34:c2:6b:
4f:c6:f2:99:31:5b:68:bf:c6:8d:be:17:58:40:98:ba:58:44:
5a:89:4d:6f:bc:00:d3:44:3a:ca:f6:9c:9c:bc:43:6f:84:b1:
30:00:9e:e1:b2:1a:e4:f4:3c:03:8c:46:5d:fe:78:58:cd:45:
2c:5f:10:99:6a:4c:85:61:51:79:88:62:65:63:2a:b2:15:ce:
63:6d:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:24:48 2026 by rpki-client