
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft
File: 94D293E7CB8D73306142803A86C1806360A0C9BA.mft (raw, json)
Hash identifier: KpkTn9ynio/85nw7N43xIQqQfkl6kb5/69jg2h+1wSE=
Subject key identifier: 8B:7A:82:FC:D0:44:9C:61:50:21:E6:50:25:F1:19:E3:37:77:4E:20
Authority key identifier: 94:D2:93:E7:CB:8D:73:30:61:42:80:3A:86:C1:80:63:60:A0:C9:BA
Certificate issuer: /CN=94D293E7CB8D73306142803A86C1806360A0C9BA
Certificate serial: 62675CC2EC33F646F9E81B00621563C0860B58EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94D293E7CB8D73306142803A86C1806360A0C9BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft
Manifest number: 41
Signing time: Sat 20 Jun 2026 01:01:00 +0000
Manifest this update: Sat 20 Jun 2026 00:56:00 +0000
Manifest next update: Sun 21 Jun 2026 02:03:00 +0000
Files and hashes: 1: 94D293E7CB8D73306142803A86C1806360A0C9BA.crl (hash: XPy5FFnywMGjbLtwEMo960aSLHykIsy89rjBLqv+UKQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.crl
rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94D293E7CB8D73306142803A86C1806360A0C9BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 02:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:67:5c:c2:ec:33:f6:46:f9:e8:1b:00:62:15:63:c0:86:0b:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94D293E7CB8D73306142803A86C1806360A0C9BA
Validity
Not Before: Jun 20 00:56:00 2026 GMT
Not After : Jun 21 02:03:00 2026 GMT
Subject: CN=8B7A82FCD0449C615021E65025F119E337774E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:35:15:62:ab:03:08:02:ad:cb:9b:95:68:
18:04:45:f1:e9:7e:c6:9b:12:05:b6:9b:22:23:84:
b2:82:3f:44:5d:a8:ab:25:17:83:0b:4d:de:74:f1:
1e:d6:63:72:c1:1f:a9:6d:51:8a:25:7f:e9:41:fc:
c9:59:19:05:0a:c2:4c:7f:a0:01:58:0d:59:92:d4:
e3:dd:b9:60:84:aa:04:1d:ec:60:91:87:8c:7d:37:
d6:54:be:a4:ee:95:fb:0b:f5:31:49:e2:ea:c6:af:
7c:6c:a7:51:e6:71:93:8e:17:66:81:57:71:0a:4f:
23:a7:09:90:0e:df:75:9b:da:05:fe:ed:de:75:ef:
43:7a:6c:7a:15:a2:df:09:f8:16:a6:9d:f1:ff:1d:
64:cf:9e:3d:b6:76:0f:bf:23:2c:cf:c8:b1:a3:18:
c2:48:f2:88:ed:8e:7f:a5:c4:2f:85:6c:6c:c8:1a:
30:36:61:09:8a:53:75:61:75:5f:9f:10:c8:e9:0b:
1c:5b:3c:56:98:a0:69:07:81:e1:1f:82:ad:69:f4:
98:b1:93:51:3e:ac:e7:84:a2:0a:0a:c8:b5:ff:61:
81:c3:50:ba:77:e5:30:f8:30:cb:d4:3e:b8:60:e3:
48:a2:4f:a1:19:4a:af:89:df:51:25:70:2c:f4:5b:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:82:FC:D0:44:9C:61:50:21:E6:50:25:F1:19:E3:37:77:4E:20
X509v3 Authority Key Identifier:
keyid:94:D2:93:E7:CB:8D:73:30:61:42:80:3A:86:C1:80:63:60:A0:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94D293E7CB8D73306142803A86C1806360A0C9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:50:ee:7a:6f:91:ce:23:03:08:f3:78:d0:d9:5b:42:c6:11:
57:de:84:c3:17:c8:14:8c:88:7e:62:01:7d:38:25:34:01:f6:
e8:34:f7:db:60:43:1a:35:6b:88:66:46:91:1a:45:2f:a7:e5:
72:f4:f4:0e:28:e5:b9:51:cb:d0:77:9e:bf:d8:47:8b:ee:34:
ab:bd:08:82:f4:6f:ee:1c:40:4c:19:0b:76:3b:6b:37:21:a6:
54:42:5f:f0:c0:64:65:49:47:af:d7:b4:ac:ee:32:ca:d1:5b:
96:d7:d3:ae:cd:49:ea:4a:cf:bc:f2:79:8c:5e:0e:82:5d:8c:
3d:5d:07:7d:53:9a:fe:fd:fb:10:23:05:06:f0:c3:2f:4c:ca:
90:36:37:82:39:11:87:9b:35:a3:53:f2:3d:00:82:ab:a0:db:
6d:3f:15:bc:d3:0e:9e:d1:57:f3:17:b2:9a:16:d8:20:1f:e0:
f4:21:d7:fd:8b:da:82:b3:bc:ad:9e:39:2d:fa:49:af:30:09:
a4:52:d2:d7:e0:1c:25:55:29:38:47:c8:15:75:da:95:44:f8:
be:e2:9d:f8:e6:f1:da:8b:b4:bd:84:a4:bd:a0:ad:57:ad:0c:
00:ed:84:ef:4f:7e:cd:ae:e1:2e:f0:1d:73:91:a6:5e:dd:e0:
0b:71:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:10 2026 by rpki-client