
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
File: 271068E54464101C4BF23BC5A4339C1CA88116CD.mft (raw, json)
Hash identifier: YN8fnB+04EobkqtS544AQWFfuVJiOzQVPPk1AWNqfC0=
Subject key identifier: 70:9F:D7:38:77:6F:4E:29:30:B2:3E:90:C9:BA:0D:8E:65:6F:EA:AB
Authority key identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
Certificate issuer: /CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Certificate serial: 7DCA6C2D014DF08BF5B7EC2ABB11A09CF2BA4307
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 01:50:48 +0000
Manifest this update: Thu 17 Sep 2026 01:45:48 +0000
Manifest next update: Fri 18 Sep 2026 02:01:48 +0000
Files and hashes: 1: 271068E54464101C4BF23BC5A4339C1CA88116CD.crl (hash: jC1TPOdvatVsLLeIbXCPrN9jx/v1fOCNmqwIvF1Gz+E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ca:6c:2d:01:4d:f0:8b:f5:b7:ec:2a:bb:11:a0:9c:f2:ba:43:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Validity
Not Before: Sep 17 01:45:48 2026 GMT
Not After : Sep 18 02:01:48 2026 GMT
Subject: CN=709FD738776F4E2930B23E90C9BA0D8E656FEAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:1e:79:03:80:de:fa:c6:a3:89:93:49:48:
11:3d:2a:82:2a:93:b5:09:08:5f:46:a4:13:59:e4:
b1:46:cd:65:89:97:2d:b9:7f:7c:46:a6:18:42:80:
2a:1a:b1:db:d6:10:3e:ba:1f:1a:cf:5a:a4:3e:cb:
9a:5e:bd:8b:e5:b2:b0:eb:c0:d8:71:ed:1f:54:e0:
40:2a:8a:eb:f4:45:12:d2:22:dc:92:b9:44:fe:6b:
eb:12:05:5b:11:1d:83:c9:47:f2:de:60:ea:26:d1:
59:00:d5:52:02:ff:6e:4b:1c:c3:46:bb:0b:0a:5c:
38:ee:6e:0f:11:90:fd:f7:1e:5b:40:f3:e2:5d:b2:
e2:2f:2e:5d:f1:51:64:5d:66:5f:89:50:c4:ac:49:
c2:e1:11:16:b7:0e:18:fc:81:f7:4e:93:e9:9f:79:
ab:9d:e3:59:7e:4e:bf:23:9e:39:40:e8:33:f4:0d:
47:69:f0:9e:ba:24:9c:2c:22:67:f3:db:33:3a:89:
4f:04:45:1b:a8:de:11:a5:29:9c:8a:7f:9e:48:ed:
b2:91:10:29:56:10:47:66:63:35:60:36:50:16:46:
26:fe:bb:5d:db:da:6a:11:f2:f0:06:47:18:19:18:
08:99:9c:55:91:46:12:87:7d:1e:0d:18:87:d3:a1:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:D7:38:77:6F:4E:29:30:B2:3E:90:C9:BA:0D:8E:65:6F:EA:AB
X509v3 Authority Key Identifier:
keyid:27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:5d:ae:c3:b7:5d:1c:74:8f:04:db:14:40:13:38:f2:90:
3a:93:81:39:ff:f8:9f:12:24:e0:d6:ec:2b:33:53:9e:a4:f9:
6b:da:e7:7a:29:b5:83:ba:4c:08:2f:78:90:17:42:35:8d:14:
bc:d4:4f:a7:24:3e:b1:ae:4d:41:48:c0:90:9e:5d:91:5e:52:
4d:aa:22:39:60:d3:df:d8:f6:7a:0e:ab:d5:0b:d3:67:84:7c:
f6:1d:73:af:6b:00:e2:6e:0a:94:1f:27:46:04:8b:26:df:b6:
7b:6c:3e:78:0a:a3:f3:bf:88:7d:9c:b8:24:3c:bd:19:5d:84:
82:be:18:06:ad:ac:48:99:a3:9d:9f:37:bd:cb:e5:7e:29:2d:
c2:82:03:af:5a:d2:03:ac:79:fe:94:36:5a:38:f1:f6:79:33:
69:80:90:e4:7b:f5:ab:35:fc:54:ce:50:ea:bb:12:e7:25:ad:
41:24:98:a3:62:f9:cf:57:8c:48:a6:c7:c3:8c:99:b0:c7:16:
34:1f:a5:f7:64:1e:8f:66:50:3a:17:9f:b2:02:d7:b7:b2:36:
c5:23:cb:aa:79:11:76:05:c4:1f:0e:a9:c9:42:a0:a3:71:07:
55:33:84:82:9c:61:5d:73:08:16:e4:c8:b4:35:9f:e3:98:19:
47:ad:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:36:12 2026 by rpki-client