
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.mft
File: E475B1418A0F3872FB12B08F2239396D720C124D.mft (raw, json)
Hash identifier: 77FJiE/N3xjF8rlVMVkYwfiCvg9DxCrXyjRYtR1nIWQ=
Subject key identifier: CD:F6:54:61:67:44:D2:08:1D:4E:D1:39:AE:C7:73:F6:1D:80:EB:22
Authority key identifier: E4:75:B1:41:8A:0F:38:72:FB:12:B0:8F:22:39:39:6D:72:0C:12:4D
Certificate issuer: /CN=E475B1418A0F3872FB12B08F2239396D720C124D
Certificate serial: 192591895784DFF59CF1B8000FA98BFE5BE8A333
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E475B1418A0F3872FB12B08F2239396D720C124D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.mft
Manifest number: CC
Signing time: Fri 02 Oct 2026 23:35:14 +0000
Manifest this update: Fri 02 Oct 2026 23:30:14 +0000
Manifest next update: Sun 04 Oct 2026 01:31:14 +0000
Files and hashes: 1: E475B1418A0F3872FB12B08F2239396D720C124D.crl (hash: 21+2W/rBb9uHzzWD8JSVh3kymdP5UQAJ1UyNwBMdZII=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.crl
rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E475B1418A0F3872FB12B08F2239396D720C124D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:25:91:89:57:84:df:f5:9c:f1:b8:00:0f:a9:8b:fe:5b:e8:a3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E475B1418A0F3872FB12B08F2239396D720C124D
Validity
Not Before: Oct 2 23:30:14 2026 GMT
Not After : Oct 4 01:31:14 2026 GMT
Subject: CN=CDF654616744D2081D4ED139AEC773F61D80EB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:79:ed:e3:1b:ae:2f:11:41:9c:aa:80:8c:
10:32:70:7b:b4:03:48:cf:72:f2:27:1c:a1:3d:03:
9e:cd:6a:c6:c9:e0:a1:c1:d1:b0:16:ee:a3:a4:1d:
79:96:d0:0d:b3:af:de:4a:91:d8:22:7b:05:7b:a7:
02:40:d5:fb:ec:12:5b:9d:0c:9a:b4:d1:1c:9f:bc:
7d:84:36:ef:df:b6:51:5e:44:31:f9:70:17:d7:56:
db:46:ba:35:cf:ad:38:82:83:76:af:26:9c:73:8c:
91:7f:1e:11:ed:2e:6c:31:62:26:80:70:82:c4:bc:
b9:80:0e:79:c9:dd:6b:02:35:31:12:8d:29:43:28:
84:49:cd:b1:cc:10:59:41:71:16:f2:25:ff:1d:d5:
e8:ba:89:b5:40:a5:e7:1d:fe:70:b5:79:f6:37:ae:
a9:44:0c:73:a6:4a:06:eb:f6:84:ce:65:2d:43:b3:
b3:65:ec:db:35:99:cd:e6:4f:1b:46:23:af:24:ca:
96:eb:cf:89:0c:07:04:66:98:1d:ab:ca:66:40:5e:
c7:7a:a1:6b:9d:bd:f4:a9:50:94:51:75:2b:b1:0d:
22:78:3b:af:e9:2b:db:91:cd:6b:d2:d3:85:32:4b:
e3:77:f5:11:e6:d4:bc:4a:7d:f0:f6:b9:5b:eb:e9:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:54:61:67:44:D2:08:1D:4E:D1:39:AE:C7:73:F6:1D:80:EB:22
X509v3 Authority Key Identifier:
keyid:E4:75:B1:41:8A:0F:38:72:FB:12:B0:8F:22:39:39:6D:72:0C:12:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E475B1418A0F3872FB12B08F2239396D720C124D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8b:ed:db:af:db:2c:b4:6f:15:f3:6d:0e:8e:3e:f7:49:a0:
b4:6d:e5:9d:74:94:6a:fc:68:75:ba:a1:77:69:58:16:91:17:
37:13:dd:c4:74:10:ca:ba:5e:43:82:a5:b0:13:62:80:33:4c:
83:d1:a8:66:71:0a:6e:50:aa:ea:13:cf:57:56:1e:39:81:df:
93:ca:58:d0:83:64:5f:6c:c2:a8:4e:3c:0b:50:66:2c:65:7c:
e7:71:18:43:71:5d:9e:53:a0:5f:06:1b:9d:43:a8:f4:3a:70:
1e:9d:b4:36:f7:74:7c:91:c3:12:8b:95:a0:ff:5f:ce:e5:88:
e0:c1:21:05:f1:d2:6e:c3:38:ee:2d:36:77:13:9b:81:86:97:
a1:30:ed:ff:2b:84:b6:ab:54:9b:22:78:31:04:aa:30:77:52:
ce:d2:37:53:ea:bc:d2:17:7f:8e:72:03:c3:43:23:11:3e:44:
fb:c5:1c:bb:de:5b:51:e3:5e:26:e1:30:07:dd:d7:1a:0b:b7:
95:f5:b2:6a:fd:62:cc:63:a2:fd:35:57:8f:1a:99:eb:61:b2:
11:ab:05:a4:88:4e:5f:71:d6:ff:4c:74:ec:fa:f9:b1:5a:de:
bf:75:54:02:30:b3:02:7e:7d:48:ca:51:bc:96:10:53:e2:a8:
e1:cb:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:06:57 2026 by rpki-client