
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
File: 440F6B35B30CFEEB3F2B22851A2658050264D69E.mft (raw, json)
Hash identifier: 4ghU8Q40UuZ0pvwHD3PgLNxmAXLlr8sxYwwn5l3p1KM=
Subject key identifier: DA:7E:F1:53:1D:4B:DA:3B:90:D0:89:A1:95:F7:F8:92:9F:87:4B:B1
Authority key identifier: 44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E
Certificate issuer: /CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
Certificate serial: 541659B54331172542104ABFE374D0F239665E47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
Manifest number: D5
Signing time: Fri 09 Oct 2026 17:08:35 +0000
Manifest this update: Fri 09 Oct 2026 17:03:35 +0000
Manifest next update: Sat 10 Oct 2026 17:44:35 +0000
Files and hashes: 1: 440F6B35B30CFEEB3F2B22851A2658050264D69E.crl (hash: 9UuEfxuhvfib2+pGFDntswQdeJyZK1Xjiebm902CVk8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl
rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 17:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:16:59:b5:43:31:17:25:42:10:4a:bf:e3:74:d0:f2:39:66:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440F6B35B30CFEEB3F2B22851A2658050264D69E
Validity
Not Before: Oct 9 17:03:35 2026 GMT
Not After : Oct 10 17:44:35 2026 GMT
Subject: CN=DA7EF1531D4BDA3B90D089A195F7F8929F874BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:a8:10:bf:99:34:1d:80:24:64:61:b6:12:
dc:e6:c2:51:81:ab:b1:24:dd:ca:05:43:a8:09:4b:
f3:be:95:fd:f2:f4:da:a0:ef:26:60:f5:b8:27:c0:
c9:e9:c0:23:7c:27:b6:2e:be:77:dc:e7:aa:ba:80:
53:43:97:af:af:cd:6e:72:19:5a:00:1b:72:1b:27:
57:4d:a5:e0:9d:97:0d:77:f0:f7:4d:10:3b:59:f5:
d5:d9:72:1d:43:01:72:a1:5c:fa:03:53:dd:03:33:
41:d0:78:6a:db:cc:22:9e:47:79:c0:23:8b:9c:24:
14:d7:33:01:0e:6c:2d:ee:8b:e3:29:49:65:60:ef:
fe:2c:d1:0c:b5:ce:0e:05:a0:85:04:90:69:c2:85:
7d:b8:e7:a3:f0:22:68:b9:89:9f:01:ea:56:6d:87:
39:d8:96:01:a8:23:03:c1:fc:7d:df:e4:74:54:a4:
64:97:22:f8:95:85:d7:49:6d:51:f5:a2:8d:c9:16:
c6:f3:28:86:30:01:5c:70:84:74:1a:37:0c:21:a0:
a6:e6:94:1c:27:62:89:9d:79:3a:ae:99:03:b5:88:
8c:9e:77:1d:48:89:e7:ae:cb:3e:09:67:25:11:7f:
1c:fb:11:46:03:0b:1c:ef:23:27:81:1f:22:d2:32:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:F1:53:1D:4B:DA:3B:90:D0:89:A1:95:F7:F8:92:9F:87:4B:B1
X509v3 Authority Key Identifier:
keyid:44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:77:07:82:67:15:3b:00:95:32:c6:77:fd:25:16:e0:cd:
69:21:33:5f:12:09:bb:a7:49:62:d6:67:a8:08:21:32:e7:d0:
09:0a:68:b8:4e:15:9b:b7:1d:e9:b6:57:39:0c:f9:51:86:88:
83:45:53:07:7b:4e:d5:84:20:32:a5:59:fc:74:b4:d0:5c:fa:
7e:d0:47:43:dd:2a:9e:20:a3:0c:83:cc:16:4d:cd:3d:1a:98:
1f:95:fb:d4:f7:c4:01:61:b1:98:5e:40:29:9e:1f:58:c3:2b:
c2:6a:84:69:f8:d6:22:81:47:41:37:e3:d8:8e:83:84:8d:bb:
25:9b:a6:45:08:13:59:a2:90:9f:f2:51:a6:ca:23:ee:c3:19:
5e:e1:de:50:2b:28:63:48:38:cf:3d:8b:7d:a4:dd:6f:d4:2e:
6d:f9:38:83:a0:66:dd:65:f2:5a:50:44:cc:b6:09:38:2f:c6:
e3:dc:3d:8f:e0:9a:e4:34:88:02:eb:72:29:a7:9b:ce:19:b0:
d9:f3:53:7a:8e:91:ab:cc:b1:da:d9:88:73:fd:74:fb:d8:14:
62:81:56:19:83:71:e4:2f:c7:73:94:eb:23:3e:44:ce:f1:03:
0d:b5:4c:ea:a1:e8:53:a6:b1:25:b1:84:15:2b:c8:35:c5:80:
67:35:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:52:58 2026 by rpki-client