
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft
File: E978EBFAC3752F5D920856938CCD5CB512D8A763.mft (raw, json)
Hash identifier: Nt6cu3Ttq2QzP13ZIvUnd0Ysv0XvcBQQeE/R06OhjxA=
Subject key identifier: 6C:60:92:CC:18:A4:B3:10:37:64:21:9F:59:5D:D5:F0:C7:F8:AB:F1
Authority key identifier: E9:78:EB:FA:C3:75:2F:5D:92:08:56:93:8C:CD:5C:B5:12:D8:A7:63
Certificate issuer: /CN=E978EBFAC3752F5D920856938CCD5CB512D8A763
Certificate serial: 076E7DBBE1A3078DC2FDD5D99AA89E782DEBA375
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 19:30:34 +0000
Manifest this update: Tue 22 Sep 2026 19:25:34 +0000
Manifest next update: Wed 23 Sep 2026 23:25:34 +0000
Files and hashes: 1: E978EBFAC3752F5D920856938CCD5CB512D8A763.crl (hash: DHRe8MPiGKtsIgxdN6898tHQG6oLcH/5HH6mmS+6a+Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.crl
rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 17:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6e:7d:bb:e1:a3:07:8d:c2:fd:d5:d9:9a:a8:9e:78:2d:eb:a3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E978EBFAC3752F5D920856938CCD5CB512D8A763
Validity
Not Before: Sep 22 19:25:34 2026 GMT
Not After : Sep 23 23:25:34 2026 GMT
Subject: CN=6C6092CC18A4B3103764219F595DD5F0C7F8ABF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:e3:f3:cb:45:6e:79:86:9c:c6:1b:9f:55:
6e:ed:d2:92:e2:04:4c:f9:ef:99:5d:fe:8c:09:20:
37:9c:fe:50:a3:59:ad:56:48:9a:47:3d:79:8f:d1:
e1:12:f0:71:1d:f0:cf:9a:23:67:42:e2:1f:8b:34:
e2:c3:6e:90:ae:b1:0b:50:b0:39:7b:77:2c:f6:46:
6e:21:bf:0d:56:4a:2c:97:80:8d:e7:5c:24:5e:04:
eb:53:2d:48:a0:8b:3f:56:e2:6d:e8:f9:11:ee:ff:
e8:c5:fb:d4:99:7d:04:63:5e:f4:63:1c:d0:c0:c9:
ad:c8:13:42:16:3a:d2:fa:47:25:2f:e0:7f:a9:b9:
08:e0:fb:4f:9d:c0:45:73:e9:22:1c:49:8a:34:76:
78:c4:f0:9b:11:7f:f1:f7:0d:a7:48:42:06:78:b8:
46:5c:51:04:9d:83:43:15:90:a8:88:f3:02:b7:2d:
2f:ef:2b:bd:c9:1e:8f:0d:b8:28:a9:f2:9d:2f:4b:
89:a8:29:7c:58:03:6c:d7:27:ce:bf:11:65:e2:63:
45:73:b9:c2:f9:57:14:03:88:7a:b8:aa:81:a9:ae:
01:35:4f:95:71:79:ff:1b:4f:5e:48:c1:80:5f:ce:
e5:65:4a:99:f3:f9:24:0e:40:79:15:72:8c:54:55:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:92:CC:18:A4:B3:10:37:64:21:9F:59:5D:D5:F0:C7:F8:AB:F1
X509v3 Authority Key Identifier:
keyid:E9:78:EB:FA:C3:75:2F:5D:92:08:56:93:8C:CD:5C:B5:12:D8:A7:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/E978EBFAC3752F5D920856938CCD5CB512D8A763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0b:4d:89:7d:39:84:20:36:6b:4d:0c:1e:49:8c:78:f7:f6:
c9:35:d7:6c:ca:41:b5:41:c2:10:80:d5:88:14:cc:93:b5:84:
a9:5d:ee:0a:b8:33:b1:70:8b:79:40:df:51:e7:64:ca:de:1a:
14:9d:43:74:bc:c9:16:da:f8:02:6e:16:5b:24:f3:bc:b8:07:
55:bb:34:03:3e:31:53:d5:d5:1d:f7:ac:95:95:35:8f:50:fb:
e9:d3:a2:5c:e8:3f:4f:b5:ad:ff:5a:2f:65:d3:ad:ee:ef:4f:
98:7c:a6:14:14:6f:86:e3:98:a5:41:0c:9f:6d:ad:f6:83:00:
fc:b5:7f:f2:90:ee:d9:53:d9:6c:2c:63:e9:6d:a9:23:5e:0c:
3d:3b:7c:bb:81:53:c3:ee:5f:31:48:85:00:65:b1:4b:75:9f:
e7:80:66:69:d4:ff:31:b5:5f:af:a6:dd:b0:81:7d:62:ca:1b:
82:86:90:10:8c:a2:fd:5c:6c:b8:5b:3d:ee:15:5c:b5:c2:5c:
6e:7f:0f:19:8a:46:0b:32:32:fd:29:cc:98:ca:a3:81:24:14:
8b:5b:77:44:57:3a:0a:40:71:d2:7a:04:07:ab:96:3f:6a:ed:
c3:a5:6a:62:7c:19:6a:c9:ad:5f:48:15:c2:ab:86:d8:72:90:
6d:9c:2e:3f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUB259u+GjB43C/dXZmqieeC3ro3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3OEVCRkFDMzc1MkY1RDkyMDg1NjkzOENDRDVDQjUx
MkQ4QTc2MzAeFw0yNjA5MjIxOTI1MzRaFw0yNjA5MjMyMzI1MzRaMDMxMTAvBgNV
BAMTKDZDNjA5MkNDMThBNEIzMTAzNzY0MjE5RjU5NURENUYwQzdGOEFCRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P+Pzy0VueYacxhufVW7t0pLi
BEz575ld/owJIDec/lCjWa1WSJpHPXmP0eES8HEd8M+aI2dC4h+LNOLDbpCusQtQ
sDl7dyz2Rm4hvw1WSiyXgI3nXCReBOtTLUigiz9W4m3o+RHu/+jF+9SZfQRjXvRj
HNDAya3IE0IWOtL6RyUv4H+puQjg+0+dwEVz6SIcSYo0dnjE8JsRf/H3DadIQgZ4
uEZcUQSdg0MVkKiI8wK3LS/vK73JHo8NuCip8p0vS4moKXxYA2zXJ86/EWXiY0Vz
ucL5VxQDiHq4qoGprgE1T5Vxef8bT15IwYBfzuVlSpnz+SQOQHkVcoxUVZtHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbGCSzBiksxA3ZCGfWV3V8Mf4q/EwHwYDVR0j
BBgwFoAU6Xjr+sN1L12SCFaTjM1ctRLYp2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzEvRTk3OEVCRkFD
Mzc1MkY1RDkyMDg1NjkzOENDRDVDQjUxMkQ4QTc2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOTc4RUJGQUMzNzUyRjVEOTIwODU2OTM4Q0NENUNCNTEyRDhB
NzYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm
YjktZmQzOWYwOTE2NjlkLzEvRTk3OEVCRkFDMzc1MkY1RDkyMDg1NjkzOENDRDVD
QjUxMkQ4QTc2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEELTYl9OYQgNmtNDB5JjHj39sk112zKQbVB
whCA1YgUzJO1hKld7gq4M7Fwi3lA31HnZMreGhSdQ3S8yRba+AJuFlsk87y4B1W7
NAM+MVPV1R33rJWVNY9Q++nTolzoP0+1rf9aL2XTre7vT5h8phQUb4bjmKVBDJ9t
rfaDAPy1f/KQ7tlT2WwsY+ltqSNeDD07fLuBU8PuXzFIhQBlsUt1n+eAZmnU/zG1
X6+m3bCBfWLKG4KGkBCMov1cbLhbPe4VXLXCXG5/DxmKRgsyMv0pzJjKo4EkFItb
d0RXOgpAcdJ6BAerlj9q7cOlamJ8GWrJrV9IFcKrhthykG2cLj8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:23 2026 by rpki-client