
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft
File: 916E287AE269B0C98717609DCBC5E6BE1BC00871.mft (raw, json)
Hash identifier: jvOWUJlhqOD6RQa3u1Ih+PCySufn/ntcMBaQbrTqA8A=
Subject key identifier: 4A:F0:55:5D:9A:AA:A3:96:B9:EA:38:6F:7C:6F:0B:B7:3D:1F:49:EF
Authority key identifier: 91:6E:28:7A:E2:69:B0:C9:87:17:60:9D:CB:C5:E6:BE:1B:C0:08:71
Certificate issuer: /CN=916E287AE269B0C98717609DCBC5E6BE1BC00871
Certificate serial: 4990BFA89D516C2E86B50CC953FE256BCACFB915
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft
Manifest number: D5
Signing time: Thu 08 Oct 2026 12:28:40 +0000
Manifest this update: Thu 08 Oct 2026 12:23:40 +0000
Manifest next update: Fri 09 Oct 2026 13:32:40 +0000
Files and hashes: 1: 916E287AE269B0C98717609DCBC5E6BE1BC00871.crl (hash: usPzDvTG8WS5W0Ny+BNa6QZoeBdP6f2td26+MLkIqw0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.crl
rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 11:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:90:bf:a8:9d:51:6c:2e:86:b5:0c:c9:53:fe:25:6b:ca:cf:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916E287AE269B0C98717609DCBC5E6BE1BC00871
Validity
Not Before: Oct 8 12:23:40 2026 GMT
Not After : Oct 9 13:32:40 2026 GMT
Subject: CN=4AF0555D9AAAA396B9EA386F7C6F0BB73D1F49EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:e1:f5:43:94:fb:84:df:13:22:83:71:97:
44:b9:5d:d2:7b:2c:66:cb:e7:2d:b3:ea:9f:c2:37:
0f:2d:58:46:9b:04:10:3b:de:6a:98:b3:d5:dd:e3:
f3:04:54:81:09:bf:ce:62:f8:e0:86:b0:0a:34:83:
58:38:96:5f:73:64:05:2c:4b:e6:22:1a:c5:15:c1:
bb:70:c6:25:d5:aa:a2:08:ea:2e:42:f2:59:9d:12:
06:da:87:08:38:a8:b2:7d:27:66:9e:26:67:98:f2:
1a:16:8e:55:dd:76:ad:db:af:26:50:60:8f:15:22:
c3:cb:27:15:f4:9e:40:c6:8c:8b:0d:8f:64:de:29:
59:25:8f:bb:cb:82:75:e2:0c:9d:96:d9:84:ce:b0:
29:58:40:c9:81:e6:19:7e:88:05:2a:3e:07:28:99:
1e:62:c9:77:2a:8f:b2:20:2d:16:b9:55:44:47:a4:
52:03:69:9c:fd:12:b8:78:8c:d5:58:21:7a:b7:24:
6f:dd:44:bf:b2:14:7c:56:f3:7f:37:16:6b:e4:25:
ea:12:19:90:e2:c5:a5:45:f6:c2:b0:db:fa:68:bf:
6f:4d:42:11:37:9c:13:c6:98:88:82:a5:5e:1e:95:
6b:e7:92:eb:4c:99:1a:44:7a:5f:95:d8:62:8e:b9:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:55:5D:9A:AA:A3:96:B9:EA:38:6F:7C:6F:0B:B7:3D:1F:49:EF
X509v3 Authority Key Identifier:
keyid:91:6E:28:7A:E2:69:B0:C9:87:17:60:9D:CB:C5:E6:BE:1B:C0:08:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:21:99:e1:6a:92:f4:f9:ae:47:c4:72:a0:54:41:5b:6e:c0:
9f:13:b6:cd:14:5c:05:e0:63:e1:ed:5f:cf:7d:d0:1c:a8:f5:
b5:a4:0f:e6:4e:56:47:47:57:d9:31:a1:2d:f3:0e:3a:03:1c:
e1:30:79:d9:b1:d8:db:89:d7:4d:85:44:ef:e7:48:b9:b1:c9:
2a:5f:76:33:fe:ca:55:3b:53:9e:56:b1:ee:c4:3c:6f:d2:99:
23:95:1d:f9:b5:18:94:98:d8:9e:78:88:5f:a1:8b:24:70:61:
a9:af:26:40:d1:66:4b:2b:16:25:90:91:55:c2:c1:8d:22:ad:
4c:98:08:b8:1d:68:54:72:72:0f:11:02:0e:4a:61:33:74:f8:
16:4e:30:a3:9f:c5:6e:df:22:e3:83:d8:63:16:4e:e4:dd:6c:
46:c0:31:c5:30:d0:aa:45:ac:2d:47:7a:8e:51:ad:f8:8e:2f:
8f:e8:d1:44:07:d2:41:e0:b4:f9:d4:e5:d3:32:9b:22:81:99:
a3:a9:46:1e:ae:82:37:bb:3a:49:7e:8e:a6:b2:af:e9:ca:24:
52:00:87:11:f5:37:93:92:da:ed:ad:4d:00:c1:cd:8d:82:d7:
f8:97:bc:ec:1b:b3:be:26:1f:3c:60:27:a5:14:9c:70:e2:81:
e3:c9:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:28:15 2026 by rpki-client