
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft
File: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft (raw, json)
Hash identifier: s+l5WFXUlqW/9V+ZyjVxaLYmRYSJE4FJNdCT/p69vQQ=
Subject key identifier: 31:68:67:3C:7F:E6:32:4A:22:BB:93:FD:EF:86:6B:B1:B9:C7:2C:9D
Authority key identifier: 61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82
Certificate issuer: /CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882
Certificate serial: 604CAC0B7FEE3A32716B6C646F494D96753B625B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 17:23:28 +0000
Manifest this update: Sun 20 Sep 2026 17:18:28 +0000
Manifest next update: Mon 21 Sep 2026 18:20:28 +0000
Files and hashes: 1: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl (hash: +ExCDzkJkqPyOoLh4mZnFbaUlJqknzW3eznXoqxJO9Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl
rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 18:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4c:ac:0b:7f:ee:3a:32:71:6b:6c:64:6f:49:4d:96:75:3b:62:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882
Validity
Not Before: Sep 20 17:18:28 2026 GMT
Not After : Sep 21 18:20:28 2026 GMT
Subject: CN=3168673C7FE6324A22BB93FDEF866BB1B9C72C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:a4:c3:c4:68:d2:d8:00:f5:dd:88:ba:29:
45:6e:3e:a8:c4:39:89:6c:1a:08:c4:ff:30:06:cf:
36:f2:d5:20:6a:60:1d:22:cc:0f:cc:e6:15:f0:74:
87:a2:fa:9b:a2:cd:c9:69:e3:cc:fd:4a:01:3c:3a:
84:1a:28:0a:1b:48:68:22:16:15:9f:92:81:c8:f2:
10:68:9d:ba:31:5b:79:c6:9b:a5:9c:f4:9e:2e:04:
c1:65:b0:09:79:39:78:c8:26:40:82:b8:11:84:31:
31:4c:55:e1:a3:d3:dd:c1:83:40:90:19:85:32:c2:
62:07:2e:83:12:75:91:a3:41:31:dd:1e:e3:d0:d4:
3f:3c:7a:5b:22:1a:d4:44:ef:91:e8:91:98:f0:4f:
ca:7b:33:7a:52:50:07:0a:c9:ca:ef:d3:76:f1:5d:
4d:6b:41:64:a9:23:54:fa:14:c5:c6:67:b6:8d:28:
7d:bf:c6:18:48:3e:b8:37:a8:1f:1d:b8:f2:52:db:
c9:7b:ac:13:9e:ab:f1:8b:25:cf:e2:66:32:5b:24:
33:60:94:24:f9:dd:05:d5:2b:bd:8b:24:8c:0e:bd:
5d:e8:33:c2:1e:23:d2:5b:50:00:b3:d6:88:70:de:
16:f8:84:4c:78:f9:9c:9d:11:d2:c3:b8:a9:7f:ad:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:67:3C:7F:E6:32:4A:22:BB:93:FD:EF:86:6B:B1:B9:C7:2C:9D
X509v3 Authority Key Identifier:
keyid:61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:91:f9:07:29:a1:ea:57:f8:a2:f8:5c:6a:4f:de:f5:d0:
3a:45:40:e0:c7:a2:7e:39:93:2c:5d:65:2c:a9:ca:8e:8d:2a:
d8:c2:1a:e1:1a:83:c1:36:cf:94:0e:d5:9f:83:4c:ba:9f:b7:
a5:37:f6:44:5d:b9:bd:02:2d:ba:f5:22:e4:44:0c:2d:a9:cc:
da:94:a0:5c:a3:d5:11:01:76:5c:ab:18:be:74:2a:3b:6f:15:
79:51:98:ef:9c:66:77:a7:03:37:b8:f8:af:31:ae:3d:e6:a7:
f5:c6:d1:0d:dc:54:11:3f:41:58:dd:5b:06:5b:26:6a:83:9a:
6c:d1:1f:22:5e:ed:b1:16:60:5d:4a:e0:e0:91:f3:00:bd:a3:
7e:37:b4:c4:88:ec:fe:b5:68:06:96:2a:c6:37:96:28:94:b5:
e4:35:22:a6:f1:c9:10:0a:13:6c:4b:4b:d6:30:1e:34:0b:83:
1b:b7:03:51:14:4c:cc:30:3f:cb:cc:11:22:fb:96:aa:1f:16:
71:cb:1a:22:59:79:b1:59:99:11:92:94:53:d9:ed:e7:0a:19:
cd:3d:4e:74:bd:c6:ff:43:f3:ce:2c:47:6e:35:0b:42:2b:25:
fc:7f:ba:1f:07:ab:58:f4:ad:43:e3:92:ac:5d:82:26:1f:dc:
97:81:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:13:31 2026 by rpki-client