
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
File: 700131DE51ECE4C881CAC783B29EDC61B1D04592.mft (raw, json)
Hash identifier: NsQVav8yUPDTjn4NoEZXjilxqkc0iWrHwiWIqrVty1w=
Subject key identifier: E2:02:94:EB:44:BD:86:8F:D8:A0:1E:72:11:83:5F:9E:2C:83:18:1C
Authority key identifier: 70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92
Certificate issuer: /CN=700131DE51ECE4C881CAC783B29EDC61B1D04592
Certificate serial: 75BA99D3A3203D7198B9944F19B64C7A72DB9481
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
Manifest number: BC
Signing time: Mon 21 Sep 2026 02:49:58 +0000
Manifest this update: Mon 21 Sep 2026 02:44:58 +0000
Manifest next update: Tue 22 Sep 2026 06:36:58 +0000
Files and hashes: 1: 700131DE51ECE4C881CAC783B29EDC61B1D04592.crl (hash: Ofto7E2aXqBBvAyrJq52N0d8rPEkYhzLLENd18Jr5sY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.crl
rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ba:99:d3:a3:20:3d:71:98:b9:94:4f:19:b6:4c:7a:72:db:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700131DE51ECE4C881CAC783B29EDC61B1D04592
Validity
Not Before: Sep 21 02:44:58 2026 GMT
Not After : Sep 22 06:36:58 2026 GMT
Subject: CN=E20294EB44BD868FD8A01E7211835F9E2C83181C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:e2:8c:79:c5:9e:e4:3a:39:f4:21:3b:3c:
59:4b:ec:de:64:07:a9:74:99:67:fa:84:0c:27:d7:
91:51:f1:43:6f:7b:d4:0c:cc:6b:42:ad:d4:5b:13:
79:b1:a3:38:10:33:08:b5:51:9d:1d:aa:ab:26:5c:
ae:31:a0:fe:98:54:23:9a:f8:e3:39:b3:ff:bb:e0:
c1:cc:4b:97:a9:1c:75:2e:6c:c9:a2:2d:07:25:2e:
f2:8d:06:01:1c:db:68:86:c1:8b:d9:0b:4c:13:88:
42:ae:6e:38:0b:f0:78:f7:82:55:07:77:aa:a6:83:
55:31:f1:b4:ab:c7:ce:63:34:0c:99:db:f2:cc:01:
eb:40:b7:2b:c6:b2:b7:fa:2c:92:15:97:77:97:09:
cb:2b:f9:5a:99:cd:96:e4:5b:4d:7a:cb:f7:57:3b:
04:88:e2:89:14:2e:b2:59:fe:cd:03:38:d7:ae:cf:
90:f9:6c:e5:c9:a4:55:47:ca:8a:f2:35:da:37:7d:
49:f6:5b:36:9d:ee:f0:82:12:28:d6:84:ab:da:b6:
27:3b:2f:cb:97:a0:6f:0a:2b:1a:b9:07:62:1a:42:
ad:95:c8:9a:63:a2:05:6f:0e:bc:a6:31:0f:b4:73:
e8:37:7f:0e:be:41:31:0c:ea:7d:96:0b:cb:b7:9b:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:94:EB:44:BD:86:8F:D8:A0:1E:72:11:83:5F:9E:2C:83:18:1C
X509v3 Authority Key Identifier:
keyid:70:01:31:DE:51:EC:E4:C8:81:CA:C7:83:B2:9E:DC:61:B1:D0:45:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/700131DE51ECE4C881CAC783B29EDC61B1D04592.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/700131DE51ECE4C881CAC783B29EDC61B1D04592.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:87:8f:a5:e1:ad:12:95:87:13:8d:39:03:fa:87:36:3b:da:
56:69:6b:33:ef:54:25:3e:94:4e:ef:1c:51:fa:0a:16:05:e2:
56:76:69:89:12:75:b7:a9:ac:bf:a9:8e:1e:01:ee:d3:94:b0:
d2:2a:6d:c6:c4:32:d2:f8:b6:00:75:65:f0:fc:36:15:aa:6c:
02:69:03:69:fb:67:cd:1b:fd:b0:9e:a7:6b:fb:b6:c5:18:57:
1e:ca:f0:1c:0a:1c:6a:f1:6d:01:bd:bc:69:15:4c:95:31:d2:
37:c8:60:db:1d:14:99:89:86:a5:57:42:23:30:5b:75:b1:de:
dc:88:62:0a:0e:5d:da:4a:2f:77:6d:3f:e4:b5:3f:2e:e7:31:
3f:2f:75:0e:5f:57:3d:2c:3a:88:1d:e1:b2:c2:97:c4:6a:17:
55:56:77:6f:fe:e3:89:57:21:e8:81:6b:45:1d:41:2f:f7:fa:
88:fb:56:54:9e:ce:0d:6d:a2:c8:96:b0:bb:0b:de:33:b1:d9:
f5:7c:b0:43:d4:54:50:96:50:fe:e9:b6:7f:6b:77:37:6f:50:
b1:55:ab:c2:51:d4:fd:0d:4b:a4:f1:53:47:c2:cd:1a:9f:89:
07:ed:e2:86:0f:bb:33:42:86:40:29:f5:fd:f9:c9:09:2b:bd:
cc:9a:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:34:19 2026 by rpki-client