
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
File: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft (raw, json)
Hash identifier: oWYlEMV4K6d/FjXN2S3DDo2g5yf7WB1dVk5FrS6OV58=
Subject key identifier: 02:73:44:7C:4E:79:D6:7B:70:8B:26:5C:B1:2F:27:05:73:4C:72:0F
Authority key identifier: 91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41
Certificate issuer: /CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41
Certificate serial: 3652B8E1FC15D7DFE41A50AC4D6346F885B60B84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 00:21:57 +0000
Manifest this update: Mon 21 Sep 2026 00:16:57 +0000
Manifest next update: Tue 22 Sep 2026 03:04:57 +0000
Files and hashes: 1: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl (hash: WinrQgbpa57vNFJA2oWkuGH6+EPY86i/ohJBJBIUQZE=)
2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: KARQhCrE6x4QilAtBVcaX71G9RZ5SUbJQcCY3G68Dvc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl
rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:52:b8:e1:fc:15:d7:df:e4:1a:50:ac:4d:63:46:f8:85:b6:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41
Validity
Not Before: Sep 21 00:16:57 2026 GMT
Not After : Sep 22 03:04:57 2026 GMT
Subject: CN=0273447C4E79D67B708B265CB12F2705734C720F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:b7:ff:ec:3b:ac:7c:50:34:e2:9a:e4:72:
68:32:d5:a3:19:97:c3:2d:7e:62:32:aa:ed:fe:4d:
9c:6f:0f:49:d0:e6:bb:ae:e9:83:fa:90:70:7d:92:
a4:0a:22:39:8c:bc:a6:d9:7f:22:c5:31:59:f4:68:
98:ae:cc:ca:26:ac:51:98:2b:cd:cb:cf:75:71:9f:
65:65:ed:11:08:5c:59:d1:af:93:7e:31:aa:8c:11:
37:4f:cf:48:c8:19:de:07:14:56:65:06:0e:c4:59:
92:d3:73:16:f9:20:76:a5:db:0c:d8:d8:66:01:ff:
76:39:0b:69:fe:e0:04:42:a9:07:e4:80:14:63:dd:
d6:b9:43:57:e1:2b:d6:fb:df:33:83:7f:14:3e:4d:
b6:21:12:04:a5:f5:c2:6f:6a:5b:51:b8:10:7d:ef:
5d:b5:b3:4e:ee:3a:e5:5a:54:b8:76:c4:ed:38:b7:
a1:f8:d3:64:ac:bc:f6:ef:db:ad:2c:88:c7:ee:9f:
7c:d7:17:b0:f8:e3:96:c7:46:bf:f9:11:3f:ee:88:
90:4d:3e:04:df:6c:e7:43:dd:71:52:a6:5d:ab:b9:
a4:47:ad:1b:51:92:7c:23:63:4b:7a:18:6a:19:ad:
14:ca:21:c4:56:52:91:ed:90:8b:6a:41:cf:aa:c6:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:44:7C:4E:79:D6:7B:70:8B:26:5C:B1:2F:27:05:73:4C:72:0F
X509v3 Authority Key Identifier:
keyid:91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:6c:b5:a8:08:34:f8:57:64:f0:02:52:2a:5f:ce:47:87:
f7:f0:64:1a:50:53:d8:60:90:6d:5c:8e:e5:3e:4d:c9:a4:29:
7b:90:e4:cf:63:70:9d:f1:7e:04:24:d2:b7:72:a1:4c:9b:2b:
b0:3e:c6:42:d4:ad:61:ee:18:00:9c:dd:0f:55:3c:b1:2f:b8:
27:9e:40:6b:ca:b1:b0:75:d1:8b:53:96:f7:05:bd:e8:85:c3:
7a:69:08:db:81:15:cf:42:7f:8b:21:58:95:c0:e0:8c:0a:7b:
fa:ab:da:3b:56:57:ad:bf:18:e3:6f:69:15:a7:f3:f1:a6:43:
a8:dd:75:99:77:3c:0d:86:74:59:ff:f5:e4:b0:cc:a1:89:fd:
7e:f7:ed:2e:62:bd:b7:42:a1:66:26:83:49:55:e0:3c:8f:eb:
07:ed:fb:30:51:fb:6e:e8:e9:9f:4c:a7:d2:84:1b:4b:12:8f:
c8:65:f7:ba:de:80:dd:46:3d:2a:2d:50:ca:22:10:7c:d7:c2:
b4:d7:f6:10:d3:91:dd:56:0b:69:33:15:6b:9e:2e:cc:d5:20:
d0:8d:af:08:12:c7:6d:b9:68:9a:d3:db:e2:63:77:83:ca:e6:
30:07:27:3b:ac:63:6c:c6:2f:69:0d:2c:e4:1a:0f:19:12:9c:
0b:a7:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:43:49 2026 by rpki-client