
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
File: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft (raw, json)
Hash identifier: N8iE9YTe2/gtNgeXfivjcjg6i8nw7vTgBaZeWLbkfkw=
Subject key identifier: 3C:DD:F8:5A:51:0A:6E:B5:8D:91:DF:C0:19:F2:C5:0D:49:AE:4B:09
Authority key identifier: 81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
Certificate issuer: /CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
Certificate serial: 6BE2021C54A2F41F67BE1D9C8AE7603D0EBFC41D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 16:00:52 +0000
Manifest this update: Wed 23 Sep 2026 15:55:52 +0000
Manifest next update: Thu 24 Sep 2026 18:50:52 +0000
Files and hashes: 1: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl (hash: MN4o0vGuMo6+AVtPAzlMHlawim/pCnws0NccJkeAC9Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl
rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e2:02:1c:54:a2:f4:1f:67:be:1d:9c:8a:e7:60:3d:0e:bf:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
Validity
Not Before: Sep 23 15:55:52 2026 GMT
Not After : Sep 24 18:50:52 2026 GMT
Subject: CN=3CDDF85A510A6EB58D91DFC019F2C50D49AE4B09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:73:41:0a:36:52:80:af:44:bf:b7:d4:ba:
ba:cc:97:2b:54:48:19:01:1b:e7:d2:a7:74:13:c9:
38:c8:7c:b6:aa:da:f8:f4:a4:c2:56:91:89:e4:2f:
fe:49:d3:d0:29:0d:05:31:28:03:30:3e:bc:0c:2f:
0a:ec:aa:e7:99:0b:97:90:03:01:c2:ba:a8:87:a6:
c9:81:ac:47:70:6d:eb:34:7b:40:fa:ec:5c:2c:1a:
95:33:b1:67:1a:53:c5:44:a4:c5:a5:97:21:17:15:
57:06:27:a4:24:df:aa:45:43:b3:95:94:d4:de:57:
b1:62:f9:9c:2b:47:8a:8a:6e:dd:bb:3f:cd:86:57:
44:dc:c7:86:2e:60:55:c9:49:0e:57:0b:26:0d:4e:
72:29:6c:47:0f:3d:02:d3:b9:1c:9c:a8:16:59:e5:
0b:b1:a4:1a:ee:1b:aa:6c:d9:9c:81:18:30:73:7f:
48:73:a8:95:89:f1:cc:f1:81:e1:ff:4a:b2:7f:72:
33:e1:40:f2:10:41:56:39:5e:1e:bf:fc:1b:93:00:
4c:22:c5:1a:54:22:c7:41:4a:92:d6:0d:7a:d1:8c:
4c:1d:b6:c1:0e:e7:8c:3a:ca:37:a8:8e:b2:5d:81:
89:a5:ce:0b:68:26:8e:29:ae:a8:c3:d4:e3:fa:97:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:F8:5A:51:0A:6E:B5:8D:91:DF:C0:19:F2:C5:0D:49:AE:4B:09
X509v3 Authority Key Identifier:
keyid:81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3c:dd:ae:64:e0:e2:e5:bd:f4:18:c7:f1:43:3e:70:26:d2:
fb:06:d6:87:ff:8a:84:ea:4e:0b:e2:03:64:08:8b:8b:62:71:
dc:e8:db:27:1f:e0:19:5d:98:ae:4d:5f:21:a4:8b:84:74:d0:
00:05:2c:3d:b8:27:ca:3c:73:64:38:85:23:19:bb:41:15:bb:
f9:5f:05:95:9f:91:36:35:63:21:2b:87:b4:ed:89:41:bd:a9:
ef:ad:12:84:4e:a9:51:0c:3c:5a:21:24:9d:45:b2:c8:ca:c9:
a7:fa:f4:34:dc:d8:3e:9a:55:51:22:66:50:f1:84:94:39:4c:
38:ec:c6:b7:6a:9c:c6:e5:bf:23:7a:41:31:80:85:5a:7e:4c:
b2:b2:a1:73:02:9d:f0:67:2f:36:e5:48:08:25:d9:06:6d:ee:
7f:61:15:d4:f8:68:43:51:2f:7c:ee:2b:ab:3c:1e:75:fa:3d:
5f:41:3d:86:c5:00:bc:8c:24:5b:18:11:c4:4a:94:73:02:0c:
a2:f3:48:fa:64:87:f3:63:ef:dc:57:fb:6b:50:45:24:16:59:
6b:db:b0:da:5d:56:58:f2:b1:c7:ff:18:80:3e:49:c0:5d:60:
27:7a:76:89:13:d0:a1:c3:a8:67:7f:01:9f:91:d9:f3:c8:1a:
55:19:c3:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa+ICHFSi9B9nvh2ciudgPQ6/xB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3
QTVGM0U1MDAeFw0yNjA5MjMxNTU1NTJaFw0yNjA5MjQxODUwNTJaMDMxMTAvBgNV
BAMTKDNDRERGODVBNTEwQTZFQjU4RDkxREZDMDE5RjJDNTBENDlBRTRCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8HNBCjZSgK9Ev7fUurrMlytU
SBkBG+fSp3QTyTjIfLaq2vj0pMJWkYnkL/5J09ApDQUxKAMwPrwMLwrsqueZC5eQ
AwHCuqiHpsmBrEdwbes0e0D67FwsGpUzsWcaU8VEpMWllyEXFVcGJ6Qk36pFQ7OV
lNTeV7Fi+ZwrR4qKbt27P82GV0Tcx4YuYFXJSQ5XCyYNTnIpbEcPPQLTuRycqBZZ
5QuxpBruG6ps2ZyBGDBzf0hzqJWJ8czxgeH/SrJ/cjPhQPIQQVY5Xh6//BuTAEwi
xRpUIsdBSpLWDXrRjEwdtsEO54w6yjeojrJdgYmlzgtoJo4prqjD1OP6l5oDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPN34WlEKbrWNkd/AGfLFDUmuSwkwHwYDVR0j
BBgwFoAUgZbHa1BjJ9fbNV1ary90UnpfPlAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODlhZDMxNGEtNzY1Ny00OTAxLWI3ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1
MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3QTVGM0U1MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MTk2Qzc2QjUwNjMyN0Q3REIzNTVENUFBRjJGNzQ1MjdBNUYz
RTUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3
ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0
NTI3QTVGM0U1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABA83a5k4OLlvfQYx/FDPnAm0vsG1of/ioTq
TgviA2QIi4ticdzo2ycf4BldmK5NXyGki4R00AAFLD24J8o8c2Q4hSMZu0EVu/lf
BZWfkTY1YyErh7TtiUG9qe+tEoROqVEMPFohJJ1FssjKyaf69DTc2D6aVVEiZlDx
hJQ5TDjsxrdqnMblvyN6QTGAhVp+TLKyoXMCnfBnLzblSAgl2QZt7n9hFdT4aENR
L3zuK6s8HnX6PV9BPYbFALyMJFsYEcRKlHMCDKLzSPpkh/Nj79xX+2tQRSQWWWvb
sNpdVljyscf/GIA+ScBdYCd6dokT0KHDqGd/AZ+R2fPIGlUZw4c=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:39:31 2026 by rpki-client