
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
File: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft (raw, json)
Hash identifier: cgYzceRgH/0Rr0vlVZaRkJP+qrzHIsGL0s6MF8i0i5g=
Subject key identifier: F4:6A:ED:5A:DD:22:B1:B4:73:D6:59:F8:EB:CE:2B:3B:9C:26:83:04
Authority key identifier: 81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
Certificate issuer: /CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
Certificate serial: 010FE8D55DC142091D216313C51C8F0189F19F31
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 17:10:30 +0000
Manifest this update: Sun 15 Nov 2026 17:05:30 +0000
Manifest next update: Mon 16 Nov 2026 19:40:30 +0000
Files and hashes: 1: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl (hash: X79UsWsXAL9JsgPt1UhftRU/LYuGk6Z7C7p87LE2xoc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl
rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0f:e8:d5:5d:c1:42:09:1d:21:63:13:c5:1c:8f:01:89:f1:9f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50
Validity
Not Before: Nov 15 17:05:30 2026 GMT
Not After : Nov 16 19:40:30 2026 GMT
Subject: CN=F46AED5ADD22B1B473D659F8EBCE2B3B9C268304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:d7:6f:d7:e9:ae:8c:79:c6:2b:a8:f3:88:
b5:2b:b6:4d:4a:29:9d:4a:bf:48:38:0a:e0:42:bd:
3d:1d:f7:2f:e0:c0:eb:4b:48:e2:d1:e1:fc:db:3b:
f3:12:bc:f0:18:15:84:0f:9e:96:73:f5:fb:04:c1:
0b:2d:80:ce:ef:33:71:26:97:45:c5:de:a5:6d:29:
58:23:f5:79:57:26:19:78:27:83:89:81:40:66:21:
af:7d:bb:50:54:19:27:00:b1:fe:d0:63:12:da:ba:
05:68:8b:f6:9d:2a:c0:a3:2c:67:39:7d:08:af:6a:
c0:10:19:33:8c:ec:55:37:d7:ed:5a:99:f8:ba:79:
c7:28:3f:a2:c4:2e:51:a2:fb:0a:68:b4:96:db:0c:
a2:7e:21:d4:a2:1d:c1:66:12:81:fd:2b:af:69:74:
6d:b4:19:96:9d:44:4d:66:26:7f:33:7b:15:3b:04:
d2:98:ab:b6:3a:d2:c1:2d:34:11:31:ab:9f:0a:63:
0a:c1:a5:92:6e:a3:f0:18:22:70:e9:4b:b6:08:6b:
d7:f1:3d:d5:93:a9:f7:f1:8a:d0:4f:e8:68:31:f4:
de:9b:fb:af:cf:27:92:61:22:1a:d8:c1:20:a2:35:
59:e6:28:44:4f:af:31:22:15:71:f8:02:00:a1:ed:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:ED:5A:DD:22:B1:B4:73:D6:59:F8:EB:CE:2B:3B:9C:26:83:04
X509v3 Authority Key Identifier:
keyid:81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6b:d5:7c:c0:51:04:6f:f2:09:42:d1:89:fc:d1:24:bf:87:
f5:e1:ad:8b:3e:4b:4d:8e:56:62:d6:5d:80:33:2e:6a:86:d2:
b9:06:48:45:9e:7c:5e:6c:49:53:48:f5:81:4f:15:fa:85:e2:
c0:76:04:37:ba:63:fa:09:6c:a8:0d:5d:47:66:b1:45:7f:90:
cd:78:2f:0a:ce:a9:8a:78:b4:9b:f1:9b:fc:c3:57:49:fa:42:
06:ec:95:a8:1e:f6:ac:c3:09:be:78:28:9d:d0:dd:25:52:d7:
83:a4:4c:63:51:17:25:e5:10:d9:49:8d:c3:15:b7:ec:b6:c3:
c1:b0:4f:c2:0f:e1:95:8b:d2:12:04:f6:e0:35:a5:91:55:19:
f9:f4:bc:94:48:36:9e:06:7e:f5:cf:54:62:a6:c0:a6:cc:d9:
50:7e:3f:55:ae:ab:ea:bd:d0:b1:48:26:86:03:89:aa:bf:c2:
da:8f:38:45:57:5a:8e:2c:71:98:61:2a:95:54:93:44:3d:b8:
8b:b7:50:de:d2:73:e4:3b:72:70:2d:5f:0f:54:2c:48:e9:49:
39:ba:af:59:a8:de:50:a7:93:f6:2f:9c:bf:9e:bd:f7:ea:66:
a3:46:e0:fc:4e:1e:bc:1b:4d:76:1e:18:89:8d:6e:3b:7a:48:
6e:59:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:07:10 2026 by rpki-client