
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft
File: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft (raw, json)
Hash identifier: YtWxYQq8qjbZUkN6EYcAuwOu6YZDZGdsEnAreo+uxi4=
Subject key identifier: A4:B2:93:9D:0F:03:6D:F2:7C:2A:59:16:86:0B:BD:A5:FB:1B:3D:A1
Authority key identifier: 46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26
Certificate issuer: /CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26
Certificate serial: 509EC8BE1F1B47E11270E57910A4FB7A7081FA7E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 13:58:12 +0000
Manifest this update: Thu 24 Sep 2026 13:53:12 +0000
Manifest next update: Fri 25 Sep 2026 16:20:12 +0000
Files and hashes: 1: 46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl (hash: 68mOpvMGhduz4XUybfsCwEGFkyqydU9z1t0XHhI/4ww=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl
rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9e:c8:be:1f:1b:47:e1:12:70:e5:79:10:a4:fb:7a:70:81:fa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46B8B5785C3D7A54381E625D95A2F658CCE01E26
Validity
Not Before: Sep 24 13:53:12 2026 GMT
Not After : Sep 25 16:20:12 2026 GMT
Subject: CN=A4B2939D0F036DF27C2A5916860BBDA5FB1B3DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:e3:12:ee:df:d8:bc:76:25:f7:f8:20:af:
2b:a8:a9:48:1d:42:72:f5:48:77:45:b2:9d:9b:05:
8c:0f:36:2a:74:f4:90:8f:a2:fb:ad:a6:4e:17:1f:
95:c8:bf:fa:bb:11:05:3b:18:35:62:22:0b:7a:d1:
06:00:62:87:04:99:97:51:14:03:41:57:8d:4a:69:
32:da:a6:b2:8c:ac:83:3a:78:31:b7:21:80:66:89:
b2:53:49:87:1b:39:d2:51:c4:99:e5:b7:3c:e5:68:
7f:89:19:f6:fe:fd:e9:7a:c7:63:ed:ab:39:70:66:
fa:63:55:90:91:00:05:9c:f2:ff:67:f2:18:48:b3:
3a:19:7a:1f:49:5f:2b:e4:b4:e5:17:c2:98:48:f3:
05:fe:c9:b8:c8:39:fb:8a:b4:69:77:a3:93:61:b5:
ef:aa:45:d2:3d:48:e1:20:10:70:c3:a0:13:89:ea:
8a:a7:86:b8:da:64:e0:23:d2:7a:fe:3f:70:f8:ab:
35:92:95:1d:09:ca:21:aa:e7:79:9e:c5:4f:50:96:
ab:53:d7:8e:ba:5d:25:c0:1e:f9:84:d6:70:ab:ed:
d9:29:75:64:6d:e8:63:01:92:af:ec:cf:03:5c:e4:
80:63:ed:d7:67:6f:81:ca:cb:6a:97:1e:b7:f5:f9:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:93:9D:0F:03:6D:F2:7C:2A:59:16:86:0B:BD:A5:FB:1B:3D:A1
X509v3 Authority Key Identifier:
keyid:46:B8:B5:78:5C:3D:7A:54:38:1E:62:5D:95:A2:F6:58:CC:E0:1E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46B8B5785C3D7A54381E625D95A2F658CCE01E26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/46B8B5785C3D7A54381E625D95A2F658CCE01E26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:36:fb:06:37:03:f3:4f:fe:37:0e:7e:60:2e:90:c0:25:
bb:4f:e7:19:6e:89:1a:47:5b:f6:57:80:4a:38:19:f8:0a:79:
7a:28:0e:e9:bd:0b:bf:57:11:af:d4:b9:6d:16:be:34:00:a2:
89:57:0f:86:30:18:ac:80:06:64:33:f2:e7:c0:35:67:5c:e7:
04:4d:cc:a6:78:51:7c:70:be:b0:11:c5:14:2c:aa:46:12:90:
41:f0:ed:27:0a:26:3f:ba:6a:c0:b8:c3:cb:fd:5d:0c:69:72:
b2:ac:80:c7:28:a0:9f:e6:75:3f:89:57:05:95:cd:86:87:8e:
b8:f5:c2:37:ac:89:f6:40:8b:50:c5:ff:bb:e9:d0:1d:c0:5a:
69:9b:88:67:43:b1:5c:97:65:68:fd:d0:64:42:d1:9e:e8:66:
85:6b:2e:43:cc:a9:b0:64:1e:4f:04:ea:30:8c:7f:96:fc:c1:
01:a0:5d:ee:b4:3a:95:00:80:c5:a9:d6:98:a9:41:34:ea:5c:
bd:30:da:b1:f7:61:b9:c9:04:b1:00:c5:b4:4e:cc:3b:f1:66:
bb:0c:ad:db:9e:6d:59:94:3b:bc:32:f9:3e:35:ed:5e:e8:b8:
ef:6c:d8:2b:4c:bd:e6:2d:e6:75:d5:12:a8:65:f2:85:03:2c:
c7:23:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:04 2026 by rpki-client