
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.mft
File: 79531B7302CDDE4247548EAA419E5C880DD6043A.mft (raw, json)
Hash identifier: 1o4PB8Krcq4TtpeaB9saJmqL/iDx5vjP79U354lgzn8=
Subject key identifier: 3B:64:AD:B8:0F:3A:E5:E0:C2:B0:DC:A7:E2:68:62:66:8A:25:9C:38
Authority key identifier: 79:53:1B:73:02:CD:DE:42:47:54:8E:AA:41:9E:5C:88:0D:D6:04:3A
Certificate issuer: /CN=79531B7302CDDE4247548EAA419E5C880DD6043A
Certificate serial: 14F291A5172CBDA26802BC7CBE7FFDE42D924AD2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79531B7302CDDE4247548EAA419E5C880DD6043A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 08:57:34 +0000
Manifest this update: Mon 21 Sep 2026 08:52:34 +0000
Manifest next update: Tue 22 Sep 2026 10:42:34 +0000
Files and hashes: 1: 79531B7302CDDE4247548EAA419E5C880DD6043A.crl (hash: rBchqjAzCNI2i40rgY7gq6OMoYgKYYzril79TxcKFuA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.crl
rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79531B7302CDDE4247548EAA419E5C880DD6043A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f2:91:a5:17:2c:bd:a2:68:02:bc:7c:be:7f:fd:e4:2d:92:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79531B7302CDDE4247548EAA419E5C880DD6043A
Validity
Not Before: Sep 21 08:52:34 2026 GMT
Not After : Sep 22 10:42:34 2026 GMT
Subject: CN=3B64ADB80F3AE5E0C2B0DCA7E26862668A259C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:62:bd:42:05:f0:37:9b:2a:9e:ee:16:ba:
33:ac:b2:e8:6f:14:74:51:39:91:33:df:b0:70:69:
17:ab:cf:56:db:7a:ea:6f:94:3c:38:af:18:ee:10:
a9:ef:a1:46:92:35:86:7b:01:15:f9:db:47:f2:36:
04:bd:84:dc:9e:34:39:52:54:da:f6:c2:78:0f:5e:
2d:4b:bc:40:05:4b:9d:b9:f8:50:69:cd:e7:94:f4:
b7:31:6e:7a:9b:ae:28:ee:3d:93:ee:81:e2:8b:a5:
f4:39:9f:1f:22:39:3e:0d:2d:ea:d6:11:cf:60:23:
98:bf:eb:40:ee:e1:b2:be:99:52:66:79:84:b0:3f:
fd:53:d5:5e:58:65:e2:aa:01:9d:80:66:7e:25:21:
fd:19:2a:6f:fc:42:cb:ea:db:6e:94:e2:bb:bc:97:
c2:0b:86:71:83:d3:2e:42:45:26:50:a1:93:71:0c:
88:fa:36:68:f7:1e:c1:f1:48:ce:03:84:83:fd:4d:
cb:c9:09:a2:d3:c7:ad:4d:5c:92:e9:53:39:05:4e:
ed:a7:24:f2:a3:aa:dc:67:b5:68:44:18:89:eb:24:
19:b9:52:2e:03:be:84:8d:d6:b1:e0:04:d6:8e:dc:
00:40:28:34:e7:58:53:a6:84:d4:91:ec:18:29:aa:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:AD:B8:0F:3A:E5:E0:C2:B0:DC:A7:E2:68:62:66:8A:25:9C:38
X509v3 Authority Key Identifier:
keyid:79:53:1B:73:02:CD:DE:42:47:54:8E:AA:41:9E:5C:88:0D:D6:04:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79531B7302CDDE4247548EAA419E5C880DD6043A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d7:bc:4b:d5:e3:b8:93:25:d8:52:56:67:ce:a5:8c:8d:39:
94:9b:e3:c6:5c:67:ee:a4:d6:ab:3f:11:e9:31:78:f5:da:fa:
2f:d6:ca:f1:2f:ce:d3:b0:48:73:ea:4f:4c:80:d9:2e:ac:21:
5f:95:a7:69:d6:1b:5d:e8:6b:e6:88:b7:90:7f:e4:e0:1a:86:
a3:69:d3:22:3d:a3:d2:ce:3d:f3:b1:b7:78:ef:cf:f5:f2:17:
28:7a:88:7c:f0:68:69:0d:5c:7c:99:8f:6e:c4:09:bc:9b:77:
0e:09:3a:ee:de:75:5a:87:0a:1b:87:dc:35:c0:be:b4:16:44:
3c:12:52:9e:50:12:34:08:f0:a7:c4:25:a4:23:1c:61:c0:8a:
7b:90:bf:84:69:c8:d6:52:b8:e6:e9:80:19:5a:1e:3f:0a:c9:
bc:91:15:06:ed:81:c1:cc:bd:4d:da:16:9c:d0:74:87:07:a0:
98:7c:13:73:41:4b:46:a5:82:87:5d:06:a1:19:d6:dd:43:1e:
eb:0f:8c:5b:01:f1:44:20:64:97:16:e4:9e:14:9d:49:b7:aa:
1f:00:35:1b:e0:b2:a2:e6:be:7a:a7:b7:f1:b6:23:5b:d0:ef:
f7:77:b0:ba:57:c5:8e:ee:8f:94:41:88:df:94:47:64:b1:53:
c1:27:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:50:58 2026 by rpki-client