
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
File: 2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft (raw, json)
Hash identifier: T8rMPMCOBO2RmB5q5KDgthsNY7XN6fYdx0dCmrEmd3k=
Subject key identifier: BC:EF:B3:50:6A:A7:33:5D:0F:16:8C:0A:B4:10:F8:E0:8B:1C:22:B4
Authority key identifier: 2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1
Certificate issuer: /CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
Certificate serial: 7AC2388BF7DECF47FD62C5EF0787D595BD808A96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 06:04:09 +0000
Manifest this update: Mon 21 Sep 2026 05:59:09 +0000
Manifest next update: Tue 22 Sep 2026 08:00:09 +0000
Files and hashes: 1: 2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl (hash: RWQ6A5YGYZ/0c6e5bm0pd3z+9R510JNtpVqfmNoJSBQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl
rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c2:38:8b:f7:de:cf:47:fd:62:c5:ef:07:87:d5:95:bd:80:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CCA576976D5D9FE66F578377BF7B78E4264A9A1
Validity
Not Before: Sep 21 05:59:09 2026 GMT
Not After : Sep 22 08:00:09 2026 GMT
Subject: CN=BCEFB3506AA7335D0F168C0AB410F8E08B1C22B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:48:5f:06:d6:03:44:57:70:cc:0c:8f:05:
a8:da:84:99:ba:fd:49:44:ed:b6:af:b4:49:45:30:
35:20:4b:d9:88:dd:46:4f:7e:b3:c2:de:b6:01:0e:
33:db:36:63:76:33:a1:bf:51:41:34:bf:60:12:3d:
8b:06:68:3c:64:39:95:12:de:8a:8d:a7:88:79:74:
b2:49:fe:de:e3:0e:fe:25:0d:cc:b9:7d:1c:a4:66:
c5:ff:07:63:cb:5d:87:f4:98:ab:d0:0d:ea:19:07:
2c:00:fd:72:d2:ca:ce:fa:4c:4d:40:e7:0a:6e:a6:
34:28:58:cd:d7:cb:6e:f6:8c:75:45:ea:f5:ed:57:
ce:bb:c1:83:9b:de:ff:14:3f:62:ca:47:b4:98:9a:
08:97:93:2f:8d:a5:dd:2c:32:42:84:cd:4a:4d:a2:
9e:19:e9:26:86:37:6a:d6:5f:1f:e8:0e:30:ce:35:
8f:8e:ed:ee:e4:86:a7:a8:8a:9b:fd:0c:16:85:bd:
b1:e2:db:9f:c8:a6:a4:9c:60:38:ba:82:c7:1d:71:
4d:e8:a0:b5:2d:11:70:ca:97:73:6b:60:ff:65:74:
aa:dd:da:e4:db:5c:38:a0:8d:4c:cd:c0:ff:b0:bb:
63:28:51:df:e1:26:c7:d4:b7:24:e5:ee:d3:2d:28:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:B3:50:6A:A7:33:5D:0F:16:8C:0A:B4:10:F8:E0:8B:1C:22:B4
X509v3 Authority Key Identifier:
keyid:2C:CA:57:69:76:D5:D9:FE:66:F5:78:37:7B:F7:B7:8E:42:64:A9:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ARSEN-ID/0/2CCA576976D5D9FE66F578377BF7B78E4264A9A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ef:c7:2a:ea:48:05:75:8e:d8:f6:68:cf:94:b6:b1:a6:b3:
98:c0:5a:ee:f2:e2:00:09:31:97:30:2b:d3:f8:32:af:4c:af:
b4:8d:cd:51:ce:71:14:00:38:41:2d:20:c7:f3:2f:d2:56:0d:
24:32:f9:a3:d6:77:57:39:4b:11:21:2c:95:48:e1:b3:5a:35:
22:6e:87:de:9e:d1:87:53:67:e9:01:a3:7c:dd:04:90:0c:fd:
40:c9:0d:fa:df:6a:51:55:50:84:b2:47:08:54:2c:7f:46:fc:
7b:41:1d:46:b0:61:9b:1e:e3:d3:15:0e:f8:10:e3:56:97:81:
c3:12:ee:c5:b7:ad:80:19:bd:79:49:38:cb:65:e8:7e:7a:a3:
ec:ef:9f:db:cd:9d:e1:c2:55:31:78:9d:b6:be:d6:d8:21:49:
94:cd:9a:f0:fa:00:a5:05:18:0b:dd:15:71:3d:50:55:6a:93:
cd:b0:f9:a5:d5:57:88:83:c9:3c:ef:7c:3a:4e:21:d9:9a:76:
5e:f8:b0:8d:9c:b1:99:5a:6b:af:39:82:69:b8:c9:fa:44:f7:
6b:65:4c:ff:f7:ad:8b:04:f3:b5:40:bc:5e:09:28:7b:0e:58:
2c:cb:b9:d1:46:d8:b1:48:bf:0c:8d:6d:db:b9:94:e1:ea:ca:
90:c9:58:e9
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUesI4i/fez0f9YsXvB4fVlb2AipYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDQTU3Njk3NkQ1RDlGRTY2RjU3ODM3N0JGN0I3OEU0
MjY0QTlBMTAeFw0yNjA5MjEwNTU5MDlaFw0yNjA5MjIwODAwMDlaMDMxMTAvBgNV
BAMTKEJDRUZCMzUwNkFBNzMzNUQwRjE2OEMwQUI0MTBGOEUwOEIxQzIyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyEhfBtYDRFdwzAyPBajahJm6
/UlE7bavtElFMDUgS9mI3UZPfrPC3rYBDjPbNmN2M6G/UUE0v2ASPYsGaDxkOZUS
3oqNp4h5dLJJ/t7jDv4lDcy5fRykZsX/B2PLXYf0mKvQDeoZBywA/XLSys76TE1A
5wpupjQoWM3Xy272jHVF6vXtV867wYOb3v8UP2LKR7SYmgiXky+Npd0sMkKEzUpN
op4Z6SaGN2rWXx/oDjDONY+O7e7khqeoipv9DBaFvbHi25/IpqScYDi6gscdcU3o
oLUtEXDKl3NrYP9ldKrd2uTbXDigjUzNwP+wu2MoUd/hJsfUtyTl7tMtKLCXAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUvO+zUGqnM10PFowKtBD44IscIrQwHwYDVR0j
BBgwFoAULMpXaXbV2f5m9Xg3e/e3jkJkqaEwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9B
UlNFTi1JRC8wLzJDQ0E1NzY5NzZENUQ5RkU2NkY1NzgzNzdCRjdCNzhFNDI2NEE5
QTEuY3JsMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvMkNDQTU3Njk3NkQ1RDlGRTY2
RjU3ODM3N0JGN0I3OEU0MjY0QTlBMS5jZXIwdQYIKwYBBQUHAQsEaTBnMGUGCCsG
AQUFBzALhllyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vQVJTRU4t
SUQvMC8yQ0NBNTc2OTc2RDVEOUZFNjZGNTc4Mzc3QkY3Qjc4RTQyNjRBOUExLm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAU+/HKupIBXWO2PZoz5S2saazmMBa7vLiAAkxlzAr0/gyr0yvtI3N
Uc5xFAA4QS0gx/Mv0lYNJDL5o9Z3VzlLESEslUjhs1o1Im6H3p7Rh1Nn6QGjfN0E
kAz9QMkN+t9qUVVQhLJHCFQsf0b8e0EdRrBhmx7j0xUO+BDjVpeBwxLuxbetgBm9
eUk4y2Xofnqj7O+f282d4cJVMXidtr7W2CFJlM2a8PoApQUYC90VcT1QVWqTzbD5
pdVXiIPJPO98Ok4h2Zp2XviwjZyxmVprrzmCabjJ+kT3a2VM//etiwTztUC8Xgko
ew5YLMu50UbYsUi/DI1t27mU4erKkMlY6Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:41 2026 by rpki-client