
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
File: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft (raw, json)
Hash identifier: JGpPRlHRPDfkOfCdOS+SLABKlBqJSTLwvwbBUN2RtQw=
Subject key identifier: 50:B2:2F:EA:45:56:27:57:83:18:88:30:19:2E:E6:C1:8D:01:7C:C5
Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
Certificate issuer: /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
Certificate serial: 05AA5488AE420058F07C4838C10783F70201BA81
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
Manifest number: 81
Signing time: Tue 22 Sep 2026 10:34:21 +0000
Manifest this update: Tue 22 Sep 2026 10:29:21 +0000
Manifest next update: Wed 23 Sep 2026 11:47:21 +0000
Files and hashes: 1: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl (hash: rKrFpX14QA7zifadm79yoFxViDBQZY6E926iZDZb3Nw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 11:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:aa:54:88:ae:42:00:58:f0:7c:48:38:c1:07:83:f7:02:01:ba:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
Validity
Not Before: Sep 22 10:29:21 2026 GMT
Not After : Sep 23 11:47:21 2026 GMT
Subject: CN=50B22FEA4556275783188830192EE6C18D017CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:b8:17:dc:0f:50:06:52:53:5a:e0:c2:56:
f8:a0:d3:93:84:4e:67:ac:01:12:83:9c:d1:6d:47:
0d:91:44:64:a2:8d:ab:dd:23:1b:3b:5b:27:5e:26:
3d:34:d6:f6:f8:d6:ba:06:94:d9:b0:a0:a8:61:45:
e9:b0:a7:21:36:43:6e:75:ab:05:a2:2c:de:f4:85:
95:21:49:e7:f7:bb:24:dd:e6:3e:8f:de:71:3f:1f:
78:57:2b:29:65:fe:4d:19:41:d3:a3:7b:b7:2f:eb:
56:66:b6:c5:0c:35:e9:1c:d5:c6:a8:18:2e:b3:96:
14:90:44:66:42:d1:ea:d7:6a:38:34:b4:65:2f:24:
fd:e1:7c:47:19:f9:c7:5d:6b:e3:a4:66:5b:17:5a:
e7:10:90:46:47:cc:c7:74:36:54:2f:50:b8:5d:bd:
8a:84:b9:c5:fd:99:8a:ac:69:92:28:22:e1:e3:0b:
17:a3:67:9d:ba:b5:f4:01:be:88:bb:81:83:36:bc:
6e:41:2e:7a:86:d6:dd:6c:88:8b:9b:ee:aa:38:4a:
7e:f8:de:75:2f:07:09:89:27:04:8d:3d:92:f6:4f:
70:ec:e3:d8:39:e0:8e:7c:25:0b:c6:ba:ac:e5:ea:
3b:49:62:15:75:a2:41:12:64:61:ab:3e:84:65:c9:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:2F:EA:45:56:27:57:83:18:88:30:19:2E:E6:C1:8D:01:7C:C5
X509v3 Authority Key Identifier:
keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:42:a9:0c:0d:8e:06:16:a3:4d:b0:ba:f3:8e:d8:26:99:03:
18:bb:4d:17:0e:a9:bd:8f:f9:73:88:9f:30:19:31:7a:84:6f:
b9:ca:95:c2:99:15:de:cf:2b:3f:37:d0:b8:fb:3f:f1:4d:e3:
6f:e1:91:76:35:2b:f9:d5:c0:b4:e4:95:5f:1d:34:02:62:dc:
73:54:aa:5a:54:f8:26:0d:7c:74:be:db:df:53:da:6c:06:a3:
09:16:6e:60:53:e3:f4:c8:65:19:68:6c:8b:2b:6c:cd:3a:d7:
7f:b2:18:0d:73:ee:31:9e:f3:65:16:ad:21:9e:f6:5a:b3:e5:
9e:a6:79:04:f0:78:e0:2f:bf:18:d1:56:88:5b:38:35:bb:2b:
80:21:6a:d9:03:8b:9c:f3:ef:a4:04:28:67:57:dd:9a:49:9b:
b7:6e:70:3f:19:ad:28:7a:e5:b1:e7:07:99:34:25:1d:86:13:
f6:c7:8b:74:6e:75:de:a3:90:ac:37:b8:38:69:98:cb:62:f1:
73:51:6a:44:3b:02:ca:a9:59:30:f2:36:8f:e4:76:72:24:4f:
87:23:11:fe:2f:68:22:83:d3:5b:5c:a8:ee:7f:10:2a:f3:1e:
4a:9a:17:01:06:2a:b2:7c:d1:b9:09:09:a5:2e:97:51:02:7a:
6a:20:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:28 2026 by rpki-client