
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
File: 405E6B7463BC0531CCD985CD4D468E60B5078B16.mft (raw, json)
Hash identifier: OxMBiI33hmXFv6YXiypjBRSEezGRu1xlkgZPrl/cxpI=
Subject key identifier: D6:A0:F0:11:14:7D:61:B9:57:28:8B:43:09:28:C6:4C:54:AE:3E:DC
Authority key identifier: 40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16
Certificate issuer: /CN=405E6B7463BC0531CCD985CD4D468E60B5078B16
Certificate serial: 59217A20D94C2E0DCA0A2F04982AE690236ADDD3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
Manifest number: BB
Signing time: Sun 20 Sep 2026 22:29:42 +0000
Manifest this update: Sun 20 Sep 2026 22:24:42 +0000
Manifest next update: Mon 21 Sep 2026 22:40:42 +0000
Files and hashes: 1: 405E6B7463BC0531CCD985CD4D468E60B5078B16.crl (hash: XFOgVV1bh2E5xL5lSHYxq0/gKtJ5MHc6eql66K5zYJM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl
rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:7a:20:d9:4c:2e:0d:ca:0a:2f:04:98:2a:e6:90:23:6a:dd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405E6B7463BC0531CCD985CD4D468E60B5078B16
Validity
Not Before: Sep 20 22:24:42 2026 GMT
Not After : Sep 21 22:40:42 2026 GMT
Subject: CN=D6A0F011147D61B957288B430928C64C54AE3EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:6d:83:ca:e8:48:3c:ab:ad:a7:78:20:b1:
45:a5:5a:3d:6b:5b:b1:b4:4e:d3:42:6a:65:0b:2b:
da:48:11:00:3d:7e:6b:fc:10:e2:5a:34:b5:36:35:
cf:e5:18:e9:34:1c:10:71:94:03:e4:ad:5e:90:ba:
5a:79:81:4e:e9:5b:27:ab:ab:c2:5a:15:5e:3f:6c:
7a:6d:02:a9:9c:d9:7e:90:40:40:4a:cd:af:52:ee:
8e:db:8e:23:46:5c:9b:6d:e0:1f:2e:9d:b7:c5:de:
8a:b0:31:1d:16:20:b5:f7:dc:58:dd:e8:37:10:bf:
62:60:7d:3d:11:ac:68:7b:79:6c:67:96:a0:e7:93:
5c:45:5e:8a:d7:33:b2:f8:59:ff:9f:af:90:3c:8c:
6d:1f:83:61:58:2f:34:af:c7:d7:4a:cf:06:d5:a6:
b7:09:21:44:65:6e:fd:8b:ed:cc:19:33:d1:e6:44:
32:36:03:1c:c2:f8:56:5f:5d:f6:e8:4e:44:f9:0e:
9b:60:93:dd:40:ce:d0:8e:62:17:4d:50:9f:a7:4e:
b8:07:a3:47:b5:2c:e8:f3:55:fc:32:3a:86:0d:23:
76:4d:b3:99:29:3c:62:ce:c6:ea:13:1d:f3:27:15:
fd:f7:85:c3:bd:c1:bd:8f:60:b1:c0:94:21:e2:22:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:F0:11:14:7D:61:B9:57:28:8B:43:09:28:C6:4C:54:AE:3E:DC
X509v3 Authority Key Identifier:
keyid:40:5E:6B:74:63:BC:05:31:CC:D9:85:CD:4D:46:8E:60:B5:07:8B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/405E6B7463BC0531CCD985CD4D468E60B5078B16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:95:7b:40:32:89:7b:89:b2:4e:fc:73:83:c0:06:58:e1:77:
a1:f2:00:de:b5:fb:80:1b:09:2e:d7:f0:5c:0e:a8:e2:e8:07:
74:e1:09:55:38:2b:e9:ee:39:07:4e:38:07:1f:f8:0a:27:55:
a7:74:1e:57:0f:76:e6:dd:53:dc:0c:f0:ab:aa:d0:e1:50:ba:
b4:b5:48:57:84:1d:53:2a:07:f2:59:92:12:5f:49:79:e1:16:
49:ad:78:10:9f:66:8b:78:b8:ab:aa:dc:54:f9:6a:1e:ed:09:
c9:9e:31:bf:9d:79:01:76:ab:bf:14:a3:7e:a0:b6:0a:77:23:
5e:09:ce:55:88:56:63:99:fa:62:4d:d3:19:2e:f9:f5:5b:48:
34:92:05:15:ec:4e:b2:9a:e6:26:36:e6:3f:8d:f9:3a:37:83:
88:c1:e7:17:01:86:6b:7b:b2:e4:82:1e:3d:d4:77:00:21:18:
b5:95:85:4e:66:27:91:9e:61:e6:ef:75:ac:b3:91:f0:1a:6c:
69:4e:b6:76:9b:d8:3d:2d:cf:37:84:ae:57:09:e3:de:75:df:
54:5e:c7:a8:f3:43:85:ba:21:51:95:91:af:f0:65:51:78:08:
dc:89:3f:dd:47:5a:0a:4e:af:54:76:fe:91:a9:bb:8c:35:e0:
4a:80:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:28 2026 by rpki-client