
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft
File: B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft (raw, json)
Hash identifier: XTIsBggfLYEtPE8jXucmqdG9JTFB7IoejQXTVVDp79c=
Subject key identifier: BA:F4:A0:96:1C:97:7B:ED:5A:B7:A3:9C:EC:40:54:4A:0E:6A:C6:B8
Authority key identifier: B1:8A:EF:ED:66:08:A6:B3:AD:72:FC:CB:B8:52:AD:9A:DF:B8:C4:9E
Certificate issuer: /CN=B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E
Certificate serial: 31F8EF3FB92E629DFFC9AB726D71B53B10B81A75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 01:58:52 +0000
Manifest this update: Mon 21 Sep 2026 01:53:52 +0000
Manifest next update: Tue 22 Sep 2026 04:27:52 +0000
Files and hashes: 1: B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.crl (hash: 8OiDjUFHPf/WG7xt5KAo1rjgxSwAwH/IILWxitOXUFc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.crl
rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f8:ef:3f:b9:2e:62:9d:ff:c9:ab:72:6d:71:b5:3b:10:b8:1a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E
Validity
Not Before: Sep 21 01:53:52 2026 GMT
Not After : Sep 22 04:27:52 2026 GMT
Subject: CN=BAF4A0961C977BED5AB7A39CEC40544A0E6AC6B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:01:30:86:ed:2c:0e:96:fe:3e:a8:58:6f:
64:66:7b:8c:ac:59:30:d5:3d:f9:1f:25:26:1e:8e:
30:5d:d0:b6:01:38:18:10:22:47:d3:94:53:d1:ff:
ca:54:fd:ff:7e:46:00:36:6e:3c:ba:18:ee:43:e0:
de:b2:5a:7b:98:bf:d5:53:4b:e4:e6:0c:4e:0f:4b:
bf:9d:31:0f:64:4b:ba:c5:1b:85:6b:fc:a5:23:85:
e5:2b:63:41:26:50:4a:05:f6:8d:be:35:01:1a:86:
15:06:c5:39:b6:85:53:ab:46:cb:be:74:a4:1b:99:
b7:a4:a8:bf:2a:55:c9:90:57:4c:a4:1f:aa:89:9b:
80:4f:d8:f4:c7:a3:97:2a:ba:92:b9:1a:4f:35:c4:
24:7b:58:7d:2d:b8:78:87:7b:73:fb:61:08:43:24:
99:b5:6a:6e:ed:1c:72:aa:71:da:8b:ce:6b:b3:f6:
53:0f:95:66:e5:cb:5b:9c:e5:9d:4f:d5:b6:ce:1b:
5c:c8:2e:99:64:c1:62:ec:34:d9:65:e0:12:60:ab:
5b:aa:ae:87:33:86:57:b1:48:f5:a8:18:1a:c5:b0:
15:18:a6:68:97:4e:8b:a4:74:66:83:31:df:bb:0d:
65:c0:46:34:1c:8e:87:65:50:1d:16:bc:db:6e:75:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:A0:96:1C:97:7B:ED:5A:B7:A3:9C:EC:40:54:4A:0E:6A:C6:B8
X509v3 Authority Key Identifier:
keyid:B1:8A:EF:ED:66:08:A6:B3:AD:72:FC:CB:B8:52:AD:9A:DF:B8:C4:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:58:c6:df:a6:8d:bc:7a:18:05:5f:1e:99:1f:37:4d:a1:53:
bc:4e:3d:e1:c2:1b:5d:59:c3:84:53:19:e9:f5:2a:e6:7b:02:
b3:77:b8:11:87:84:cf:92:fa:85:e2:3d:ec:65:9a:f8:c5:77:
07:1f:d5:24:e3:d1:43:87:14:a8:32:2b:78:a0:cd:3f:cd:38:
5d:3c:2f:ce:31:7e:14:07:31:e0:d9:0d:37:7a:28:71:eb:2a:
d3:b2:75:fb:eb:39:e7:a4:5e:87:15:7f:6b:ad:b1:6b:60:f2:
ed:7a:4c:99:b5:8c:16:bd:b2:62:96:b2:19:2f:02:97:dc:77:
e8:8e:b3:1d:5b:a4:6c:d8:7f:2e:37:9d:df:07:bb:75:50:37:
fb:76:e5:f7:6f:7e:f5:6d:d4:d4:53:13:a9:65:1a:02:3b:a1:
29:76:c7:57:9f:d3:a2:85:ca:34:d8:b3:7d:66:49:63:dd:01:
f4:54:4f:82:97:5f:e3:23:03:05:a2:77:59:54:e9:2f:6a:eb:
12:48:a9:60:06:87:e9:c3:bb:25:37:24:43:74:77:98:6e:c8:
33:e1:6c:94:d6:fa:21:34:0e:6c:9c:f6:c5:ca:a1:1b:d7:a1:
4d:85:08:ff:37:ca:13:e3:29:87:6c:1b:28:3f:f1:bb:c2:6c:
a2:b8:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:55:31 2026 by rpki-client