
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.mft
File: 2F6B6C4E0F7E26EF46248421F120296E45A53281.mft (raw, json)
Hash identifier: qet1gjXGv+dQUcd7pjj7ZFCjuhmkra1VVkN1phOFTOk=
Subject key identifier: 9A:1E:6D:71:74:30:D2:5C:B1:73:E4:2F:53:EF:AB:B9:48:B6:CC:08
Authority key identifier: 2F:6B:6C:4E:0F:7E:26:EF:46:24:84:21:F1:20:29:6E:45:A5:32:81
Certificate issuer: /CN=2F6B6C4E0F7E26EF46248421F120296E45A53281
Certificate serial: 116F1B333A5252CF1A26F231B677818F60014524
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F6B6C4E0F7E26EF46248421F120296E45A53281.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 04:52:28 +0000
Manifest this update: Tue 22 Sep 2026 04:47:28 +0000
Manifest next update: Wed 23 Sep 2026 06:33:28 +0000
Files and hashes: 1: 2F6B6C4E0F7E26EF46248421F120296E45A53281.crl (hash: wfCeVVVi16ZelamHtynWBdK+6fAHaDtm74wMTLjvL0U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.crl
rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F6B6C4E0F7E26EF46248421F120296E45A53281.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 06:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6f:1b:33:3a:52:52:cf:1a:26:f2:31:b6:77:81:8f:60:01:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F6B6C4E0F7E26EF46248421F120296E45A53281
Validity
Not Before: Sep 22 04:47:28 2026 GMT
Not After : Sep 23 06:33:28 2026 GMT
Subject: CN=9A1E6D717430D25CB173E42F53EFABB948B6CC08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:5f:ba:9f:f6:d5:a0:ed:bd:5d:fd:0e:f5:
27:84:37:b6:47:6e:2c:30:a4:03:3f:2c:32:43:a6:
0f:19:24:2a:ba:d5:a9:41:36:12:b2:15:d4:7e:d0:
ff:66:94:ee:28:2d:20:90:a2:a4:40:52:b3:2e:82:
41:56:d8:33:19:b7:42:59:f5:85:b9:73:cb:f2:e2:
cd:53:e7:e2:5d:68:6d:82:91:5e:59:1c:a7:14:91:
a8:fa:64:35:95:6e:5c:fa:a3:15:74:3c:d0:8f:36:
f0:53:63:85:2e:ac:ee:c9:15:12:0d:0b:e1:45:08:
ff:72:37:86:10:d8:cd:72:73:ab:e9:6b:11:c6:3c:
c7:5d:eb:67:98:59:dc:29:de:ee:38:0b:53:f0:3d:
fb:41:f7:f3:28:64:d4:8e:8a:e4:58:e4:9d:74:4d:
62:a2:39:37:2f:a9:fd:0a:ba:38:39:02:89:6a:80:
0f:44:0b:e7:2f:9f:d4:4d:a6:c1:ae:7e:95:7c:2c:
e4:e7:0c:3a:b9:07:6c:a6:2c:c8:96:3c:97:45:9f:
f4:2a:ec:38:84:56:e9:19:e0:40:0e:97:9e:36:22:
07:1b:12:16:57:54:41:7b:1b:f0:e9:9a:86:c8:da:
55:2f:b9:e7:94:ff:ef:c1:36:b4:d2:45:e1:c1:8f:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:6D:71:74:30:D2:5C:B1:73:E4:2F:53:EF:AB:B9:48:B6:CC:08
X509v3 Authority Key Identifier:
keyid:2F:6B:6C:4E:0F:7E:26:EF:46:24:84:21:F1:20:29:6E:45:A5:32:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F6B6C4E0F7E26EF46248421F120296E45A53281.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/2F6B6C4E0F7E26EF46248421F120296E45A53281.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5e:f7:bc:9c:ac:74:ba:27:b6:52:a2:71:03:a0:c2:72:e6:
8e:bc:e5:53:22:f7:8d:63:ff:01:2c:1a:ab:71:e6:52:75:a6:
5e:4f:8c:b8:fd:ac:8f:d1:c7:e2:98:2c:5d:13:20:9e:03:2f:
fe:bb:d6:fe:50:4f:61:98:96:b3:00:02:03:ae:1c:94:c9:4f:
b7:40:37:57:1f:4d:d8:65:d6:b0:2c:f1:df:84:f1:69:3a:3f:
aa:9d:a2:f1:03:d7:24:6b:10:9a:c5:5a:87:78:fa:dd:13:a6:
7d:9f:cb:63:6d:12:bd:63:08:57:a6:b5:5c:1e:59:35:7b:53:
69:4f:5d:7f:1b:fd:8a:7e:f5:b3:b8:28:7d:0c:6e:d7:d7:75:
08:57:ed:53:17:d1:a3:c1:ee:f5:83:ad:28:27:9e:85:ec:d5:
1d:eb:58:cd:94:2f:ec:94:1f:39:27:19:ea:6c:53:7e:d7:b2:
50:c8:01:c3:92:96:c6:08:df:57:86:4d:c8:64:5a:cd:2f:0d:
3b:7d:14:17:ba:fd:1c:91:04:a2:b5:b5:42:e8:50:16:40:ba:
d3:21:cd:ac:15:d2:16:f2:47:4a:02:07:ae:70:44:d0:90:6d:
2e:63:28:45:19:82:b9:95:c1:08:fb:74:72:7e:6c:0d:a8:1a:
b4:bd:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:43 2026 by rpki-client