
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
File: 271068E54464101C4BF23BC5A4339C1CA88116CD.mft (raw, json)
Hash identifier: 9uRME4rfIFMBk7ppE5QnzIdCkgAojVTL7Yaa7AlLP4o=
Subject key identifier: A4:51:AD:FA:C6:AA:5C:25:FE:3A:4C:8D:D2:F1:23:2B:34:2E:42:4D
Authority key identifier: 27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
Certificate issuer: /CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Certificate serial: 1104BDEDDAC5318CC79026C3916D36ADB1BBCA38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
Manifest number: D3
Signing time: Wed 07 Oct 2026 17:55:36 +0000
Manifest this update: Wed 07 Oct 2026 17:50:36 +0000
Manifest next update: Thu 08 Oct 2026 18:27:36 +0000
Files and hashes: 1: 271068E54464101C4BF23BC5A4339C1CA88116CD.crl (hash: iQamv+/4SVhq46sPFZdUoi8Io8V7cv8S9DT+KysCboE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 12:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:04:bd:ed:da:c5:31:8c:c7:90:26:c3:91:6d:36:ad:b1:bb:ca:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271068E54464101C4BF23BC5A4339C1CA88116CD
Validity
Not Before: Oct 7 17:50:36 2026 GMT
Not After : Oct 8 18:27:36 2026 GMT
Subject: CN=A451ADFAC6AA5C25FE3A4C8DD2F1232B342E424D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:6e:d9:a4:36:08:e4:fc:87:41:69:3c:ed:
7e:3f:90:70:84:73:58:27:e9:e8:b0:ff:7f:f3:0a:
66:d9:54:95:7c:a1:b8:56:1d:4d:f4:af:34:eb:ae:
8f:b2:fd:3d:3f:ed:11:8e:21:2b:fd:1f:87:7a:dc:
35:1f:7a:94:47:d2:a7:0b:98:cd:14:c7:07:8d:5c:
59:61:b6:c4:ea:0a:8a:32:c1:e9:ad:80:2a:2d:c3:
33:d4:8a:f3:34:8b:ec:4e:06:39:e1:7a:c6:a5:89:
00:63:39:88:09:d1:24:f1:96:2f:1f:55:1b:14:a0:
6c:77:c6:5c:1f:43:2b:7a:99:c9:13:c6:b3:ef:92:
52:11:e7:17:7c:05:4a:3a:fb:5e:09:41:7b:ed:6e:
c5:d8:e0:64:ca:b6:f4:d6:2f:28:fd:ea:0b:55:83:
f9:d7:74:37:0a:ea:dc:9b:4c:b3:0d:e5:98:f9:6e:
ff:03:34:41:1d:ea:7b:4a:f9:72:17:f0:dc:e5:91:
c1:db:7e:fd:c3:3c:06:27:94:1e:60:f8:a3:8d:13:
8e:8d:17:f8:60:55:71:85:45:b6:56:43:08:b0:a4:
67:22:dd:ad:fe:b2:85:a9:e9:2c:ff:22:e6:cb:a4:
33:67:ec:f2:66:02:6a:be:b3:f9:22:ce:11:2e:e7:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:AD:FA:C6:AA:5C:25:FE:3A:4C:8D:D2:F1:23:2B:34:2E:42:4D
X509v3 Authority Key Identifier:
keyid:27:10:68:E5:44:64:10:1C:4B:F2:3B:C5:A4:33:9C:1C:A8:81:16:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/271068E54464101C4BF23BC5A4339C1CA88116CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/271068E54464101C4BF23BC5A4339C1CA88116CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d6:81:36:4c:e8:2a:0f:34:31:6d:7f:7e:c8:68:dd:16:42:
27:5a:ae:02:62:ac:8d:2d:64:26:a1:78:6b:54:ca:37:0f:a9:
6f:25:b9:49:6d:71:d3:1d:71:69:0d:8f:5c:a6:2f:ee:d0:16:
41:80:32:3a:89:5e:05:aa:56:c2:1c:7e:33:c8:bb:54:af:1a:
3f:6f:2b:f5:51:b3:18:38:52:a1:3d:33:20:c1:cc:b5:8b:db:
56:79:ae:c3:6a:37:8b:a1:aa:25:f0:c1:5c:71:e4:47:2e:d4:
b3:ad:10:a1:95:5b:90:eb:e4:54:59:96:9e:fe:39:7f:db:a1:
77:c1:f3:32:f9:e5:9a:5f:31:83:1a:84:d9:dd:ef:75:6b:85:
5f:0e:b4:4d:72:a1:32:cf:d9:43:d1:f0:72:0b:37:8b:89:ce:
75:a2:6f:13:71:a7:f5:69:d5:1b:aa:d0:86:0f:a7:d3:17:af:
c9:02:47:9e:88:52:f3:7e:5c:c2:20:8e:14:c2:40:64:b1:07:
f2:5b:76:71:6c:12:7d:7a:ed:96:68:d7:95:c3:82:f0:e9:8d:
35:88:b8:75:04:83:78:be:c2:66:aa:ed:07:09:fa:03:5f:2e:
0c:24:c9:c1:95:63:6e:a3:7d:ec:56:44:43:ab:cc:ce:9e:5b:
ae:57:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:22:47 2026 by rpki-client