
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json)
Hash identifier: CYNnQLC9VoB8deRM9a5YepVSk7dZSktx7tKNrUU8SX8=
Subject key identifier: A8:F5:0F:4F:81:65:71:15:C4:08:9F:9C:02:25:0F:8A:B9:75:DE:C3
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial: 66711F77B11A80B9EE94A24E877AFC35275E1E4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
Manifest number: 01FD
Signing time: Thu 19 Mar 2026 03:10:46 +0000
Manifest this update: Thu 19 Mar 2026 03:05:46 +0000
Manifest next update: Sun 22 Mar 2026 14:28:46 +0000
Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=)
2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: T+OeXXulq9KVa93LLn+F0fHo3G1Sy5FBXjprUHqGyLE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 09:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:71:1f:77:b1:1a:80:b9:ee:94:a2:4e:87:7a:fc:35:27:5e:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Validity
Not Before: Mar 19 03:05:46 2026 GMT
Not After : Mar 22 14:28:46 2026 GMT
Subject: CN=A8F50F4F81657115C4089F9C02250F8AB975DEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:e8:20:21:c9:b1:57:d2:dc:a9:6f:4a:bf:
18:bb:0c:a9:11:5f:e1:ca:66:9f:f5:a9:12:34:b7:
23:ae:7b:f7:bb:de:f2:19:00:7e:34:1f:99:89:29:
22:f4:de:a8:be:69:9c:11:e1:b7:f4:24:0c:01:d1:
37:da:0a:78:f6:e3:8b:68:e2:1a:60:6c:9d:98:d6:
41:a0:b8:9b:af:21:e1:69:6c:95:f4:b7:63:94:ba:
5d:a1:c0:1c:4b:cd:52:f9:4f:0d:40:7d:f4:77:df:
57:ed:f3:9f:c5:8e:d7:07:d8:04:be:ff:60:a4:fb:
0a:86:84:d4:de:10:ad:62:cf:0e:e6:ad:e3:bd:06:
0d:fa:26:cf:16:5e:45:c7:1d:8b:b2:99:c5:3d:74:
65:a7:90:89:64:86:21:44:ac:e0:37:65:9c:71:d6:
72:8d:fa:8a:8f:6f:96:a1:03:92:b0:2f:68:7e:bc:
7f:ba:71:e1:f5:43:99:10:89:a3:dd:e7:bd:39:24:
4e:d9:54:1c:dc:1b:24:b6:a3:26:d5:dc:82:47:7a:
61:2f:d2:18:64:9f:99:ac:1e:40:70:16:40:f6:53:
03:00:00:eb:3e:00:b5:7e:35:d6:25:2e:9b:70:91:
e5:08:97:d7:48:46:66:9c:ee:70:36:a3:19:f9:b8:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:0F:4F:81:65:71:15:C4:08:9F:9C:02:25:0F:8A:B9:75:DE:C3
X509v3 Authority Key Identifier:
keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:39:2f:dc:71:0d:d2:16:86:8d:20:40:77:1c:5f:aa:d1:
07:c1:14:76:ef:d5:44:8b:38:9e:35:a0:36:92:2f:2a:91:76:
80:f4:58:29:dd:ac:93:38:73:99:41:37:04:0d:87:c8:c7:2d:
2c:00:93:9d:e8:1c:fd:7f:a5:2c:66:c4:24:88:aa:ef:80:69:
fd:2a:66:aa:2e:f9:40:5b:6c:5b:e1:1e:a7:8c:b9:88:3d:02:
49:53:b3:c7:38:d7:34:b8:96:ef:f5:67:ad:7d:73:a6:39:5a:
a3:44:d4:ed:8b:31:f4:4f:b8:bd:21:2b:8c:e5:67:1a:64:25:
7b:37:f0:73:7f:6f:fc:03:58:35:77:64:26:5e:75:5c:f8:47:
eb:4c:f4:92:7f:02:76:f4:e2:a9:b6:90:2a:a6:53:e7:fa:4d:
73:94:4b:29:bc:9a:e5:e9:5f:df:51:65:11:75:50:90:42:cd:
de:ff:89:3d:99:65:a6:75:e9:e9:f3:92:df:92:79:25:da:99:
50:68:58:df:12:27:e3:0d:01:cd:3e:1a:f5:89:b8:37:23:4a:
6c:dc:14:1c:51:09:60:8a:9d:90:7c:23:0e:a8:e9:1e:51:2e:
fa:79:2a:d0:f9:38:e1:3f:c8:46:e0:63:2c:48:a1:f5:49:8f:
37:ef:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:34:44 2026 by rpki-client