
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json)
Hash identifier: Ie/llsq/BAmWWaveUeeiHfSWEiIhRz5WZsum+V74N6o=
Subject key identifier: 5F:79:35:9E:96:55:62:E7:51:DA:F6:8A:7F:DE:CE:19:E3:BE:50:5C
Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28
Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28
Certificate serial: 5858D7B9E0F79775766B95769045521188B30167
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 04:41:30 +0000
Manifest this update: Tue 21 Jul 2026 04:36:30 +0000
Manifest next update: Wed 22 Jul 2026 07:09:30 +0000
Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=)
2: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: 5rVfCmPCPr11Fze0r1HNV1913O3aHU/GNWBgxx9Yjqs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl
rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:58:d7:b9:e0:f7:97:75:76:6b:95:76:90:45:52:11:88:b3:01:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28
Validity
Not Before: Jul 21 04:36:30 2026 GMT
Not After : Jul 22 07:09:30 2026 GMT
Subject: CN=5F79359E965562E751DAF68A7FDECE19E3BE505C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:95:a9:61:52:bf:bb:97:5d:c9:29:49:a4:
bb:57:07:97:93:32:f7:ba:3f:01:01:c2:0b:f7:aa:
4b:37:b5:53:c3:4a:b3:ff:ac:b8:6e:bb:1f:62:a5:
9d:6c:fe:5b:ef:97:1c:bc:37:8c:47:5c:78:6a:5f:
b4:15:c7:4c:6c:ff:11:5b:f0:68:84:1d:9f:56:17:
a3:c4:99:f7:bc:8a:2b:cb:02:a0:2c:12:a8:ff:d8:
c1:53:44:d5:22:1f:be:47:42:1e:5e:0f:53:93:24:
96:e3:55:c1:42:bd:67:ca:1f:b1:af:75:e3:53:c3:
41:c9:ae:15:d5:82:e0:51:06:4b:d7:43:8e:33:4d:
2d:dc:86:87:a4:e4:b2:0d:0a:62:f0:32:ee:52:fc:
28:93:12:bc:61:09:ad:68:87:fb:bc:36:4b:f0:45:
56:e9:09:03:6a:84:6b:68:ca:e3:62:6b:24:00:65:
58:94:93:40:fd:96:22:9c:93:33:47:f5:06:66:60:
99:32:10:61:23:e9:53:15:b4:9a:68:97:95:96:10:
7a:0e:30:c9:60:12:79:22:8c:ec:9f:b9:1a:ca:7c:
37:69:e6:21:b5:e8:cb:79:6e:cf:d4:3f:b1:fa:70:
5f:2e:d2:d8:40:ad:80:eb:a7:65:dd:63:df:0b:44:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:35:9E:96:55:62:E7:51:DA:F6:8A:7F:DE:CE:19:E3:BE:50:5C
X509v3 Authority Key Identifier:
keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4d:97:4f:e4:29:84:0a:b0:cc:ff:16:86:66:81:76:71:9b:
5b:8d:90:ae:73:3e:07:12:6f:a0:da:e9:d3:26:a5:a3:a1:08:
0a:06:65:b4:0f:f0:5d:9c:ca:ab:85:b7:07:a4:84:95:a9:38:
61:38:22:2a:31:67:fa:16:0e:19:45:23:fb:b2:b0:a6:57:90:
3f:e8:a4:b5:5f:46:04:bc:9e:4b:bd:d3:21:ed:ab:94:6c:07:
72:03:19:ed:d3:a5:75:69:c5:fe:63:e7:46:8e:5a:9d:10:fc:
cb:b1:2e:cf:5b:68:ab:e5:b3:9d:de:2f:dc:5d:25:3b:55:db:
b6:01:fb:45:c9:f9:d2:8a:bc:29:67:cc:8b:4c:76:e9:33:2b:
cb:57:c3:c0:1b:7c:7a:0c:f4:8b:a9:b3:50:11:59:7a:e2:16:
ea:c5:40:3a:43:18:7c:23:bf:bf:01:ea:25:4a:45:bc:18:32:
0e:cf:c6:3e:37:51:45:dd:5e:93:89:7d:2f:4a:78:f5:16:e5:
a9:1f:e2:9b:ea:21:d4:a1:98:51:fd:6a:36:80:b3:7d:13:ed:
0b:6b:c5:75:62:0e:4d:6e:02:ec:ad:26:b0:d0:8f:a5:64:78:
67:56:d9:47:4f:de:36:2f:48:35:4a:ef:30:02:1e:02:4a:9f:
3f:0a:a4:7c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWFjXueD3l3V2a5V2kEVSEYizAWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4
QjQzNUIyODAeFw0yNjA3MjEwNDM2MzBaFw0yNjA3MjIwNzA5MzBaMDMxMTAvBgNV
BAMTKDVGNzkzNTlFOTY1NTYyRTc1MURBRjY4QTdGREVDRTE5RTNCRTUwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3pWpYVK/u5ddySlJpLtXB5eT
Mve6PwEBwgv3qks3tVPDSrP/rLhuux9ipZ1s/lvvlxy8N4xHXHhqX7QVx0xs/xFb
8GiEHZ9WF6PEmfe8iivLAqAsEqj/2MFTRNUiH75HQh5eD1OTJJbjVcFCvWfKH7Gv
deNTw0HJrhXVguBRBkvXQ44zTS3choek5LINCmLwMu5S/CiTErxhCa1oh/u8Nkvw
RVbpCQNqhGtoyuNiayQAZViUk0D9liKckzNH9QZmYJkyEGEj6VMVtJpol5WWEHoO
MMlgEnkijOyfuRrKfDdp5iG16Mt5bs/UP7H6cF8u0thArYDrp2XdY98LRBkJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX3k1npZVYudR2vaKf97OGeO+UFwwHwYDVR0j
BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD
MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1
QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm
NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx
REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK9Nl0/kKYQKsMz/FoZmgXZxm1uNkK5zPgcS
b6Da6dMmpaOhCAoGZbQP8F2cyquFtwekhJWpOGE4IioxZ/oWDhlFI/uysKZXkD/o
pLVfRgS8nku90yHtq5RsB3IDGe3TpXVpxf5j50aOWp0Q/MuxLs9baKvls53eL9xd
JTtV27YB+0XJ+dKKvClnzItMdukzK8tXw8AbfHoM9Iups1ARWXriFurFQDpDGHwj
v78B6iVKRbwYMg7Pxj43UUXdXpOJfS9KePUW5akf4pvqIdShmFH9ajaAs30T7Qtr
xXViDk1uAuytJrDQj6VkeGdW2UdP3jYvSDVK7zACHgJKnz8KpHw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 08:57:53 2026 by rpki-client