
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File: B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier: UKKqLSgVcBZVof14iZBmASwIJ/R+gt71w9hAsp9jdDI=
Subject key identifier: 13:28:6F:F5:1D:FC:BF:15:52:23:03:61:5F:E9:C0:86:44:98:A2:2F
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer: /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial: 6EB04E59580E7B1818FAD224B2FB79D8BEEBF8DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number: 6A
Signing time: Sun 19 Jul 2026 19:46:23 +0000
Manifest this update: Sun 19 Jul 2026 19:41:23 +0000
Manifest next update: Mon 20 Jul 2026 22:29:23 +0000
Files and hashes: 1: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: bk7ETiCrVSqlwr6qWrJ9NGcunRuVAfg0nfTsQS6sfoI=)
2: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
3: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
4: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
5: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
6: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
7: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
8: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
9: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
10: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
11: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
12: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
13: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 22:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b0:4e:59:58:0e:7b:18:18:fa:d2:24:b2:fb:79:d8:be:eb:f8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Validity
Not Before: Jul 19 19:41:23 2026 GMT
Not After : Jul 20 22:29:23 2026 GMT
Subject: CN=13286FF51DFCBF15522303615FE9C0864498A22F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:b8:06:59:78:51:e6:41:24:d6:e6:c9:8e:
38:cf:e6:91:7e:45:d1:14:41:31:ee:b2:09:8d:4c:
50:a2:ef:82:cb:68:a6:0c:f5:10:1c:02:46:83:f0:
4e:1d:c8:8a:e2:72:b1:83:5f:43:96:86:30:7f:3f:
df:15:1a:18:1a:b9:50:f9:26:a0:69:13:e7:e0:8f:
44:b8:8b:00:6d:71:59:ad:9c:48:1a:79:69:15:39:
0a:a1:30:52:85:dd:22:ff:1e:d2:d4:d3:4c:7e:85:
73:6c:84:33:e5:02:bd:4f:a9:d3:b7:fc:08:d0:ec:
40:64:77:9d:26:1d:23:43:8e:d5:f1:43:69:bd:21:
0c:36:63:6b:a9:16:97:ea:e0:ba:f7:aa:9e:e7:ea:
dc:d0:30:d4:4d:e1:ce:00:13:a3:e0:ef:af:cc:e9:
73:5f:7e:91:be:09:6a:35:ad:cd:e5:23:79:cc:65:
f0:33:4b:35:8f:e3:ad:c6:f8:72:86:ab:3f:6b:e3:
cb:5b:de:0c:42:a5:8e:05:b1:ea:63:de:17:96:3f:
3f:55:7b:c8:c9:b0:81:ac:6b:56:3c:e6:52:fd:d8:
76:74:f2:99:71:82:6c:bc:9d:b3:39:f5:49:8d:48:
d3:55:75:2e:fe:05:e1:35:29:ba:43:ea:dd:2f:05:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:6F:F5:1D:FC:BF:15:52:23:03:61:5F:E9:C0:86:44:98:A2:2F
X509v3 Authority Key Identifier:
keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ff:56:a7:79:60:37:51:e2:69:fb:96:db:09:2d:1d:38:54:
b0:14:09:bb:5b:75:71:e0:65:99:d5:80:cd:5f:3f:d0:86:91:
9a:80:db:71:fb:59:fe:0b:c6:ea:6d:d5:c0:ac:a6:55:79:4d:
4a:4a:92:e6:aa:56:27:b1:f0:b5:74:a4:30:0a:b7:10:15:30:
97:7d:b7:e8:ad:32:77:bf:dc:88:6c:37:ed:51:14:9e:fa:ff:
2d:ed:80:6b:25:3a:b1:25:5e:03:47:8e:06:aa:3c:09:ae:16:
c7:37:63:e9:90:5a:1a:80:a3:10:0e:c6:4b:73:69:16:f1:70:
b2:e1:81:96:b7:c2:7a:69:53:cd:ba:fe:cf:5f:69:93:96:ae:
21:bc:0d:f1:6e:6d:b7:f1:75:00:fa:d8:ba:e7:49:15:12:c6:
d3:2d:ca:59:79:95:37:ea:c4:4a:90:29:d0:25:ec:bf:3d:1c:
37:b4:cf:18:67:05:80:16:3e:a7:65:da:d7:d7:54:4b:ce:72:
89:66:0f:8e:a7:06:8b:a9:d8:92:b0:b0:bf:a0:57:70:1c:93:
cd:70:8c:33:d9:cf:38:5e:76:5f:ca:85:e4:27:f1:52:bf:48:
21:7c:d9:b6:2d:6f:d3:90:6e:d0:bd:29:a3:44:1e:4b:02:2f:
9e:e7:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 03:56:05 2026 by rpki-client