
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json)
Hash identifier: C8nxt+rrbnDqWxFixwbyc819mcwQp7mvIMEqcSgLD7k=
Subject key identifier: B6:7D:06:14:FA:57:D3:1B:0C:D9:E0:E9:60:30:D9:D3:67:CB:C1:C0
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial: 038244CD3E01701D8FA22391FD55BD0A1A5C7DA5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 16:57:27 +0000
Manifest this update: Mon 20 Jul 2026 16:52:27 +0000
Manifest next update: Tue 21 Jul 2026 18:03:27 +0000
Files and hashes: 1: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=)
2: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=)
3: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=)
4: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=)
5: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=)
6: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: /kXTo0l4Ax4qkLbh7cJgaGwGet2nujUn7P4w4nz+bIw=)
7: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=)
8: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=)
9: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:82:44:cd:3e:01:70:1d:8f:a2:23:91:fd:55:bd:0a:1a:5c:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Validity
Not Before: Jul 20 16:52:27 2026 GMT
Not After : Jul 21 18:03:27 2026 GMT
Subject: CN=B67D0614FA57D31B0CD9E0E96030D9D367CBC1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:50:9f:93:25:31:ff:a0:88:6f:d7:57:66:
13:42:6e:98:cd:dc:55:f3:a0:f4:56:56:e5:e9:f7:
e4:3a:db:70:96:34:02:37:23:63:8b:e3:13:55:0f:
a6:1d:7b:49:11:87:50:3e:ec:cb:75:a7:78:47:8c:
26:f5:17:4d:58:85:b7:0b:99:92:0f:71:20:a6:18:
ed:36:bf:59:0b:84:48:36:39:12:fa:9e:1e:cc:82:
7e:68:ab:7c:26:6d:61:9f:80:7e:45:13:9c:32:da:
d6:6a:03:0d:d4:c3:32:6e:dd:2c:7b:ac:1a:a7:b2:
69:81:66:c8:28:b7:4b:01:c6:d0:1d:b0:f2:0c:80:
f4:51:cc:86:b8:ea:1c:96:73:2b:5a:e9:f4:f8:01:
e1:92:ab:18:2c:d9:7c:f7:41:a3:f6:54:ed:79:07:
34:18:b9:db:38:c7:28:d8:65:7a:94:cf:be:87:82:
82:56:22:76:fd:f9:57:39:af:83:5f:88:16:a8:4a:
84:5b:31:84:c9:db:82:b7:4c:2a:6f:c4:93:21:ce:
95:fa:2a:4c:5a:85:65:ed:7e:ef:ff:5c:dc:86:58:
63:c9:fa:af:54:9e:d0:30:ad:ff:1d:9e:e5:76:ec:
05:3f:c9:8a:20:99:a9:3b:ce:db:01:4c:14:9d:15:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7D:06:14:FA:57:D3:1B:0C:D9:E0:E9:60:30:D9:D3:67:CB:C1:C0
X509v3 Authority Key Identifier:
keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e1:37:1b:c2:17:38:04:8b:f4:84:95:81:e7:b5:68:d1:9d:
db:ed:a5:1c:ed:f0:e0:52:e0:53:40:c7:75:58:c0:99:ed:44:
b6:a6:23:6f:86:11:7d:86:c4:27:9f:8e:54:df:1d:3d:73:d6:
7b:c4:ca:22:b8:e7:d0:0a:59:d6:a9:7c:22:16:8d:04:05:c1:
57:bf:89:0b:a6:c2:c7:31:61:fb:ad:20:e1:fd:11:97:2c:ea:
7e:11:d8:3f:5a:cb:04:aa:19:66:0a:f0:c8:12:ed:c5:bc:01:
0f:48:11:55:d5:e7:12:23:2e:ba:67:d9:d8:47:8c:21:6a:7b:
92:d4:ec:eb:c2:06:22:3b:d6:84:04:20:37:04:c6:21:48:dd:
33:94:9a:46:8d:f4:c9:29:41:93:0b:b2:17:01:ed:51:a5:3e:
83:70:53:85:8c:e0:71:c0:b4:fe:60:e2:7f:0d:bb:07:1e:f0:
78:5e:73:e9:6d:c0:d6:8c:dd:3f:de:99:78:8f:5e:45:4e:ae:
cc:a2:87:c1:a2:08:4b:58:59:af:7b:f4:4e:b0:6c:86:20:7b:
42:f8:f8:a2:90:5e:a2:48:50:cc:fe:43:43:5a:9a:27:45:31:
bb:a6:c0:96:4d:b3:05:0b:e5:8c:bb:60:b2:30:ea:49:8e:e2:
ac:5b:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:22 2026 by rpki-client