
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json)
Hash identifier: mIVTcwq1sjOGcJSvO5tU9FkTqXFKliWDtPNA7FKotP8=
Subject key identifier: 44:08:73:EF:A9:BD:E1:98:99:6E:F2:EB:B0:85:D2:3D:69:12:88:19
Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C
Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
Certificate serial: 35EB2C2F36D94175D65F041FD2C02FC6EE6DEBC8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 08:53:15 +0000
Manifest this update: Thu 03 Sep 2026 08:48:15 +0000
Manifest next update: Fri 04 Sep 2026 11:25:15 +0000
Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=)
2: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: EbZgvtof7QN0aruKBgkPwinKt4AI9+hcMVLhhMzv5aI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl
rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 11:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:eb:2c:2f:36:d9:41:75:d6:5f:04:1f:d2:c0:2f:c6:ee:6d:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
Validity
Not Before: Sep 3 08:48:15 2026 GMT
Not After : Sep 4 11:25:15 2026 GMT
Subject: CN=440873EFA9BDE198996EF2EBB085D23D69128819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:cd:0b:34:47:57:de:5a:4e:40:5f:b4:01:
c0:d8:92:c0:20:0a:92:3f:2d:cf:44:4c:ac:24:33:
50:1b:34:54:65:74:8a:81:91:af:d8:a0:cb:42:d3:
eb:2f:85:22:a5:6b:32:1d:cb:08:71:e0:d4:4a:62:
46:8c:32:0f:21:04:62:27:e8:35:cb:72:0e:51:e0:
28:9e:20:3d:5c:fb:bc:0d:3e:0b:3e:25:39:f5:25:
65:a2:d3:05:56:86:a3:8e:2f:44:c9:78:84:52:7e:
aa:f1:60:af:ff:fa:0f:42:c5:93:32:9a:82:2e:04:
3f:87:8d:13:55:11:5a:02:23:44:a6:03:97:e6:d7:
24:42:1b:0c:00:df:74:57:d1:f7:80:7e:cc:54:ed:
1d:c5:06:48:3f:19:9d:53:6d:da:3b:54:ae:6a:03:
4e:d4:1d:e9:9c:4c:98:36:cd:82:fb:02:8b:8d:c3:
30:3a:e1:9e:ba:25:d4:81:35:b5:11:f8:03:39:08:
2c:d1:69:94:bb:35:9d:b4:11:e2:18:00:30:24:a6:
bf:73:a3:c0:7b:21:f0:a0:d2:2d:1e:90:a8:19:46:
93:3e:60:8d:5a:ed:9b:72:a6:d6:33:48:60:1a:d3:
16:ba:88:3b:cf:0a:1d:a1:92:bc:69:73:f7:b3:c8:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:73:EF:A9:BD:E1:98:99:6E:F2:EB:B0:85:D2:3D:69:12:88:19
X509v3 Authority Key Identifier:
keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c1:d0:63:22:c5:22:28:35:3a:42:56:bd:32:f4:b1:bb:cb:
17:87:98:fd:12:a1:e4:c7:1f:b4:21:c9:b5:34:f3:e7:bd:e2:
25:98:f2:bc:fa:20:ee:cd:e0:92:e1:56:d4:98:7e:31:97:d4:
cd:dc:62:73:96:c4:51:78:e0:bd:8d:42:1a:53:05:0e:e7:d8:
ea:b6:00:55:c8:c9:81:41:4c:5d:47:48:84:e6:d1:a9:c6:b4:
a7:d1:e0:35:1b:3d:58:69:73:55:0d:b9:cc:bc:3c:5a:79:88:
9b:81:5c:31:d8:a6:c2:a3:46:58:92:e5:59:82:c1:7c:12:fa:
44:f3:b4:d8:a0:81:a6:c2:55:b6:13:b7:f4:30:68:40:25:58:
8a:c6:30:fc:07:b7:47:66:af:37:17:8c:88:35:d9:74:8d:d1:
01:08:38:56:a5:11:9c:cc:44:0e:12:07:41:79:1d:5b:95:c2:
d0:7e:93:d8:b9:44:40:95:ed:04:f6:e5:0b:41:c2:53:e0:7b:
29:0e:3d:73:65:94:42:12:22:3b:4f:2d:6b:db:ef:2d:f8:fb:
98:14:71:2c:b1:33:fa:e5:59:13:9c:03:6f:ae:78:c3:25:74:
99:3c:7e:ac:6f:87:58:cb:53:dc:d9:21:e7:23:c7:9f:8c:91:
71:e4:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:51:26 2026 by rpki-client