
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json)
Hash identifier: ALjJ5gkN42ChMAyYHUR8Xj6laA2qcuHotZqc88B1ZCk=
Subject key identifier: 29:A6:8D:73:EF:BF:32:69:6B:A1:D6:A9:B0:C9:0E:BA:12:95:1F:18
Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Certificate serial: 60836FB34D64FF606EB2CD038B3EBBCE1DF0E074
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
Manifest number: 65
Signing time: Fri 17 Jul 2026 02:31:12 +0000
Manifest this update: Fri 17 Jul 2026 02:26:12 +0000
Manifest next update: Sat 18 Jul 2026 04:53:12 +0000
Files and hashes: 1: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: Q4DcOOKMZoYRxPXI+2jrXlA8g5W5Uci2XqEtEZyANPI=)
2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=)
3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 04:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:83:6f:b3:4d:64:ff:60:6e:b2:cd:03:8b:3e:bb:ce:1d:f0:e0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Validity
Not Before: Jul 17 02:26:12 2026 GMT
Not After : Jul 18 04:53:12 2026 GMT
Subject: CN=29A68D73EFBF32696BA1D6A9B0C90EBA12951F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:ae:af:6e:f2:3c:c1:e3:be:31:7b:1f:b1:
6b:44:0f:b1:49:f3:23:1c:01:e8:97:4e:bd:d0:c3:
49:e9:49:69:33:ed:b6:38:28:06:64:24:a9:05:f7:
98:e1:f0:46:0e:34:9b:0b:01:65:e3:7c:6e:86:43:
7b:6d:8a:de:be:c5:f0:a9:da:c0:1f:f9:65:68:af:
b6:a3:ec:9a:5b:68:67:9d:cd:6b:25:c4:45:99:82:
c2:99:e6:cf:25:88:06:9d:71:83:fb:7f:52:32:10:
f3:0a:a6:48:5c:d2:5c:9e:a7:06:88:95:13:49:9c:
f1:c4:2a:f2:07:25:b0:8b:cd:ef:8a:f8:95:2c:40:
a4:a5:db:a2:f0:03:d9:c2:a9:12:bb:54:df:38:ed:
3c:e3:8a:0b:f7:02:6f:05:2e:98:1f:e8:ab:48:85:
3a:ae:29:8c:5c:8d:f8:c5:1c:c4:b3:4e:ef:4f:04:
b5:74:17:f2:35:47:47:83:67:fb:fe:17:87:84:5b:
17:c0:b7:53:a4:f1:03:14:94:e8:3b:49:c3:2a:7e:
8c:69:20:c9:50:40:66:41:e5:1c:8b:a8:85:ce:f8:
c3:08:d9:85:3c:dc:8d:53:4c:ad:29:6c:7e:9d:2b:
ef:0e:7b:0f:a7:dc:12:ea:cf:e3:2e:3b:ae:b5:6c:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:8D:73:EF:BF:32:69:6B:A1:D6:A9:B0:C9:0E:BA:12:95:1F:18
X509v3 Authority Key Identifier:
keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:51:91:33:9d:8d:77:73:ac:3f:46:79:39:c8:98:d4:ad:
ab:ce:d3:ae:d3:9c:a3:40:6f:50:7e:13:af:9b:a9:89:98:64:
3d:3e:75:0e:84:6a:9f:4f:7c:1a:84:08:63:15:2f:d5:10:7b:
ad:ad:b4:7b:8c:28:11:7d:aa:25:b0:3a:68:11:fb:72:b0:ba:
e7:23:7c:e2:08:29:18:55:d4:b1:d4:4c:4c:3a:89:89:68:94:
f4:01:9e:95:bf:e6:2a:41:d7:ef:b7:d5:4a:c4:77:98:02:88:
70:04:0f:27:0a:b8:90:f0:50:e7:03:db:bb:fd:27:87:23:89:
02:e8:2e:1b:83:40:ba:27:a9:f9:5a:58:c9:41:29:7f:e4:e3:
ab:a5:3e:c2:bc:b5:9a:f1:fc:d6:65:17:c8:84:77:b8:14:11:
75:ae:f4:71:ec:fd:7d:72:be:2d:55:e3:e7:a4:55:9e:8c:17:
46:4e:a4:4a:e8:26:26:03:12:43:64:d9:7b:1c:31:23:16:4f:
74:ae:cd:67:32:c1:b5:f0:00:c6:ec:28:47:ec:ed:87:f1:bb:
70:df:c0:3c:84:bc:46:a6:a2:0a:bf:dc:76:3f:a8:a5:d5:ef:
fc:89:dc:f8:8d:a3:e2:8a:bb:8c:f2:f8:6c:85:fb:a0:c0:b7:
c3:58:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:53:14 2026 by rpki-client