
$ rpki-client -vvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json)
Hash identifier: aiF7xI0gb32MGXrVLqwXKIFxu7Rd8a3eIxMojUc3ODw=
Subject key identifier: 0B:02:F2:29:DE:17:D9:6C:A0:37:57:68:ED:87:8E:F5:97:45:B6:9D
Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4
Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4
Certificate serial: 594BF05A3CE9486A0B8BA1B824AC11D9E86C5652
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:23:40 +0000
Manifest this update: Tue 21 Jul 2026 02:18:40 +0000
Manifest next update: Wed 22 Jul 2026 03:25:40 +0000
Files and hashes: 1: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: Qd2tzWDbLQ78FJgl15hRBgbn6bLsP3PM3CDXAHXbDys=)
2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl
rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4b:f0:5a:3c:e9:48:6a:0b:8b:a1:b8:24:ac:11:d9:e8:6c:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4
Validity
Not Before: Jul 21 02:18:40 2026 GMT
Not After : Jul 22 03:25:40 2026 GMT
Subject: CN=0B02F229DE17D96CA0375768ED878EF59745B69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:86:0a:b5:c6:06:20:56:57:79:29:a5:2f:
2e:15:0a:d9:fd:08:e7:30:cb:99:57:00:a7:16:e5:
f5:4f:0a:7e:fb:3c:82:61:6e:0a:55:f9:36:5b:cc:
df:ad:71:79:4a:46:0a:21:ba:69:c3:e1:43:76:43:
e9:bb:9e:f9:dc:c5:ca:77:2e:fa:3c:5d:17:fd:35:
70:4f:26:2e:b2:c1:03:ee:94:a2:50:3b:20:7a:1e:
df:cc:78:57:e6:90:96:27:f5:a4:e4:bc:61:de:30:
5b:49:54:64:99:00:f2:0f:70:32:f0:b9:49:4d:8e:
4b:27:e3:99:d8:80:49:af:59:8d:dd:9c:34:a2:7a:
cc:29:35:02:64:1a:4f:f8:d2:7d:24:7d:c1:ed:68:
d8:33:ca:9c:41:cf:e0:d0:1e:5a:bb:df:a8:1f:39:
e0:0e:2f:e1:52:61:34:2b:4e:d2:eb:f7:ab:98:37:
50:2a:94:88:5a:c5:70:fa:5a:d3:99:6b:05:7d:07:
17:62:5e:07:65:1e:7c:82:16:7a:75:ce:00:02:3e:
9e:be:b5:05:86:d5:21:be:14:95:7e:96:c3:0e:83:
a5:f4:5a:be:5a:02:2b:ac:ec:d5:52:70:79:f6:85:
0c:d0:db:69:f3:81:40:80:f4:d6:16:b4:b5:b1:4a:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:F2:29:DE:17:D9:6C:A0:37:57:68:ED:87:8E:F5:97:45:B6:9D
X509v3 Authority Key Identifier:
keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:67:10:0b:5b:d8:a4:ae:13:ef:12:c8:bb:85:8e:e5:35:0c:
e8:f8:4d:8b:1d:d0:16:c8:b8:0f:c6:0e:c3:5a:da:f9:48:95:
47:ba:b1:24:5c:a4:bf:f2:6d:e0:e9:32:3e:1c:d3:0d:2a:8c:
c4:d3:9b:7a:6f:40:58:a8:a4:59:3b:42:86:ad:1b:33:4b:cd:
7e:62:a1:a5:df:1e:f5:ad:20:90:e9:4c:64:d2:7f:69:19:c7:
35:03:e5:58:01:c8:25:60:aa:dc:d3:53:14:ff:90:84:f9:52:
3e:4a:1a:e5:66:87:ea:59:f4:95:fc:4c:ec:af:6d:40:10:7b:
ec:9e:c7:9e:61:02:7e:65:e9:a0:ed:d1:54:59:69:52:73:2e:
40:1e:f9:e5:41:60:ca:77:88:18:78:52:71:75:e3:72:53:d5:
c4:58:ba:85:70:b1:18:44:08:cb:d9:e3:0c:4e:27:da:0e:21:
21:d5:be:24:7d:c5:24:99:e7:d9:5b:1b:28:e1:43:0f:5b:19:
68:d3:c1:b3:b6:f1:27:56:94:98:a9:63:db:fb:1f:58:2a:cc:
4d:19:ea:46:3b:c3:85:07:f8:0b:e8:dc:b9:63:54:3b:b7:16:
4f:16:7e:0e:fe:2e:7c:8d:10:48:dd:9c:9c:f3:df:e4:5b:62:
a8:06:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:46:38 2026 by rpki-client