
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft
File: A8C779B92C9D8335C1CB86712683DFD8390906AB.mft (raw, json)
Hash identifier: c2XZJnG7DO3ZYzUiCRhf725XJFMXAlx7Pp3Uexm+Svg=
Subject key identifier: 02:DB:08:E5:76:B9:B9:68:30:30:69:AE:72:0D:18:64:D8:27:89:EE
Authority key identifier: A8:C7:79:B9:2C:9D:83:35:C1:CB:86:71:26:83:DF:D8:39:09:06:AB
Certificate issuer: /CN=A8C779B92C9D8335C1CB86712683DFD8390906AB
Certificate serial: 6B32868F8497BD2AD9F982ECB7A78AC434DA5F67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 13:01:03 +0000
Manifest this update: Tue 02 Jun 2026 12:56:03 +0000
Manifest next update: Wed 03 Jun 2026 16:35:03 +0000
Files and hashes: 1: A8C779B92C9D8335C1CB86712683DFD8390906AB.crl (hash: 4W4vn9lBFovMy+lqYhYGn9YqtcoRcVOhcGFzGF31AqE=)
2: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: Ew25t7Vik7jMjlVkWIAnLNDeMqYedtzpiyuVVLSeeF8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.crl
rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:32:86:8f:84:97:bd:2a:d9:f9:82:ec:b7:a7:8a:c4:34:da:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8C779B92C9D8335C1CB86712683DFD8390906AB
Validity
Not Before: Jun 2 12:56:03 2026 GMT
Not After : Jun 3 16:35:03 2026 GMT
Subject: CN=02DB08E576B9B968303069AE720D1864D82789EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:3f:bb:b7:a3:66:b4:7c:c7:39:9f:ce:1a:
99:de:05:92:c7:46:20:ce:a1:d8:c2:be:1d:95:78:
21:53:d9:f8:63:93:67:ec:0c:42:ae:96:3e:34:e3:
94:49:46:c1:77:74:88:1e:ab:6d:38:52:08:1e:e5:
3c:d3:d4:28:95:99:f4:9f:6f:12:95:f7:88:a5:a8:
ec:b0:bf:9a:18:cf:d4:56:eb:f4:e5:80:32:1f:b3:
31:9f:01:a3:20:6a:bc:ce:de:0f:4b:3a:24:f6:b4:
a2:38:ea:9e:55:18:83:4e:c1:c0:10:81:44:4e:f2:
98:25:ee:74:63:19:de:27:c7:8b:c1:44:7a:06:a1:
93:59:da:8d:86:df:f0:97:d1:13:f9:18:8c:e4:a3:
86:a8:fd:09:3d:d0:f6:6b:5c:3e:98:75:c6:59:b1:
89:3d:56:a9:23:84:3e:6e:b1:2f:84:5d:73:a4:0a:
5c:19:d1:41:bb:a5:4c:c1:8b:71:47:cf:a7:21:94:
5a:2c:2c:4b:4f:82:84:96:da:30:3f:87:43:8e:b9:
1a:c8:51:21:fe:55:83:f3:dc:89:0c:a1:d1:4c:99:
e9:f3:48:7c:29:46:1e:29:6f:86:30:f8:ca:48:fd:
49:d8:8b:1e:ab:08:b3:cb:ab:c0:dc:6f:75:3d:7e:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:08:E5:76:B9:B9:68:30:30:69:AE:72:0D:18:64:D8:27:89:EE
X509v3 Authority Key Identifier:
keyid:A8:C7:79:B9:2C:9D:83:35:C1:CB:86:71:26:83:DF:D8:39:09:06:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d7:08:39:67:56:13:5e:1d:ed:91:25:00:1d:fd:61:d2:76:
a5:ae:36:88:1e:df:5e:13:4c:80:9b:1b:7a:be:1a:de:b9:b4:
12:2e:40:84:ec:06:ae:b0:56:59:e2:4e:52:75:77:4b:82:af:
0e:8b:13:23:20:8f:1a:39:b5:de:37:8a:bd:45:e6:b0:07:cd:
5a:b9:ba:25:b3:5a:6e:09:0b:0d:1c:1b:ff:d3:af:17:9d:86:
d9:87:34:79:f1:01:3c:90:58:8b:c8:c4:57:18:c6:55:ed:38:
39:4a:9c:0d:c2:67:9f:bb:e7:45:d8:0f:df:a9:0c:53:50:b5:
22:1b:bf:80:f3:c4:40:ac:c0:6d:d0:ce:9f:b5:d6:e6:ef:52:
e9:bf:e5:90:b2:27:96:a3:5e:42:d3:2f:e4:ae:54:fe:33:44:
38:82:5c:2f:c4:41:23:53:fe:ed:5f:87:07:b2:c8:d2:e0:e0:
4f:1e:93:da:1a:08:1e:d6:fa:bc:d0:64:95:fb:5c:de:c0:a0:
f3:de:39:fd:17:fb:31:42:32:d5:50:45:10:ab:bf:33:e4:30:
12:5a:df:5c:e2:f3:37:4d:3d:77:03:c6:2a:0e:79:d5:f5:39:
79:0a:04:f9:55:ad:62:8e:d0:e1:79:42:f4:31:ad:b8:c9:20:
71:ae:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:20 2026 by rpki-client