
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json)
Hash identifier: 7AK12cZETPkhVu0EfQ8jP6KiDhE5zipQYm28x5XhLZ8=
Subject key identifier: 0F:F9:CC:70:B8:1B:CF:A9:C0:E2:63:60:60:B0:20:68:92:3C:2A:34
Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Certificate serial: 3DC64875825E37CE00E01C0DAE466F2D34BA1C83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 22:28:56 +0000
Manifest this update: Mon 20 Jul 2026 22:23:56 +0000
Manifest next update: Wed 22 Jul 2026 00:33:56 +0000
Files and hashes: 1: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=)
2: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=)
3: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=)
4: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=)
5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=)
6: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: CYx8EeVlMODXFliQDqYN8Pgmmv9ByEA/UN0gqAd/mN4=)
7: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=)
8: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c6:48:75:82:5e:37:ce:00:e0:1c:0d:ae:46:6f:2d:34:ba:1c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Validity
Not Before: Jul 20 22:23:56 2026 GMT
Not After : Jul 22 00:33:56 2026 GMT
Subject: CN=0FF9CC70B81BCFA9C0E2636060B02068923C2A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:ab:ea:86:9b:ed:73:3b:0e:40:ff:06:3e:
8b:19:76:18:3c:7b:49:92:5c:25:e5:b8:4b:0f:b8:
ba:09:a0:7b:c6:07:b9:0a:41:2d:59:95:38:2c:5c:
8b:91:a4:ad:2f:e0:8f:c8:b0:8d:af:46:9b:0d:bc:
62:4c:e8:93:f1:43:cb:ac:20:94:72:da:78:da:8c:
00:54:60:68:d2:96:ce:74:de:f9:d5:eb:a0:cd:72:
b6:c2:16:3b:93:ee:cc:9f:10:3f:3a:74:f6:d8:e6:
08:a7:59:2a:33:82:91:42:d7:0f:d0:19:61:07:42:
a5:b6:82:f8:ef:18:d4:06:6f:e6:38:18:99:18:fd:
66:26:f8:57:bc:6f:6f:ae:19:46:c7:43:e7:3d:f5:
bb:dc:0b:79:bc:84:a7:d1:c7:ab:32:a3:2b:34:68:
1c:a0:89:59:e8:e5:cf:db:a7:c9:9c:ed:59:5c:00:
51:a2:26:b1:12:de:f6:95:02:51:9a:88:81:05:46:
21:25:67:aa:6b:b1:4f:6c:85:ac:74:26:27:3e:e5:
77:ee:0c:72:6e:60:2e:f1:46:54:51:4c:18:6c:28:
fa:d8:9d:ee:58:ca:0e:50:ae:2c:f6:08:65:a2:0f:
2e:c3:f6:9c:85:43:54:c9:7e:9e:19:62:86:eb:86:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:CC:70:B8:1B:CF:A9:C0:E2:63:60:60:B0:20:68:92:3C:2A:34
X509v3 Authority Key Identifier:
keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:db:26:18:69:69:a4:f3:e8:3f:c2:13:8c:98:ce:04:21:
3c:fe:1c:d0:4b:7a:63:cd:be:f9:8b:ac:91:cf:f9:58:7c:50:
89:3b:f9:bb:b1:b0:e3:a9:a8:3b:37:e6:0c:73:52:57:55:42:
b1:e6:90:6d:9b:15:40:d2:60:7f:d8:69:c3:0c:e5:e7:ad:7e:
28:41:06:ca:06:11:b8:00:78:e5:b1:aa:86:52:7e:8e:bf:28:
ed:f0:ad:90:ad:d3:3b:ed:e2:b9:fb:a7:87:4c:06:98:f8:55:
3c:88:a9:61:12:95:12:c4:1b:e0:57:96:15:b3:e8:7a:37:56:
02:f3:b0:03:80:36:bb:cb:ee:be:d7:93:38:ad:c1:75:24:91:
d3:22:8b:c1:17:06:46:ab:ea:8a:2c:28:75:7b:9b:f8:40:f7:
c2:c1:dd:d1:77:7f:42:27:88:52:03:c7:69:99:45:b5:32:b4:
4c:29:71:75:77:7a:0e:56:9f:b8:00:25:5b:a8:7b:d9:a3:4f:
bc:59:a2:c5:91:aa:81:f4:18:7d:67:b9:d5:de:ea:af:f7:38:
99:b6:5b:4f:d1:a0:23:75:e1:aa:88:dc:d6:9e:d9:03:63:05:
ee:2b:f6:ef:50:bd:3b:32:91:f8:66:a6:9b:2e:58:63:86:9a:
32:c8:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:37 2026 by rpki-client