
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier: bJKhzIhauhjqG1Uzchv3pQ6qvKbJvit/EAp2RR/D0Z8=
Subject key identifier: CA:FA:6A:FC:6A:BB:27:6D:31:E6:D3:49:CF:B4:EB:54:7A:F3:EE:EC
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 378B03779BB591CE3DE064BEF21313E3A0A1B093
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number: F4
Signing time: Sun 01 Nov 2026 20:53:53 +0000
Manifest this update: Sun 01 Nov 2026 20:48:53 +0000
Manifest next update: Mon 02 Nov 2026 22:42:53 +0000
Files and hashes: 1: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
2: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
3: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
4: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
5: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
6: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
7: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
8: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
9: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: E/X8dkAEmxhAAuSyXgex9L3nXAqwfpGJw3BZElc2uIU=)
10: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
11: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
12: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
13: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
14: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
15: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
16: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
17: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
18: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
19: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
20: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
21: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
22: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
23: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
24: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8b:03:77:9b:b5:91:ce:3d:e0:64:be:f2:13:13:e3:a0:a1:b0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: Nov 1 20:48:53 2026 GMT
Not After : Nov 2 22:42:53 2026 GMT
Subject: CN=CAFA6AFC6ABB276D31E6D349CFB4EB547AF3EEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b7:09:cc:63:bd:aa:d9:4a:03:f9:9b:1d:d3:
eb:e6:b3:3e:d7:10:2c:16:5e:0d:2e:1a:95:0f:9a:
3a:55:6f:56:21:22:60:3f:07:40:94:17:d8:71:ae:
b5:2b:f2:ca:3f:f5:5f:2c:b9:55:d9:81:35:7a:7e:
56:b0:93:ff:fd:2c:45:53:bf:80:8f:63:8a:c2:08:
23:ec:8b:2b:66:38:e2:88:60:66:43:21:9f:6a:30:
26:0a:21:a1:fe:b3:5d:94:40:65:1a:8c:9b:a7:52:
3f:12:1a:24:32:76:4a:0a:ae:d6:63:35:9a:be:51:
8e:08:6b:03:39:79:6f:2f:96:bb:94:f6:6a:bd:38:
8a:77:83:36:6d:1b:9a:0a:d5:81:b7:39:f6:01:9e:
7a:55:39:de:b7:73:ca:04:78:03:e4:e6:71:b2:55:
7a:2f:f4:1d:7a:ec:23:91:e9:01:c5:f6:d3:01:1f:
a8:3f:d0:e5:11:d4:b7:25:a7:1e:a9:7b:cb:09:83:
07:33:70:4f:98:46:96:5f:38:f2:3b:39:d9:a4:ee:
de:04:dc:e1:71:f1:43:7f:2d:72:ba:13:b3:7d:4a:
7d:19:f9:1b:6a:0b:b4:91:a5:a4:09:d3:35:b6:99:
5c:a0:94:76:20:f7:9a:7b:a8:2a:47:39:3d:17:3c:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:6A:FC:6A:BB:27:6D:31:E6:D3:49:CF:B4:EB:54:7A:F3:EE:EC
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:6e:7b:12:7f:31:cf:da:ea:b9:a3:1a:a0:01:94:ac:a7:
ba:ff:58:55:de:5d:71:88:29:09:af:1b:34:76:d6:ab:41:d0:
a5:d3:f4:0f:9b:8b:40:5b:18:7e:6f:cb:4d:f2:99:d4:06:55:
66:89:88:88:59:ec:a4:10:ed:21:3c:6a:7d:61:85:7c:ed:c6:
fc:b8:b9:b4:af:92:0c:17:1b:85:c5:3f:1c:73:1b:a7:0a:47:
9e:3c:fa:0a:d0:c1:9f:a0:97:bf:41:b8:c4:6b:b0:b9:fa:f5:
e3:83:0d:56:9a:bf:a4:cb:df:a8:1e:fe:cb:e0:0c:a1:36:9a:
26:fc:37:7f:c9:50:f8:36:2d:dd:e3:2e:76:66:c5:9e:95:d0:
3f:37:72:f8:8b:ca:35:3d:a1:2e:42:7c:8d:3d:c0:53:22:28:
fb:23:3f:47:e7:5a:11:a1:12:92:38:82:3f:fd:bf:9c:1e:bb:
9a:ce:44:bf:a4:7a:4d:95:05:9c:69:65:a7:14:66:a2:44:d2:
b1:0b:78:c2:e4:9e:c1:a6:9a:6a:91:a6:83:06:e5:26:98:e6:
a2:99:c3:82:93:00:60:66:91:86:95:6d:e7:6f:fd:6f:67:d0:
8d:b6:82:81:0f:54:98:87:ea:43:76:4e:63:50:10:4e:ef:d6:
2e:51:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:38:14 2026 by rpki-client