
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
File: 8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json)
Hash identifier: dMkAaVBnE3QWz55P8n8i0fu7p4MBTEgy80EfO2Sp/PA=
Subject key identifier: 6F:4D:FE:08:CE:57:07:72:C4:01:21:E0:40:C2:1A:40:9F:E7:C4:A7
Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52
Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52
Certificate serial: 72EEEEB6770BF552F6D2188487D84B44A57784E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
Manifest number: F6
Signing time: Tue 03 Nov 2026 02:20:24 +0000
Manifest this update: Tue 03 Nov 2026 02:15:24 +0000
Manifest next update: Wed 04 Nov 2026 05:31:24 +0000
Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=)
2: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: 7KKSJdmCI4FvU0pRVsmINjsOucqW+IK5+cHkk7f9pd8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl
rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 05:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ee:ee:b6:77:0b:f5:52:f6:d2:18:84:87:d8:4b:44:a5:77:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52
Validity
Not Before: Nov 3 02:15:24 2026 GMT
Not After : Nov 4 05:31:24 2026 GMT
Subject: CN=6F4DFE08CE570772C40121E040C21A409FE7C4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:ef:d9:d8:4a:00:bd:33:55:34:8c:3d:f8:
c6:92:0d:7a:fa:6a:a7:22:75:53:26:e4:a6:5d:dc:
52:1e:57:64:85:54:9e:7a:cc:35:c1:7d:d5:9e:cd:
13:dd:84:89:07:30:3e:e8:ef:f1:1e:22:e6:9c:0c:
e4:b0:d3:92:92:d8:73:6c:45:6f:58:f4:aa:f9:23:
82:f6:41:e0:a9:82:33:0a:2b:6a:f0:1e:a7:93:7d:
34:0f:fe:84:30:d6:b5:ca:69:bf:d2:31:6a:58:41:
43:87:78:67:5b:37:58:1c:f8:88:e6:66:0e:1c:f1:
ce:79:ce:bd:64:3e:b5:fe:70:a3:af:c6:70:0b:ef:
26:12:c6:b0:d8:4f:94:2c:a9:f0:28:86:4c:77:e8:
5e:5c:78:93:b1:77:3c:4e:6b:e9:72:a0:36:04:91:
f5:c4:77:99:10:17:f7:91:c5:95:16:0b:92:a9:e5:
be:bf:46:3f:46:d3:d8:84:80:02:06:c7:3a:36:87:
f8:15:cc:38:c5:05:40:57:83:3a:43:88:bf:46:d9:
0a:6e:1a:13:81:e3:99:59:21:8c:13:0a:4f:f9:d7:
ec:89:e7:17:a5:64:26:23:ae:a8:76:ec:eb:d3:69:
ed:7e:4f:b0:5b:53:f2:40:d1:3c:74:4c:c0:99:ac:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:FE:08:CE:57:07:72:C4:01:21:E0:40:C2:1A:40:9F:E7:C4:A7
X509v3 Authority Key Identifier:
keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:68:65:29:15:1d:38:59:df:fd:9d:a1:a5:76:f9:42:db:5f:
6d:4b:98:46:c0:37:d7:1e:cc:fa:6c:6f:45:4b:c5:21:4b:09:
3b:1b:fe:20:7d:28:05:ec:10:aa:a4:27:af:f7:c1:61:07:5f:
9b:eb:8d:87:78:82:28:e6:42:cc:26:35:f0:56:8a:5e:ba:ef:
bb:81:8e:ec:0d:8d:07:d2:79:f7:09:1b:6b:0b:2c:7c:c1:e7:
6c:16:7b:e1:ac:d0:6d:b6:38:ed:75:f2:55:29:89:81:87:e8:
3c:6d:e7:fc:8a:e3:4a:1e:39:12:ac:48:df:34:ab:26:57:4d:
48:66:05:3c:be:e6:ba:fb:6d:15:4c:db:f4:c1:b3:fd:66:99:
9f:46:af:25:2f:93:60:c2:b6:78:9a:bf:1e:a6:89:e3:40:0a:
b8:82:1f:c1:d0:b6:82:2e:a8:c3:62:ee:5f:e8:7d:8e:38:bf:
19:e8:b0:af:1e:c6:30:b3:4f:27:11:8b:02:52:0f:5d:88:f8:
c1:d9:47:91:b6:30:05:1c:a1:9b:cb:46:09:6b:39:b1:c9:e0:
72:7a:ad:ed:ab:ed:fa:3a:5e:32:22:f8:c0:f2:54:1e:02:6d:
3a:9b:e6:5b:83:51:2e:89:0c:b5:5e:37:e7:c1:89:99:be:3c:
b6:d3:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:57:24 2026 by rpki-client