
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier: OXZgfGQEgX1J5XjlEkvSdnt/Q0GfYwPVx6ekmIbP8PY=
Subject key identifier: E1:CD:EF:24:F2:87:68:A6:00:88:C6:69:C8:68:1C:6B:79:8B:25:E2
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 6386F041D8914D2D650405C2030167717D1187FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number: F8
Signing time: Mon 02 Nov 2026 20:18:04 +0000
Manifest this update: Mon 02 Nov 2026 20:13:04 +0000
Manifest next update: Wed 04 Nov 2026 00:16:04 +0000
Files and hashes: 1: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: IXw19AiIaq7HX/E9Gbd91sXLAv3Dfub66CmYcDKPrqY=)
2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 00:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:86:f0:41:d8:91:4d:2d:65:04:05:c2:03:01:67:71:7d:11:87:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: Nov 2 20:13:04 2026 GMT
Not After : Nov 4 00:16:04 2026 GMT
Subject: CN=E1CDEF24F28768A60088C669C8681C6B798B25E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:8b:3a:63:db:a6:c1:7b:1f:1b:36:22:e6:
08:66:e3:70:92:23:14:17:55:35:16:cf:81:28:6d:
4d:69:ac:f0:fc:ed:dc:5b:f7:47:87:6e:a3:45:13:
cd:5f:73:38:d8:5a:89:b1:8e:6a:eb:c7:52:4c:dc:
dd:f1:78:6f:6c:29:cd:4a:11:16:31:17:81:9f:5e:
2e:e6:84:a2:7e:2d:cc:ff:7e:85:54:ff:b1:03:1e:
62:73:0e:59:44:04:ae:1e:d9:1f:21:8a:f6:b2:47:
bf:b6:2e:a2:b6:14:91:22:5d:a4:4e:1d:05:8e:f8:
a8:96:93:2d:c2:be:b0:ff:c4:1b:0b:3a:04:f5:b5:
c1:22:91:d0:c4:6f:5f:ae:29:3f:22:43:48:b8:3c:
f8:6e:25:41:b5:a9:af:fa:69:5f:13:57:99:b8:f8:
17:ab:97:0b:0b:4c:93:58:0e:bc:9b:70:55:b7:b3:
29:37:f6:bc:ea:f9:05:10:cf:09:ce:d0:e3:d3:1a:
e3:58:7e:ed:2b:f8:19:0c:b5:a3:09:a2:65:3c:80:
a0:5e:26:a2:28:67:2d:1e:2c:ec:39:cc:39:c6:be:
10:c7:6f:a2:cf:63:e8:d9:59:9f:fc:54:ae:b6:2e:
b0:47:29:64:ec:f4:1f:eb:84:a8:c8:a4:8b:d6:38:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:EF:24:F2:87:68:A6:00:88:C6:69:C8:68:1C:6B:79:8B:25:E2
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:4a:b4:31:4f:7c:2f:40:3a:50:3c:c9:83:30:96:6d:43:
e4:a4:cb:30:65:7b:c4:ff:c7:94:bd:0c:d9:50:ce:81:2f:3f:
d9:32:dd:10:52:31:3c:12:77:12:8a:30:92:8d:c8:ee:b6:c0:
11:20:4c:91:9c:57:98:ab:21:15:9f:9e:c8:55:3c:50:da:e8:
59:cd:ab:b3:d7:83:3b:8e:0a:ca:e5:37:f5:03:36:7f:7c:40:
ad:1e:fd:aa:25:6e:84:47:74:e1:e6:a6:01:ab:f6:33:d1:fb:
9c:3d:d4:b2:ed:68:83:81:5c:52:28:87:b7:e8:0d:fb:b3:51:
fe:4c:89:e1:d6:1b:eb:1d:66:e6:4b:f1:dc:a6:85:c5:19:63:
15:91:26:07:88:0e:17:ad:b5:c5:5a:20:28:87:de:6f:f4:e8:
d5:06:0e:c9:28:c7:2f:b3:85:96:02:80:5e:b6:4d:98:5f:71:
42:ea:4d:7c:b5:ab:4d:93:f6:2a:63:9f:d7:0e:88:17:2f:83:
ab:7a:f6:6d:fa:c9:ef:c9:5e:be:12:99:d7:85:28:c9:ec:68:
f1:2a:47:3b:16:6a:39:73:9f:bb:51:3b:c7:2e:3b:72:23:38:
76:e0:b0:91:13:7e:e0:75:56:6a:e9:e3:3d:60:ec:0e:a4:fd:
f6:f7:93:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:22:48 2026 by rpki-client