
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft
File: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft (raw, json)
Hash identifier: K6TheVPRVBpVQmz1W3WpXSNljYSsOknD4cP3PyFZgkU=
Subject key identifier: 0F:4A:FF:3C:D1:17:B1:F8:5F:9A:76:E5:78:9C:F7:13:2B:6F:12:6E
Authority key identifier: 8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0
Certificate issuer: /CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0
Certificate serial: 6E46D26810792C2CC3429E6F148388BE9613983A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:22:25 +0000
Manifest this update: Tue 21 Jul 2026 01:17:25 +0000
Manifest next update: Wed 22 Jul 2026 03:56:25 +0000
Files and hashes: 1: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl (hash: x0UwL2zqc2lpjCSYWPQIEdAzpGZuGe0aRAACJWr8/fw=)
2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: otMHW/iALeuwuRkuqs8HAjMUYbLDHM48rPe1iSU6XuA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl
rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:46:d2:68:10:79:2c:2c:c3:42:9e:6f:14:83:88:be:96:13:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0
Validity
Not Before: Jul 21 01:17:25 2026 GMT
Not After : Jul 22 03:56:25 2026 GMT
Subject: CN=0F4AFF3CD117B1F85F9A76E5789CF7132B6F126E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:70:f0:5b:47:62:0c:c2:b4:a1:fb:47:1f:
5a:79:6f:77:fe:cf:b3:5e:f8:89:b0:b0:a1:a7:ed:
3a:ca:79:68:5a:88:1a:3a:12:6b:58:8c:35:10:43:
b1:b0:d7:e4:56:a7:b6:fa:98:e4:21:a5:f2:a0:c7:
ec:c9:8d:96:d7:db:8e:f6:52:2e:f4:63:1d:25:a4:
04:87:1b:f4:70:b4:ae:a2:4f:0c:b5:e1:f1:4a:3b:
49:e6:74:fb:23:54:10:12:f8:c8:79:e0:24:aa:67:
52:46:90:8e:ea:2c:6a:dc:03:cb:08:60:61:e0:4d:
9c:7b:ae:52:5b:05:af:b6:59:fa:3b:ce:27:49:bf:
5e:b6:ee:92:db:b4:34:8d:7f:bf:5a:5d:b3:42:51:
ef:03:eb:37:95:48:55:3e:74:f2:e4:64:70:c8:9a:
37:9e:a1:89:86:d3:77:d0:52:00:5a:b4:09:11:7c:
8b:1b:7e:d5:98:08:12:73:3f:1d:00:00:9e:bd:f6:
25:4f:08:1a:50:2b:5d:18:a9:63:14:5d:5a:43:e9:
b4:60:a9:65:40:a3:d6:28:e7:fc:b8:0a:24:5e:3f:
32:75:c0:a3:c6:d4:cc:45:94:f0:11:12:7a:bb:28:
76:81:09:34:fa:9c:1c:6b:fc:ac:78:23:cb:c9:4f:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:FF:3C:D1:17:B1:F8:5F:9A:76:E5:78:9C:F7:13:2B:6F:12:6E
X509v3 Authority Key Identifier:
keyid:8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:76:32:cd:09:ec:75:83:c3:4c:a3:44:b2:99:3c:2e:6a:35:
51:c5:1e:3d:a9:c0:92:82:b2:82:c3:90:63:c4:44:2b:92:e4:
46:0b:57:b0:bc:3b:97:f9:73:84:33:aa:e5:18:31:55:f6:7e:
47:6f:36:4c:5a:f7:e0:e9:9a:9e:f3:a6:63:0f:50:64:b6:4a:
07:70:ad:4e:54:32:98:0f:e3:25:08:ea:3f:3b:b2:89:e0:55:
b3:d0:1f:4d:e7:fa:a3:1c:24:13:4e:7e:c2:b5:b3:5f:c6:89:
f3:ad:97:b5:de:97:a1:1f:2a:53:68:6f:c2:93:72:b0:04:57:
e3:7b:a5:30:28:da:3a:74:49:6e:8c:ce:61:3b:1e:12:60:4e:
f2:4d:52:ec:79:c8:74:b0:ff:48:7b:44:f1:1a:10:be:f1:d1:
ef:8b:fc:a2:61:04:a6:ea:b2:67:f2:51:2c:aa:57:74:a9:8c:
7c:39:bd:20:b3:26:c9:e8:31:7f:38:ea:cd:c3:31:41:59:7c:
56:f5:39:e9:68:14:74:6d:7f:13:55:91:dc:a5:5d:1c:af:d5:
5d:d9:40:4b:b0:ca:74:09:c0:f5:71:ff:6c:41:ce:28:ff:a8:
93:84:e3:d3:08:16:76:5f:11:6f:4b:2d:73:f0:f0:87:dc:1a:
53:ae:09:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:30 2026 by rpki-client