
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json)
Hash identifier: zd9zSvXGjQm9TC0DhvlWUXIXdLDqxwJ0NMmbKz/X+ts=
Subject key identifier: C4:83:90:49:72:F7:FA:FF:42:B1:A8:8C:9D:6C:C0:06:A8:64:6A:66
Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6
Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6
Certificate serial: 3F36F158E6613D8434F23790AB41595F7A7E708D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
Manifest number: F9
Signing time: Wed 04 Nov 2026 09:30:05 +0000
Manifest this update: Wed 04 Nov 2026 09:25:05 +0000
Manifest next update: Thu 05 Nov 2026 09:56:05 +0000
Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=)
2: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: ba533iznqn0HfcD61NRMZP913D7nKSwOmCzuFZwLD3U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl
rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 09:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:36:f1:58:e6:61:3d:84:34:f2:37:90:ab:41:59:5f:7a:7e:70:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6
Validity
Not Before: Nov 4 09:25:05 2026 GMT
Not After : Nov 5 09:56:05 2026 GMT
Subject: CN=C483904972F7FAFF42B1A88C9D6CC006A8646A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:db:5b:9d:b6:09:84:44:da:38:8f:a4:bc:
e3:14:09:83:b5:35:d1:37:02:59:47:8b:a0:81:9c:
a2:f3:30:7d:11:67:1a:21:f7:fc:80:0b:07:77:4d:
2f:12:06:5a:54:02:27:d4:d1:eb:d8:39:d2:56:ef:
1f:c7:8c:b4:9f:8b:cb:98:45:9a:f5:ed:b6:6f:4c:
54:bc:f0:b9:ad:f2:e4:55:ee:78:76:44:6c:dc:80:
c1:f6:0c:de:99:01:83:4a:d8:20:7e:72:6c:20:3c:
72:7d:a4:f0:61:4c:68:be:e9:76:d5:94:7c:d2:9e:
67:ca:c0:e6:2f:00:2b:3c:d4:72:c3:56:83:60:58:
a0:54:e3:4a:61:08:04:9a:cb:90:7c:07:bc:19:c7:
21:27:32:a0:9b:d4:a9:87:36:ff:c4:54:9f:37:89:
0f:41:f1:ea:4d:35:3d:dc:14:78:d0:ce:f1:d7:17:
4b:94:db:ba:52:92:5f:9e:44:2e:c0:68:e6:d5:ca:
c6:c8:e1:d6:2f:22:30:84:d1:bc:b0:59:85:ed:3f:
dc:fe:55:1e:4d:a7:42:4a:1e:c0:27:7d:38:23:96:
c1:09:9a:7c:34:1b:4b:93:69:05:45:a4:5e:24:1b:
bd:4b:17:90:77:e5:17:6d:a9:b6:70:ba:fe:ea:7d:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:90:49:72:F7:FA:FF:42:B1:A8:8C:9D:6C:C0:06:A8:64:6A:66
X509v3 Authority Key Identifier:
keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:38:61:88:7e:03:a1:0e:93:1c:36:b9:2b:b3:c7:29:18:
6a:5d:d2:9d:8c:77:3d:52:07:c8:f0:8d:41:d7:58:fb:53:64:
df:42:ad:ed:02:98:5c:fa:48:2c:96:6a:04:9e:e6:c7:0e:01:
d0:d5:99:16:05:cd:72:38:d2:90:16:8d:bc:a8:33:38:c0:c3:
84:7e:11:7e:c6:b3:af:34:20:7b:d9:2f:77:75:7d:c4:c1:01:
d4:d5:a5:38:dd:fe:5b:ce:95:55:f1:72:51:71:4e:4a:2c:33:
69:bd:79:48:69:81:32:39:0d:3a:46:a1:de:ef:38:d4:36:d1:
18:fc:01:fa:52:12:44:06:de:40:49:18:f6:bc:39:97:51:35:
fe:a1:1d:56:ae:92:04:a9:98:eb:e9:f3:d3:fa:0c:b0:33:1c:
ee:0c:47:43:25:25:c1:b0:31:b9:80:ca:2a:52:c8:da:c7:65:
10:e6:d7:4e:3e:c7:be:5c:b8:97:7c:3a:15:b3:1b:35:9b:4d:
36:ab:11:89:01:45:3c:8d:68:5a:eb:12:4c:62:14:4c:58:df:
9e:66:57:43:ee:c0:80:62:fe:35:33:ad:41:03:aa:82:74:9b:
a9:86:dc:66:c4:f2:13:01:e9:e7:4a:c7:b1:6f:e8:79:f7:14:
48:45:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:48:03 2026 by rpki-client