
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File: B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier: SJrD/+5sXOXb46WxhrIjEamB2SqafuxLFk8yszbyem0=
Subject key identifier: EB:05:BC:7F:B2:61:01:BD:2F:DE:50:34:B6:83:7D:62:64:1D:8A:20
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer: /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial: 2336139D45508E9BC0161065EC34E2E6DB527E21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number: EE
Signing time: Sat 24 Oct 2026 06:57:32 +0000
Manifest this update: Sat 24 Oct 2026 06:52:32 +0000
Manifest next update: Sun 25 Oct 2026 07:42:32 +0000
Files and hashes: 1: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
2: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
3: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
4: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
5: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
6: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
7: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
8: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
9: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
10: 3130332e31302e36302e302f32342d3234203d3e203535363538.roa (hash: WPTgJgBZn9zU0LYC1z2CqvjiQ+vcOey/7diMUlVA1oM=)
11: 3230332e3137362e3137382e302f32342d3234203d3e203338373538.roa (hash: SYYpnq9isr1dStJrgtVd25Z2b1dMLPHgHXzqPemGAqw=)
12: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
13: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: FZS3C1f4mVnPFZjk3Kn9LwTWabnubhSaS7xhTAkFVnI=)
14: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
15: 3130332e31302e36302e302f32322d3232203d3e203338373538.roa (hash: /w04P6rBuyw3MdbZ7nzHPo3sQ0awbnKG2KmKUY3AjUc=)
16: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:36:13:9d:45:50:8e:9b:c0:16:10:65:ec:34:e2:e6:db:52:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Validity
Not Before: Oct 24 06:52:32 2026 GMT
Not After : Oct 25 07:42:32 2026 GMT
Subject: CN=EB05BC7FB26101BD2FDE5034B6837D62641D8A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:57:38:4c:02:dc:cd:35:a3:84:8e:e2:ce:
a7:c6:f4:5f:63:cf:d3:6f:56:8b:5a:11:94:3a:c1:
ea:29:1b:01:36:88:6d:d4:d7:55:b8:ca:18:4f:cb:
dc:59:1f:40:ed:82:c3:33:95:d7:ec:26:dc:f6:65:
ba:0e:06:c8:f5:17:4c:8c:63:0c:e5:62:d3:10:75:
23:1a:78:85:07:cc:06:7a:0d:98:07:bc:b7:a5:b0:
3e:08:63:cb:49:6d:d4:aa:51:df:46:64:39:18:57:
b7:13:90:ad:e6:29:27:95:b5:79:bf:57:ea:c7:03:
50:ab:89:0b:69:ad:43:20:9d:77:e8:b9:70:83:44:
dd:53:3d:e0:1d:0f:5f:30:06:e5:1a:e1:c0:ab:05:
e4:87:38:30:fe:f7:ea:29:cd:bc:a6:d1:01:d1:e1:
c0:6e:73:7d:b2:4a:58:18:c0:59:97:c0:95:13:e8:
e8:b0:98:f1:3e:9a:81:f3:72:1c:dc:4f:9c:f2:a0:
46:c6:7e:c8:b7:59:ae:a5:56:3f:08:d1:65:b8:c3:
14:58:52:bb:50:bf:83:16:89:5b:de:6c:db:d3:62:
8c:83:0e:79:f8:50:69:51:de:87:1b:ed:60:c0:bc:
db:5b:27:e6:de:2f:4e:09:33:e7:8d:3b:f8:49:11:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:BC:7F:B2:61:01:BD:2F:DE:50:34:B6:83:7D:62:64:1D:8A:20
X509v3 Authority Key Identifier:
keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8a:b5:0c:e2:fa:6b:40:b6:ff:39:51:41:4a:e1:f2:f4:e4:
a3:7f:26:2c:37:f8:4e:ba:ee:c0:82:a6:18:6e:6c:95:d4:f3:
de:d7:83:7f:8d:47:b7:a5:aa:77:c1:1d:20:99:d6:77:8b:cd:
9c:22:cd:b8:41:c2:89:18:a8:be:53:8a:08:fc:69:06:5b:5d:
3a:78:22:9f:cd:d2:74:62:60:33:38:e5:3a:7a:1c:54:08:51:
e8:a4:e1:3e:73:63:4a:aa:ff:25:b9:9e:6c:0b:c9:1a:e8:12:
09:88:77:88:a3:74:58:5c:0a:37:77:13:cd:ef:17:4f:0d:19:
1b:8f:1d:49:09:7d:5b:27:ce:11:f2:cb:16:de:09:01:f9:8a:
86:9f:76:13:77:71:e9:29:b7:91:8d:ae:e8:df:bd:90:88:5e:
c0:4e:69:ef:56:bc:cd:2a:2e:1e:02:76:ad:15:fc:c4:da:b3:
83:a3:43:a4:71:cd:fc:da:eb:17:ac:0e:d9:32:79:2b:52:46:
8c:37:86:d7:5d:59:c2:9b:72:99:6d:49:92:70:c1:b7:57:8b:
c9:70:2e:cb:3c:93:4f:c2:36:e3:06:50:42:7e:ef:28:3f:92:
88:6e:dd:cd:b7:30:b9:4b:ba:c3:d4:1e:31:68:d9:40:31:0c:
e0:22:fe:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIzYTnUVQjpvAFhBl7DTi5ttSfiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5
MjFDQjBFNzAeFw0yNjEwMjQwNjUyMzJaFw0yNjEwMjUwNzQyMzJaMDMxMTAvBgNV
BAMTKEVCMDVCQzdGQjI2MTAxQkQyRkRFNTAzNEI2ODM3RDYyNjQxRDhBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZflc4TALczTWjhI7izqfG9F9j
z9NvVotaEZQ6weopGwE2iG3U11W4yhhPy9xZH0DtgsMzldfsJtz2ZboOBsj1F0yM
YwzlYtMQdSMaeIUHzAZ6DZgHvLelsD4IY8tJbdSqUd9GZDkYV7cTkK3mKSeVtXm/
V+rHA1CriQtprUMgnXfouXCDRN1TPeAdD18wBuUa4cCrBeSHODD+9+opzbym0QHR
4cBuc32ySlgYwFmXwJUT6OiwmPE+moHzchzcT5zyoEbGfsi3Wa6lVj8I0WW4wxRY
UrtQv4MWiVvebNvTYoyDDnn4UGlR3ocb7WDAvNtbJ+beL04JM+eNO/hJESRnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6wW8f7JhAb0v3lA0toN9YmQdiiAwHwYDVR0j
BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw
RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC
MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz
ZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAz
MjY5MjFDQjBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAKKtQzi+mtAtv85UUFK4fL05KN/Jiw3+E66
7sCCphhubJXU897Xg3+NR7elqnfBHSCZ1neLzZwizbhBwokYqL5Tigj8aQZbXTp4
Ip/N0nRiYDM45Tp6HFQIUeik4T5zY0qq/yW5nmwLyRroEgmId4ijdFhcCjd3E83v
F08NGRuPHUkJfVsnzhHyyxbeCQH5ioafdhN3cekpt5GNrujfvZCIXsBOae9WvM0q
Lh4Cdq0V/MTas4OjQ6Rxzfza6xesDtkyeStSRow3htddWcKbcpltSZJwwbdXi8lw
Lss8k0/CNuMGUEJ+7yg/kohu3c23MLlLusPUHjFo2UAxDOAi/j4=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:26 2026 by rpki-client