
$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json)
Hash identifier: 7z4k1Plbd8tSd+S4ofZZukt7FJcUgXMfnnlVqTifijw=
Subject key identifier: 3C:21:56:E7:80:C1:09:34:29:F8:4F:3D:4B:18:F5:31:F9:17:9B:5F
Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C
Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
Certificate serial: 2110663ABD12495FE4C2DF95798A03B45F5D59D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
Manifest number: 61
Signing time: Mon 13 Jul 2026 06:57:15 +0000
Manifest this update: Mon 13 Jul 2026 06:52:15 +0000
Manifest next update: Tue 14 Jul 2026 10:47:15 +0000
Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=)
2: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: NDWYtYRk1bRjhpvZgK+nccIhm9rq+UQFf9eqN4DjRA8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl
rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 05:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:10:66:3a:bd:12:49:5f:e4:c2:df:95:79:8a:03:b4:5f:5d:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
Validity
Not Before: Jul 13 06:52:15 2026 GMT
Not After : Jul 14 10:47:15 2026 GMT
Subject: CN=3C2156E780C1093429F84F3D4B18F531F9179B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:26:ad:2a:a0:35:9c:07:88:6d:71:a4:e0:
7c:9d:db:25:2d:bf:92:f5:b0:46:1a:af:e9:c6:74:
05:cb:e1:f3:36:63:d4:a5:82:67:6a:a9:9c:ae:bb:
44:50:4d:97:03:a2:77:96:79:88:a7:20:83:dc:a1:
89:35:a8:90:dc:f6:46:ab:b8:fb:05:31:c3:be:63:
c2:44:c9:3e:3c:d0:80:ef:89:61:5f:a7:dd:4a:b4:
97:f1:fd:32:df:6f:51:22:8e:1a:18:a7:a5:52:0d:
8f:30:58:cf:1d:9b:47:ad:dd:21:ef:83:f9:4e:14:
1f:a5:04:35:24:9c:33:02:5e:fa:b4:10:42:dc:61:
c7:23:ec:94:f7:ac:46:15:d1:a7:80:17:f5:6a:72:
55:ec:ad:bc:bf:3e:b8:cb:b6:43:63:08:09:92:e7:
56:78:43:c3:05:f4:8d:14:cb:f3:16:db:b9:31:17:
8a:99:c1:9a:e5:a9:67:17:5b:5b:4d:a6:b6:99:29:
83:c3:f0:10:d2:42:a9:28:f3:6c:a9:7c:58:41:d8:
79:7b:48:b9:6d:dc:9e:ec:f9:a6:16:d0:4c:07:8c:
6b:23:7c:c5:4e:ca:2f:48:75:6c:ff:c2:59:f2:ce:
de:e6:65:d2:7c:0b:f7:04:d5:a5:a6:9f:a6:25:7b:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:56:E7:80:C1:09:34:29:F8:4F:3D:4B:18:F5:31:F9:17:9B:5F
X509v3 Authority Key Identifier:
keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:7c:b4:7f:93:c3:cc:a4:b0:a4:3f:89:d2:65:c7:a6:df:
9d:f6:e6:34:7d:93:58:7a:f5:5e:a4:e7:a2:a9:d2:38:93:54:
3e:af:5c:ed:b1:76:00:39:83:72:67:85:c6:af:1c:e7:d5:bb:
30:f5:04:60:0f:75:03:e3:27:62:be:fb:71:9e:13:b4:60:d4:
32:e9:fc:a1:4e:2b:b5:3f:f6:b7:8b:16:79:11:15:f8:85:a0:
13:a3:f6:6b:a8:79:4a:47:31:66:b0:cf:75:30:6d:a4:d1:e6:
8f:48:a9:95:95:d5:6a:54:fa:0b:ef:57:23:9c:98:32:9e:ee:
a6:f0:4f:e9:89:3f:06:77:3d:8c:6c:cf:42:a0:45:ae:d0:27:
04:fb:4a:54:fc:47:e9:59:9d:20:74:b4:5b:3b:c2:c4:76:79:
c9:35:49:ba:43:fb:02:71:00:c3:3d:a8:c4:0a:48:aa:87:f8:
d5:54:b2:57:ee:7f:03:f6:1c:ec:6b:51:7b:e3:13:1a:b4:b8:
06:14:ba:e6:c4:ea:04:34:28:c0:03:d1:33:c5:8d:f6:6e:b2:
62:e1:dc:b7:18:57:18:f8:60:b0:90:75:31:48:8f:53:d6:c0:
ed:cd:09:c1:19:b4:73:40:44:23:3a:dc:f3:e7:1e:10:81:68:
51:58:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:46:49 2026 by rpki-client