
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
File: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft (raw, json)
Hash identifier: Fo9G2gTuqw7askPPTlRHOTZlGHl55BHmYJFMPhdwWv4=
Subject key identifier: A9:4B:FE:77:3B:56:7D:1A:77:1D:23:23:F2:F5:64:28:E1:F4:12:42
Authority key identifier: 8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E
Certificate issuer: /CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E
Certificate serial: 6FD69B78335623E53BB83578039AF7C102BD62F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 02:50:57 +0000
Manifest this update: Sun 02 Aug 2026 02:45:57 +0000
Manifest next update: Mon 03 Aug 2026 04:52:57 +0000
Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: 77972k6MYcuZdjQWO5NsuORM4k9B55J3rC8Pahn1Zak=)
2: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl (hash: GXEQTfZ/Q5q8cLdFhHl00H5kwzfQNWr7bmXyiNDaHLM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl
rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d6:9b:78:33:56:23:e5:3b:b8:35:78:03:9a:f7:c1:02:bd:62:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E
Validity
Not Before: Aug 2 02:45:57 2026 GMT
Not After : Aug 3 04:52:57 2026 GMT
Subject: CN=A94BFE773B567D1A771D2323F2F56428E1F41242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:53:9c:2d:ab:21:27:12:99:0d:fc:68:8c:
41:27:c2:37:cb:7c:37:11:d9:4d:a4:1d:36:a8:4c:
e6:6c:33:b2:15:b7:ac:5d:5e:f8:97:3b:ab:dc:f3:
8e:d9:06:5d:47:cf:ce:95:65:b4:51:e1:46:36:c0:
f1:4b:c2:79:d2:5c:6d:70:3e:78:6e:cd:24:e7:b5:
8d:ed:ec:e1:5e:c1:c4:71:46:18:74:03:7e:83:b8:
c0:50:55:09:8a:3a:a9:26:ec:ae:35:ba:04:54:35:
df:98:c3:e0:a7:a9:6d:d2:d7:c2:a5:af:c1:95:2f:
4d:bf:f6:9f:f6:10:c8:0d:df:72:4e:d5:41:ea:71:
4f:63:b7:bc:18:63:8c:32:48:a3:71:cb:00:85:e5:
b3:17:be:3e:89:98:f4:68:f4:90:c3:0a:07:41:f1:
d3:68:ac:9c:80:79:cf:4e:e8:ac:f6:6e:55:32:7d:
bf:a7:a4:c0:b4:17:8a:fb:df:3f:68:2e:ce:03:ca:
56:98:c3:d0:7d:a9:00:1a:96:60:50:65:dc:d5:8b:
e9:6b:f7:5d:d0:a5:dd:40:0b:b1:9b:d6:2b:7b:c4:
09:51:3e:97:25:dc:42:cf:74:14:37:d0:93:1d:78:
01:23:88:a0:82:c3:d1:40:ed:9a:bc:fa:23:f9:c6:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:FE:77:3B:56:7D:1A:77:1D:23:23:F2:F5:64:28:E1:F4:12:42
X509v3 Authority Key Identifier:
keyid:8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:71:c6:d1:0d:9d:70:ac:3c:09:d4:c9:b8:ff:98:e8:28:
39:c2:27:0d:d0:15:c5:9d:9c:c5:6f:f7:aa:a0:a6:8d:1d:0f:
c8:17:73:ab:d5:c7:a6:7f:fb:0e:31:dd:e0:19:5f:a8:fa:32:
9c:c2:ed:86:d5:b9:1d:a1:28:9d:a4:c1:1a:1a:09:99:98:9a:
79:72:26:16:17:10:a4:e2:11:68:a1:fc:d9:ac:e6:27:4b:ea:
87:8f:38:6a:ff:b9:b4:d1:b8:99:6e:3f:6e:4d:a7:9e:a2:cb:
a4:a3:c3:46:7f:02:98:89:06:0b:48:03:b1:7e:5e:f8:51:e2:
a4:fe:87:9d:30:99:04:1b:fd:6c:d1:ff:f7:10:ff:e8:cb:05:
4c:29:c6:c0:d6:89:e6:07:3e:32:e0:5b:ab:6c:9e:ea:54:1b:
5b:79:dd:79:5e:12:65:5b:68:63:f3:07:be:a3:2a:a5:4c:5b:
96:b3:16:c5:18:61:20:d0:94:e8:e1:86:3b:05:a8:05:43:1b:
6b:77:ea:7b:3c:d2:9e:51:c6:40:26:06:ae:63:b3:04:89:90:
d0:15:dd:96:0f:38:f9:4f:4f:b7:a2:51:db:5a:c8:b7:dc:b6:
6a:9a:37:d0:7f:90:41:c5:fb:e7:77:b2:da:fe:5c:c2:6a:5a:
2f:b8:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:40 2026 by rpki-client