
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
File: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft (raw, json)
Hash identifier: ukW7fgm5GwVIX+Rbcp3Ufgh+xIsaxwOJKqn0tgLC6qE=
Subject key identifier: 93:8A:FB:BC:E4:79:E3:96:0E:B5:2A:2A:0E:92:4D:D0:24:6D:F1:C8
Authority key identifier: 8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E
Certificate issuer: /CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E
Certificate serial: 640123CCFD97B7C1F76772B7D4205FDE5526D1CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 05:35:18 +0000
Manifest this update: Thu 17 Sep 2026 05:30:18 +0000
Manifest next update: Fri 18 Sep 2026 05:56:18 +0000
Files and hashes: 1: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl (hash: 7Uetv59WQ76XWaTY2wfo1dSsTX3+YmzjsKazb0+84YI=)
2: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: 77972k6MYcuZdjQWO5NsuORM4k9B55J3rC8Pahn1Zak=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl
rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:01:23:cc:fd:97:b7:c1:f7:67:72:b7:d4:20:5f:de:55:26:d1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E
Validity
Not Before: Sep 17 05:30:18 2026 GMT
Not After : Sep 18 05:56:18 2026 GMT
Subject: CN=938AFBBCE479E3960EB52A2A0E924DD0246DF1C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:b3:18:fd:0e:e9:a3:ac:d1:09:43:af:4e:
4d:68:af:15:f4:33:46:3c:95:c7:7f:a9:54:57:ad:
fb:df:1f:d9:86:71:be:cf:69:f6:4c:09:d0:0c:e7:
d0:ec:2b:36:e2:99:71:95:55:b2:02:27:db:47:82:
1d:6d:ad:99:1b:62:76:e8:3d:c3:01:be:1b:bf:f6:
19:e6:b7:ea:a7:06:5f:19:b9:e9:5c:73:66:8c:7d:
9c:86:4a:ee:0b:99:c2:ed:d9:4d:e9:90:04:7d:7b:
3b:6e:d1:48:2b:f5:03:d3:e0:5e:e1:0c:03:fe:09:
65:b7:e1:91:1b:a9:ec:c5:ec:05:d9:e8:59:f6:67:
74:13:9d:d2:9e:b4:1f:32:a5:05:8f:e5:1d:f1:0a:
aa:33:78:b5:0b:6e:b3:a3:ad:aa:be:bf:3b:e8:1a:
43:05:86:47:f6:d8:04:71:a9:ac:5f:bb:7b:23:52:
2b:90:1a:f5:39:96:fb:d4:96:47:1d:4a:96:bf:6d:
8a:34:e1:e3:c2:eb:49:6d:81:2a:30:17:47:d3:cc:
ba:98:88:dd:a8:9f:84:ca:41:be:ae:b4:c8:65:8a:
71:ad:19:d6:f8:5e:4e:04:39:19:8b:70:37:0c:99:
18:9c:36:65:2f:4c:29:89:2a:ba:c0:e3:00:7e:7c:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:FB:BC:E4:79:E3:96:0E:B5:2A:2A:0E:92:4D:D0:24:6D:F1:C8
X509v3 Authority Key Identifier:
keyid:8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ab:63:78:1c:3a:bf:9d:32:7d:24:40:92:2c:91:99:1a:e6:
e8:58:29:7d:14:01:0b:89:e8:f5:44:29:c1:f6:32:eb:da:3c:
41:8f:58:b6:d8:41:d5:7f:7a:61:7d:aa:eb:b8:fd:a1:10:95:
ba:fc:ee:a4:00:0f:a7:f0:30:25:0e:8e:7c:8c:5d:1c:c0:a4:
49:0a:5a:ca:a8:b8:f4:bf:a8:c8:30:78:78:b8:2c:4d:25:9e:
98:b8:87:04:5d:d5:b2:a0:35:1c:82:7d:34:2f:42:e8:5d:1a:
9e:be:a0:4d:c0:76:bc:73:e3:0e:65:71:e6:3c:e1:25:35:fa:
ba:71:7e:43:93:54:ac:82:4b:a5:6f:a5:1a:8f:05:1d:eb:68:
50:33:fa:18:c2:d3:c1:35:cb:25:60:c3:f9:26:a8:09:75:44:
b6:04:ba:b7:92:96:9d:5f:67:52:98:91:54:30:ab:2a:c0:e5:
7d:40:18:3a:30:df:d6:65:01:a0:51:4b:f0:f1:13:48:19:35:
6a:84:83:76:78:e8:45:46:0b:a8:55:b0:81:52:e3:5b:68:e6:
d6:59:67:6e:ac:5c:83:c3:7e:98:b8:6b:f0:89:a5:e9:ef:72:
09:f9:12:40:ab:ef:db:fb:bf:25:8e:87:9f:86:72:f5:d0:e9:
f6:a1:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:50:00 2026 by rpki-client