
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json)
Hash identifier: jw31E6jrfvxm1p4TSmIRJcNndXBK3hRHG8PviWFOOUw=
Subject key identifier: 06:84:E3:48:59:A8:F2:08:84:EA:91:AD:8A:E1:B9:C7:E3:BA:26:25
Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164
Certificate serial: 504BE889688021B57A5C05144338F64F04AE64E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
Manifest number: 93
Signing time: Thu 20 Aug 2026 03:37:11 +0000
Manifest this update: Thu 20 Aug 2026 03:32:11 +0000
Manifest next update: Fri 21 Aug 2026 07:24:11 +0000
Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=)
2: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=)
3: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: HICyzwvDZrSwmCGEKWercYAZp1mEpa9nayn5zZe+XKo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 06:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4b:e8:89:68:80:21:b5:7a:5c:05:14:43:38:f6:4f:04:ae:64:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164
Validity
Not Before: Aug 20 03:32:11 2026 GMT
Not After : Aug 21 07:24:11 2026 GMT
Subject: CN=0684E34859A8F20884EA91AD8AE1B9C7E3BA2625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:71:b8:fa:39:b6:34:b8:29:3b:21:9f:c5:
e4:58:c7:a1:0d:7d:16:73:56:95:b8:7c:1e:e0:a2:
10:9f:6a:ac:f3:11:11:10:4c:d4:c6:f4:ef:f7:4d:
33:b3:98:18:71:af:b4:2e:6e:9f:96:ce:47:e6:9a:
4f:0f:70:44:0c:81:80:d4:49:fc:7c:a7:c0:d9:7f:
20:4a:72:8c:86:ea:42:d8:23:62:80:da:36:13:15:
be:49:87:e5:d5:5e:4c:63:70:69:4f:01:bb:4f:48:
ae:1b:59:cb:3c:70:90:e7:fd:78:e3:ea:28:08:e5:
0e:5b:30:b8:10:4e:35:fa:a6:67:a8:bd:e7:55:ec:
20:68:b2:7c:17:9c:1c:68:bc:f9:ea:2c:af:29:b4:
a0:99:26:62:ed:10:f5:5b:33:09:b9:cd:77:43:6e:
56:e4:aa:cf:be:80:d4:3d:92:1b:39:3e:70:63:d5:
13:ec:31:d0:e8:39:5d:05:17:0f:64:e3:5e:c6:ea:
bc:15:80:c7:0d:d7:5a:b0:60:98:7c:08:6e:fa:b2:
7d:c1:29:b9:f2:b8:87:0c:4d:94:96:c9:c9:5a:97:
b7:c0:cd:88:23:90:90:29:f9:fc:70:63:b8:d3:05:
9b:73:b2:32:54:c2:ad:ab:55:ae:74:f2:3a:2b:a9:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:E3:48:59:A8:F2:08:84:EA:91:AD:8A:E1:B9:C7:E3:BA:26:25
X509v3 Authority Key Identifier:
keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0a:27:88:97:7d:96:85:98:42:11:4f:55:dc:54:8f:9a:45:
c9:cb:22:ed:c1:20:b5:5d:79:58:83:6d:61:d7:3c:ea:de:0c:
91:d7:56:b1:8c:ae:d9:9b:86:fe:65:82:86:91:66:a6:1b:39:
33:59:6c:1c:c8:3f:f4:e5:48:6e:47:fa:04:9e:7c:bf:71:90:
a2:7a:d1:b4:4d:c3:5e:7f:70:19:ab:6e:09:65:68:3e:a6:f2:
8a:a4:63:f2:90:4e:f1:5a:0f:89:c6:8a:b6:82:db:f7:f3:0a:
dc:4e:d9:0a:57:9e:2c:23:52:be:e2:72:70:a2:c1:e3:57:ab:
7c:f9:33:9c:31:00:fe:8d:3a:94:ce:1f:75:5c:9a:cd:0f:91:
2a:89:0a:af:46:09:87:03:1c:3f:93:98:ef:9b:d6:18:72:5a:
c5:2c:01:79:24:62:87:93:30:58:2a:aa:fd:2d:bb:c4:1e:dd:
21:79:25:b2:68:41:99:ec:69:0c:8b:b7:88:d1:eb:cf:c5:69:
69:9e:33:77:e7:b0:ed:f4:43:6b:c3:32:01:ea:95:31:62:e2:
95:9b:c4:4f:77:27:c8:d7:3a:37:54:73:77:91:ab:b6:b9:b4:
36:d0:a8:88:1d:f5:d2:58:4f:70:88:1d:2d:9d:7d:9e:4c:fc:
2f:f8:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 10:22:57 2026 by rpki-client