
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json)
Hash identifier: 5dASjqUImGRfJs2P/VRzVtlbbZt1ueJVuyHf5mIgLUs=
Subject key identifier: 71:44:00:F0:3D:A3:49:C7:C9:D8:C0:C0:BC:DA:C9:36:B3:93:50:85
Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164
Certificate serial: 09018843FD152619B0DA4984AE96AA0D2F69404E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
Manifest number: 05
Signing time: Tue 05 May 2026 08:40:42 +0000
Manifest this update: Tue 05 May 2026 08:35:42 +0000
Manifest next update: Wed 06 May 2026 10:07:42 +0000
Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=)
2: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: JnrW7xntozx3ody4Hr/dkh2rpt5NW08cTLLPuVZWa0U=)
3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:01:88:43:fd:15:26:19:b0:da:49:84:ae:96:aa:0d:2f:69:40:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164
Validity
Not Before: May 5 08:35:42 2026 GMT
Not After : May 6 10:07:42 2026 GMT
Subject: CN=714400F03DA349C7C9D8C0C0BCDAC936B3935085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:c6:6c:4d:c3:9a:b9:45:d8:46:ec:be:8a:
4a:56:a3:71:5c:0c:8b:a1:28:9b:a2:89:ca:a3:cd:
14:d6:70:32:68:7a:54:67:4c:9e:7c:44:f2:4d:fb:
bd:70:ec:cd:07:76:02:6b:a3:38:0d:3e:eb:42:92:
cd:43:65:6b:87:c5:a0:a9:47:ac:1c:2e:a4:37:6f:
18:14:7a:58:a9:e0:3b:ae:c1:89:bd:e6:8a:24:ef:
33:e5:e9:00:ee:95:c7:ab:17:5b:c2:80:ed:d7:5e:
51:1a:86:90:ae:52:80:86:1d:b6:e5:53:70:7e:e3:
cb:cd:01:d4:06:2c:a8:18:ed:62:dc:12:a4:f2:ae:
cf:92:c2:78:74:75:6a:c4:8a:dd:81:a5:36:72:07:
9f:ed:74:12:b3:18:f7:57:92:5e:28:68:4a:dc:f6:
e4:e3:e8:b1:1e:97:a2:2c:0b:1e:1e:82:59:4a:91:
74:98:22:b2:01:d6:b2:7e:ac:5a:c4:21:a1:25:dd:
c6:a8:f5:d0:7d:4b:77:d5:b7:76:66:34:b8:e9:5a:
7b:ba:84:86:3d:3b:dc:b8:77:b8:9d:d5:ce:d9:45:
2a:07:6b:4a:21:9f:da:ed:43:aa:04:95:2d:ba:35:
23:02:79:2b:5d:de:65:2b:18:b2:eb:ea:30:5f:e8:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:00:F0:3D:A3:49:C7:C9:D8:C0:C0:BC:DA:C9:36:B3:93:50:85
X509v3 Authority Key Identifier:
keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:65:e5:41:ec:2e:dc:6a:b4:98:1a:65:91:7d:65:15:ce:ea:
d3:99:26:5e:eb:f5:0d:74:91:39:4d:04:36:95:a6:da:1a:b5:
f0:9b:cc:6d:72:bd:88:06:bb:2f:83:69:4e:da:1c:24:1c:48:
2e:5f:82:7e:69:9e:74:8a:b5:80:27:f3:5a:cb:01:5c:a7:86:
80:dd:92:8c:48:f3:82:5e:61:69:98:d4:12:a8:96:92:39:69:
ce:47:4e:04:26:5b:2a:96:4e:ea:0b:40:68:ac:c9:be:af:79:
db:d9:76:f8:4c:27:6c:71:2d:5d:50:c7:e6:ff:4c:fa:8a:68:
01:04:dc:07:66:2f:a6:57:11:32:5c:8d:35:72:b9:25:77:86:
b0:d5:72:57:c3:d5:6b:32:20:90:0e:89:d2:a5:42:49:80:a8:
56:3c:05:c1:27:09:a3:24:ae:05:50:6c:45:db:f3:ae:6c:57:
55:f3:3b:e3:c5:3d:13:1a:63:73:8f:31:56:a2:54:64:a5:e0:
de:76:ee:3b:4a:7a:c7:6a:d7:4c:c9:05:3b:32:17:f4:63:78:
d8:8e:4b:ea:7e:0e:c8:6a:4f:06:c8:88:70:e1:b1:e4:d0:ec:
2a:d8:5a:fc:7a:dd:52:a5:e3:d3:b2:4b:a7:2c:5c:0f:3f:46:
7a:c6:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:06:18 2026 by rpki-client