
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
File: 8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json)
Hash identifier: 3pRdYqk6CckdJne8EbDlwsQ8CNLaNOK8IXm9AVnDbIo=
Subject key identifier: 90:AE:D6:34:DB:DC:73:89:72:70:A2:55:D4:B7:77:4C:D3:EB:3C:68
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial: 11F26578CBD0A31D6D747C2F90BE6A1B4AAF3818
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
Manifest number: 46
Signing time: Tue 23 Jun 2026 21:22:13 +0000
Manifest this update: Tue 23 Jun 2026 21:17:13 +0000
Manifest next update: Wed 24 Jun 2026 21:39:13 +0000
Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=)
2: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: SBlujfL2ZNtDuGS+eqJZY9s2kN3BBvOTedPr+E+Aeeg=)
3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=)
4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=)
5: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=)
6: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=)
7: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Jun 2026 21:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f2:65:78:cb:d0:a3:1d:6d:74:7c:2f:90:be:6a:1b:4a:af:38:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
Validity
Not Before: Jun 23 21:17:13 2026 GMT
Not After : Jun 24 21:39:13 2026 GMT
Subject: CN=90AED634DBDC73897270A255D4B7774CD3EB3C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:cc:f6:19:77:08:cb:9a:0e:ad:fb:ce:3e:
6c:62:8e:68:0c:44:8a:c0:e2:62:b4:2f:c6:b8:ad:
74:e5:03:7c:d2:30:97:c4:66:da:ec:7a:fa:48:73:
46:53:2e:f0:21:59:d3:f3:5d:c6:2f:7f:54:3c:ee:
42:df:29:d5:38:05:82:19:1a:6e:72:e6:c0:41:4b:
d7:f5:5f:63:af:73:69:f5:1d:b8:bd:ca:58:7c:b2:
c4:2b:e6:1c:8b:2c:c3:a3:84:c6:44:4b:46:94:2a:
4c:4a:1c:97:8b:b2:03:ab:f2:ff:63:0f:c4:af:f5:
b1:7e:1b:34:9d:0e:ae:09:93:61:2a:5a:07:6c:42:
bd:06:0f:d5:01:f9:33:c0:62:8e:2a:ae:a1:37:9c:
43:ab:d9:7d:f7:2c:4b:1c:3a:26:42:98:e7:bf:95:
1a:a0:8c:ab:42:25:36:5b:f9:7d:57:d0:f5:40:43:
5b:13:5f:d0:f3:85:5f:5d:d5:01:c2:27:81:31:75:
48:31:e7:62:36:33:af:3f:92:d2:5a:9d:8e:d3:ca:
74:0b:c8:8a:b6:6d:52:10:b2:36:ef:86:82:f4:32:
e5:b1:f1:e3:e3:5f:c3:20:b0:9f:28:4d:05:a3:e1:
87:87:f2:b6:85:cd:e5:eb:59:13:0c:55:75:aa:16:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:D6:34:DB:DC:73:89:72:70:A2:55:D4:B7:77:4C:D3:EB:3C:68
X509v3 Authority Key Identifier:
keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:52:f8:0f:97:8e:d7:a7:06:70:7a:c0:b6:0b:b0:e2:92:
a5:13:4a:d3:5b:a6:fa:20:1a:d3:b3:5b:8b:bf:29:4e:ec:7b:
cd:38:60:b1:3b:18:61:b3:6c:98:d3:de:f8:34:84:2c:82:25:
d1:59:3f:e6:a3:f9:5c:69:8f:80:a9:9d:80:33:a1:a7:20:51:
dc:15:32:18:8e:19:a6:0c:0e:25:6c:5a:f3:fd:b3:3a:50:9c:
03:f8:18:a2:64:d5:c3:47:df:7c:29:f5:e6:a0:4a:14:51:d6:
74:18:d9:71:5f:25:f3:00:c9:e6:31:de:4b:c7:0a:7a:ec:82:
71:fe:be:b6:59:49:e9:aa:48:91:7d:5b:cb:e9:c7:a0:6f:77:
9c:b4:43:8a:aa:81:fe:33:93:ae:0e:66:dc:de:4e:6f:f9:d0:
f6:c0:c7:2c:4d:76:5b:1f:65:8c:68:94:09:e3:9d:7f:2c:54:
e0:49:2d:07:6b:99:51:fc:09:8b:8b:fc:78:21:76:41:0f:41:
72:bc:cb:1c:66:f9:81:d1:84:0b:78:ec:86:e0:4e:dc:33:1e:
0d:bd:50:a7:e5:e6:b0:f8:3d:e2:23:fb:33:53:93:ab:94:7c:
da:06:d8:b2:55:86:06:fe:3a:76:6d:c8:03:a8:32:c1:46:38:
65:0b:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 10:10:37 2026 by rpki-client