
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
File: 8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json)
Hash identifier: M+Klb1WK/7QHA4emuLA9hLZtwVD/bxCh7XVAlo2olXY=
Subject key identifier: A4:FA:05:7B:5D:67:2E:35:99:A3:B0:E9:04:CE:4E:48:3C:E9:E5:82
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial: 23D6E11483C6F83DE8CA1A823DD45BAD81B2948C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
Manifest number: 88
Signing time: Wed 12 Aug 2026 19:20:54 +0000
Manifest this update: Wed 12 Aug 2026 19:15:54 +0000
Manifest next update: Thu 13 Aug 2026 22:00:54 +0000
Files and hashes: 1: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: +X0mEpJYFBEY63L03n8fKGp2hDAzdJUCn4PPHa1fthw=)
2: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=)
3: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=)
4: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=)
5: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=)
6: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=)
7: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d6:e1:14:83:c6:f8:3d:e8:ca:1a:82:3d:d4:5b:ad:81:b2:94:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
Validity
Not Before: Aug 12 19:15:54 2026 GMT
Not After : Aug 13 22:00:54 2026 GMT
Subject: CN=A4FA057B5D672E3599A3B0E904CE4E483CE9E582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:08:c8:43:b5:ef:73:91:e5:a9:71:e1:13:
38:46:d5:48:f6:da:ca:93:8a:ff:6a:ea:68:9d:19:
6c:ce:54:f5:fe:83:7d:df:3c:3e:17:ea:67:11:1a:
30:fd:50:8b:5a:ff:1a:a6:61:c9:b0:86:cf:7b:d7:
e9:c4:da:4f:48:10:13:88:5c:6b:36:d2:2b:75:37:
1c:04:8e:e2:92:63:23:f2:a3:78:86:75:c6:5c:c1:
d1:45:f0:66:ef:a0:54:a5:1d:85:a6:b5:69:ce:37:
d4:aa:51:0a:52:9f:76:03:92:49:b6:1e:86:6a:9d:
19:fd:7e:a0:35:2d:87:db:73:cb:5a:eb:fa:4f:c5:
e1:0f:ad:a5:e3:8e:a7:eb:59:a9:f3:59:50:80:14:
1c:02:cf:41:3b:99:48:b3:32:79:2d:70:b5:f5:97:
a5:bd:bd:38:83:a0:f3:c7:f7:a6:94:89:6b:6e:68:
16:42:48:61:b6:9c:ad:a6:d7:26:ee:22:53:16:35:
f4:79:26:a6:2d:b2:2d:37:56:7d:32:27:7f:18:0c:
65:1b:c3:e9:ab:8d:b6:47:7e:3d:a8:98:72:23:ec:
6b:96:54:ca:f3:b7:8f:66:11:e8:f0:9f:69:aa:a7:
80:5b:f9:52:97:1a:86:c0:81:ca:cf:4d:13:7f:a8:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:05:7B:5D:67:2E:35:99:A3:B0:E9:04:CE:4E:48:3C:E9:E5:82
X509v3 Authority Key Identifier:
keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:ba:47:8c:60:25:07:ae:c9:b3:8e:a9:ac:b6:e5:62:7d:
82:b4:bb:5c:ee:3c:f6:12:25:e7:78:d0:04:44:9f:a4:5d:a3:
22:1e:3c:78:1f:d6:4d:9c:91:1a:55:38:c0:ed:69:44:f7:b6:
93:9a:0d:59:59:b1:86:58:a5:3b:27:9f:8c:fc:92:c4:93:16:
f3:af:cb:34:be:e6:e1:12:0c:2e:6d:9d:ac:0f:97:73:29:97:
94:bc:52:00:f9:c5:de:79:ba:05:59:00:34:84:92:ca:5c:2c:
75:14:cc:a4:63:f1:0a:d4:2d:06:45:1e:22:2b:c8:0d:8d:af:
99:c3:23:b0:f8:d7:35:f8:01:4b:65:8c:a8:1d:2a:5a:53:86:
c3:a7:2e:04:d7:0d:e1:ef:e9:d8:22:3b:49:52:33:0b:a3:24:
0f:c2:9b:68:46:41:95:80:f1:a8:ca:0f:1f:e9:67:9a:59:14:
bf:82:95:dd:b9:a0:78:35:f1:36:b8:fb:d6:59:12:85:e4:8c:
f6:bf:af:0e:1f:b2:dd:9d:8b:20:15:b1:c2:22:fe:cc:a2:eb:
bf:bf:fe:71:85:b9:1c:16:78:4d:da:42:84:72:86:51:2b:db:
3e:e7:0f:7b:4e:7e:ba:08:a6:2f:16:29:2b:05:ac:b2:78:13:
7b:f0:35:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:17:19 2026 by rpki-client