
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json)
Hash identifier: 8+dbqRpqME6RkkqIe3XcFng5sYAI4k2d3FWQLX3zkwc=
Subject key identifier: 3C:10:4C:DD:EE:B8:41:1A:9B:9E:D1:57:E2:DE:17:DE:8E:B8:2D:D6
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial: 031399D0479D012C8D74F40708E8BA867F0451B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
Manifest number: E8
Signing time: Sat 24 Oct 2026 07:53:42 +0000
Manifest this update: Sat 24 Oct 2026 07:48:42 +0000
Manifest next update: Sun 25 Oct 2026 11:44:42 +0000
Files and hashes: 1: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: mVXc5WUI4P6Aya38dgKELRQ8qifM1rWIwOE3SePb6H8=)
2: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=)
3: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=)
4: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=)
5: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=)
6: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=)
7: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=)
8: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=)
9: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=)
10: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=)
11: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=)
12: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 11:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:13:99:d0:47:9d:01:2c:8d:74:f4:07:08:e8:ba:86:7f:04:51:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Validity
Not Before: Oct 24 07:48:42 2026 GMT
Not After : Oct 25 11:44:42 2026 GMT
Subject: CN=3C104CDDEEB8411A9B9ED157E2DE17DE8EB82DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:59:e6:48:db:86:4e:64:6a:d8:85:06:8c:
78:db:82:c8:4e:ce:f0:9f:58:44:92:5c:71:90:f7:
04:43:42:4e:08:9c:69:fc:04:34:15:55:66:05:d4:
67:53:7f:c8:5b:a6:cc:1b:85:5d:d4:b9:02:d1:91:
7f:76:72:c1:3f:de:4d:c6:d0:df:c1:2d:e3:ff:aa:
f6:0c:ee:80:b3:50:92:b6:f6:e7:ce:99:f2:11:8f:
00:f2:e2:8e:b7:f5:3b:f6:81:9b:4a:b6:26:a9:37:
e2:e1:cc:ec:56:05:f3:2c:47:d7:00:45:6d:f1:dc:
b9:51:e9:76:bf:07:22:6b:3b:95:71:1a:97:1c:92:
68:f3:98:5d:48:06:44:71:b8:7d:a4:9c:48:0f:f1:
7d:c1:b5:af:74:7f:9d:65:ab:b9:5a:7e:1c:a7:2f:
cd:ef:a5:85:ba:5b:59:21:f6:fa:04:b1:c3:56:6a:
a7:65:97:d0:1e:9f:ac:a6:e0:83:79:81:be:f6:ec:
8a:3e:f8:7e:7a:e2:15:c6:42:b2:6e:99:e3:5c:47:
74:87:4a:59:99:63:8f:37:40:b2:f1:d8:30:a2:d0:
f7:3b:40:3c:9d:18:b3:59:72:6c:72:64:f5:3f:14:
8c:c5:5a:e5:f3:35:ee:85:10:10:f6:d7:10:44:b9:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:4C:DD:EE:B8:41:1A:9B:9E:D1:57:E2:DE:17:DE:8E:B8:2D:D6
X509v3 Authority Key Identifier:
keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b7:03:31:1b:d8:0f:7a:b5:10:18:ae:29:b5:2b:b1:5a:b5:
6e:e1:8a:88:0e:63:2c:07:1e:ba:e8:48:68:7e:02:09:ec:d7:
fa:2c:d2:b1:49:a5:f9:5d:31:53:d3:af:36:cd:b0:2a:ae:24:
dc:03:99:05:c9:6a:10:9e:a8:74:4e:4f:b0:13:22:10:0c:f6:
a9:a5:10:02:c9:32:fe:f6:fc:7f:76:fe:45:4d:55:7f:af:41:
70:45:c3:ee:79:8b:b0:a3:26:8a:77:45:48:32:e4:29:06:f4:
ac:f4:ad:5e:a4:e1:0c:f1:36:97:3f:60:7b:71:40:de:1f:d5:
f8:b4:52:ce:63:8a:2f:67:65:c8:50:a7:b4:79:fb:1e:5e:97:
92:03:b1:4c:8e:34:62:26:0a:42:f0:94:0c:f7:fe:77:77:2a:
35:3d:70:20:7b:10:91:80:41:42:fa:19:3f:a5:38:04:84:78:
77:c2:ef:ce:76:21:b6:66:85:76:d8:ae:81:e2:31:a5:f5:92:
f8:86:bb:da:3b:cd:eb:05:33:fe:8f:d7:3d:cd:15:f8:02:99:
90:9d:9b:d3:32:63:a2:e4:c3:04:d8:a5:e6:6f:13:c2:1d:85:
fd:cf:e2:30:7b:28:1c:49:1a:0d:27:8d:eb:6b:05:39:2c:77:
6c:7f:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:54:28 2026 by rpki-client