
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft
File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json)
Hash identifier: HVnX6FZeYZHIHPABL3lDVwjaMLQajz48nAqwI2euqXw=
Subject key identifier: 01:10:37:86:2C:44:38:5B:B0:5E:86:0A:C8:3D:57:39:39:B8:B3:3A
Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60
Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060
Certificate serial: 70217C5AF19ADAE6B473AA2E5B411E6BC9A285C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:18:47 +0000
Manifest this update: Thu 17 Sep 2026 04:13:47 +0000
Manifest next update: Fri 18 Sep 2026 04:18:47 +0000
Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=)
2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=)
3: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: 0RfgMPRB1RbBR3tYKRYV9WGOLuqgd4oaIDD7dcZziC8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl
rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:21:7c:5a:f1:9a:da:e6:b4:73:aa:2e:5b:41:1e:6b:c9:a2:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060
Validity
Not Before: Sep 17 04:13:47 2026 GMT
Not After : Sep 18 04:18:47 2026 GMT
Subject: CN=011037862C44385BB05E860AC83D573939B8B33A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:bb:31:77:83:c1:4b:d1:da:71:f9:84:69:
b7:e8:27:07:ff:70:27:10:46:ac:87:aa:dd:5f:0e:
41:63:49:06:a1:d3:a6:0a:fb:5f:ea:af:74:d3:26:
0a:15:0d:14:96:08:c8:8a:be:d1:5c:06:74:7a:c1:
e4:ba:74:58:89:10:7d:82:14:54:e9:5b:c7:5b:17:
ad:7a:8f:b7:bb:a5:12:83:f5:ff:54:eb:cd:7f:d9:
43:bc:29:bb:37:69:88:58:58:af:4d:47:0c:4e:3e:
47:be:e4:14:d9:5c:37:96:2b:b6:9f:7e:6c:ab:93:
f4:06:06:2e:f1:aa:a5:3c:e8:f8:ea:70:dc:85:87:
5c:81:47:c7:81:7d:0c:e1:3c:55:b6:48:b8:e0:84:
fa:da:65:cf:46:70:65:4a:a7:61:8b:10:6a:2f:34:
a9:fe:f7:53:07:5a:ec:19:a2:5e:28:54:73:6b:4d:
76:e7:2f:27:d8:01:86:bb:75:59:a6:58:83:c9:01:
a4:d5:72:7e:bb:da:5b:95:e0:8a:0a:e5:7c:04:2c:
61:44:a1:c8:8a:32:b3:8b:36:fd:6d:96:32:42:78:
b6:c5:0f:a2:ae:48:33:13:25:c2:2f:fc:90:51:8b:
df:7a:c0:96:2d:5e:c8:c8:45:7f:70:fc:b2:0b:f7:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:37:86:2C:44:38:5B:B0:5E:86:0A:C8:3D:57:39:39:B8:B3:3A
X509v3 Authority Key Identifier:
keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f2:24:36:5c:10:db:6b:cc:e0:39:bb:ae:16:ce:9b:2a:91:
25:8b:31:ac:47:4e:f7:5f:aa:24:9f:92:28:77:1a:cd:a7:cc:
28:fd:20:a6:07:3b:5d:a8:63:65:43:88:f1:e3:3b:59:9d:c0:
fa:25:2c:87:ac:0a:f3:61:ba:a0:79:14:0b:03:8a:ec:29:38:
fe:06:c6:b0:fc:4b:c0:07:fc:96:e6:41:77:ed:5f:10:8a:b2:
13:f3:db:c2:ba:43:58:0f:cd:cf:68:3e:bd:a1:d3:f4:d9:fb:
fb:f6:e4:09:ef:59:9b:d7:e5:b1:66:ac:86:b9:12:70:7e:7b:
35:dd:0e:ed:f4:77:7e:48:fa:77:e7:16:f7:aa:0f:d8:d6:59:
90:1d:ab:64:cb:9e:4b:fc:3e:79:41:f7:54:8d:f8:6e:f4:db:
0a:8f:c3:2a:d5:ca:00:8a:d5:14:08:f0:fc:0c:86:25:4a:28:
0f:81:50:00:91:d4:27:19:be:80:b4:cd:6e:5d:3e:6e:12:50:
01:fa:e2:17:fa:57:76:60:49:5f:a5:b0:c8:cc:ee:d7:86:3c:
92:dd:ff:27:2d:9c:cd:2e:be:3f:4e:40:43:df:88:89:5d:21:
32:3b:8d:74:fc:3d:39:35:d9:32:33:16:9b:90:8e:2f:2c:39:
67:2c:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:30:27 2026 by rpki-client