
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json)
Hash identifier: oGp/9Fmd+kLnLNi1MpeqPn18uifpYkpo1MvfzOtQ660=
Subject key identifier: 43:01:6E:2A:27:5E:A9:40:13:EF:E2:F2:01:AE:6E:38:82:5F:CD:8A
Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Certificate serial: 79919AF7AE7B3D6890779C08FC7605C7EF6ED515
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 03:48:13 +0000
Manifest this update: Thu 17 Sep 2026 03:43:13 +0000
Manifest next update: Fri 18 Sep 2026 05:46:13 +0000
Files and hashes: 1: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: g/5hkRUhu1D1kBJGuci0/zA00uH+iicrAAnjVC+bAGQ=)
2: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:91:9a:f7:ae:7b:3d:68:90:77:9c:08:fc:76:05:c7:ef:6e:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Validity
Not Before: Sep 17 03:43:13 2026 GMT
Not After : Sep 18 05:46:13 2026 GMT
Subject: CN=43016E2A275EA94013EFE2F201AE6E38825FCD8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:79:06:a7:a2:bc:cb:0d:de:91:3c:7d:2e:
40:68:b9:84:60:e9:fd:45:09:7b:09:99:e8:db:47:
d0:45:22:73:e6:f8:a4:ed:2f:9c:f2:c6:2e:4a:66:
22:a6:21:02:a6:64:01:9a:c4:b4:c8:e5:40:71:5a:
96:fb:63:ff:4e:56:ab:61:b3:d2:84:b6:c0:e9:f3:
91:83:1d:7b:77:9a:71:08:dc:91:96:eb:fc:ad:70:
67:e6:b5:c7:9e:5e:45:63:c2:27:92:47:d9:79:f8:
e9:26:53:6b:91:82:8b:a4:a4:85:b0:3e:56:11:d8:
0a:be:b6:cb:77:3c:4f:24:dd:87:f7:8e:d2:68:7a:
c9:9c:b2:a9:d0:65:3d:61:d0:fa:2d:5b:10:3f:30:
2e:77:a4:56:6b:d2:58:08:c4:1e:e2:33:9d:a7:26:
72:00:cd:30:77:a2:95:54:31:24:af:96:a2:88:9f:
68:8d:ed:e1:46:48:2c:c9:ca:76:b2:26:08:b7:59:
14:73:b3:4c:6e:52:a6:03:fe:f1:28:3d:8a:68:46:
71:c5:f8:e6:09:94:f1:af:96:3c:5d:b5:b2:15:0a:
ab:cc:57:5a:7f:15:81:e5:84:a7:1f:e9:4e:4c:97:
44:3b:19:ce:2d:5e:c1:b5:6a:fb:5a:f5:c4:65:2c:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:6E:2A:27:5E:A9:40:13:EF:E2:F2:01:AE:6E:38:82:5F:CD:8A
X509v3 Authority Key Identifier:
keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3e:0e:51:95:2f:af:29:72:58:88:3f:e8:cd:fc:e2:c1:a7:
64:63:0b:83:fe:97:70:6a:44:e0:c6:77:00:1b:4f:13:54:f7:
a5:7e:8a:09:c3:57:d3:7b:f8:aa:d1:11:4d:6d:a8:47:a4:5a:
a0:f8:ae:f7:18:7b:79:e1:3d:1d:6d:27:7f:85:96:c4:f1:14:
88:90:73:38:25:49:fc:57:f6:49:4b:e6:0c:bd:f2:a7:24:7c:
17:78:5c:3e:62:b3:73:06:2b:72:6d:80:fa:17:25:92:32:73:
b1:ae:50:c2:76:60:6d:48:00:03:3d:a2:50:74:d5:e7:d5:15:
e1:cc:a2:a6:17:2a:27:f1:05:92:6d:32:42:ca:45:18:45:74:
ca:74:13:ba:fe:78:f2:0e:b8:76:ad:67:83:8d:af:40:e7:f4:
f1:e4:27:ea:30:0a:ad:0d:7d:21:54:e4:cf:de:d7:f9:ad:91:
fb:e8:fc:6f:11:74:76:1a:4b:d2:6b:ec:86:4e:2a:23:1e:fc:
cd:f8:5f:ae:07:17:7b:5c:ed:a4:14:70:39:1a:f6:95:91:f2:
82:e8:40:0a:ad:0d:fb:bf:f8:d7:f9:61:20:25:c6:a5:50:e7:
39:ec:a0:b7:91:ff:3d:05:ba:a5:24:45:8a:50:8f:e5:f4:c6:
4f:69:6b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:58:22 2026 by rpki-client