
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json)
Hash identifier: 3utYKsm2ZvYJ7WQ+O4M3NWw2927pH9HSick6wGubi90=
Subject key identifier: 07:EE:FF:3F:24:AF:32:28:5E:44:8F:EB:06:FA:20:2D:BE:04:53:89
Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Certificate serial: 7601B6ADB6757D38B9A6260D0CE49A8F25505128
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
Manifest number: B6
Signing time: Thu 17 Sep 2026 01:45:44 +0000
Manifest this update: Thu 17 Sep 2026 01:40:44 +0000
Manifest next update: Fri 18 Sep 2026 02:41:44 +0000
Files and hashes: 1: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=)
2: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=)
3: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=)
4: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=)
5: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=)
6: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=)
7: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: 86EdL7fN/vpYFhoWh8PG89jdjRK5MvsxmnRKkr00e2A=)
8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:01:b6:ad:b6:75:7d:38:b9:a6:26:0d:0c:e4:9a:8f:25:50:51:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Validity
Not Before: Sep 17 01:40:44 2026 GMT
Not After : Sep 18 02:41:44 2026 GMT
Subject: CN=07EEFF3F24AF32285E448FEB06FA202DBE045389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:a8:f7:6a:75:b7:aa:91:86:a5:8c:c6:37:
4e:6f:6f:b5:d6:92:f9:54:91:06:57:39:0c:d9:11:
e8:00:e2:39:fb:70:5d:82:d4:7e:71:9a:f9:2f:d2:
95:51:ac:68:15:1b:31:f3:fb:90:46:06:44:2b:12:
9a:2d:e1:eb:51:bc:9a:6e:49:52:f4:29:eb:e8:89:
1c:0e:9e:0f:f9:44:b5:5b:39:2c:78:fc:72:dc:7e:
07:32:35:19:f7:ca:65:bd:90:5d:38:f7:ad:a4:ab:
98:c2:68:3c:d9:31:be:e3:ca:d2:f6:36:c4:6b:53:
7b:43:ef:68:95:40:8c:b0:96:0b:1c:e0:9a:d4:69:
b9:64:4b:84:3a:2d:b3:a5:42:fa:20:bd:43:4a:dd:
52:92:8c:0e:78:61:be:33:00:27:dc:28:8f:9a:a6:
91:2a:db:3c:66:8e:dc:59:2b:2d:8f:b1:b8:ee:8d:
3e:84:79:e0:97:f4:69:ca:a2:a6:26:7e:27:91:a6:
76:10:cc:43:67:24:06:e4:af:ef:8c:c4:b3:18:81:
47:fd:ac:f1:39:82:0d:a8:79:de:a1:96:ea:f3:c3:
ce:49:bb:a1:51:1d:51:de:7c:2d:47:d1:03:c4:0d:
40:ec:34:c0:77:6e:09:99:37:65:e6:0a:8c:a5:2b:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:FF:3F:24:AF:32:28:5E:44:8F:EB:06:FA:20:2D:BE:04:53:89
X509v3 Authority Key Identifier:
keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:45:cc:01:67:02:a6:6d:79:5f:61:52:11:95:be:29:61:
2f:a9:ae:6a:ee:07:e9:bb:df:83:83:5d:d6:a2:4a:77:25:d8:
87:f5:b5:b6:13:ab:8a:17:92:a9:be:a7:cf:72:9d:b0:c2:5e:
72:2c:e4:21:d6:0d:b8:75:6f:dd:1d:a1:75:a8:ef:68:3b:59:
55:65:b4:e7:e9:f9:fa:db:1d:d6:51:70:5a:89:03:96:1f:2d:
e8:a0:79:b8:e7:e1:a0:ce:65:48:f9:2a:e3:0b:3f:05:5a:8d:
99:36:4c:0f:a6:eb:ad:e4:c1:eb:00:5d:06:05:6f:b5:13:c3:
f1:6c:48:30:a4:81:d0:90:f5:d0:d0:9d:6e:93:b5:c5:d6:69:
e2:18:91:37:65:36:cd:b6:b4:91:6c:99:5b:6d:f8:48:ea:00:
77:1e:1d:4e:35:69:7d:3e:b7:c7:8f:59:6d:f5:76:49:cf:e3:
61:42:c1:d5:b7:a3:55:8e:c1:5f:fb:f9:76:41:fc:63:a6:d2:
e4:57:08:d1:b1:90:bf:c0:80:d8:79:a9:54:a2:95:7e:7b:6b:
b6:7f:09:79:c5:68:1e:dc:0d:15:45:72:87:79:09:2b:5f:a7:
d3:da:c9:fe:c7:c7:73:dd:0b:b3:b5:7a:0a:f9:d3:79:11:7e:
91:9b:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:54:45 2026 by rpki-client