
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft
File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json)
Hash identifier: CWyPkarLpy7ZzScdi/sKJa9fGDL27Oav4iQ8sQrhbXU=
Subject key identifier: 67:94:D2:F3:D6:95:80:5E:C6:6E:F3:5F:FD:DF:01:67:36:3F:CC:21
Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C
Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C
Certificate serial: 6CFBBCE27ED437E6098426FCD5F9FA04CD428803
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 17:25:45 +0000
Manifest this update: Wed 16 Sep 2026 17:20:45 +0000
Manifest next update: Thu 17 Sep 2026 19:48:45 +0000
Files and hashes: 1: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: cuyDsVhgNehF6bGp94Jj4emyyaHqqu9MZHDnPeLFFbY=)
2: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=)
3: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=)
4: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl
rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fb:bc:e2:7e:d4:37:e6:09:84:26:fc:d5:f9:fa:04:cd:42:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C
Validity
Not Before: Sep 16 17:20:45 2026 GMT
Not After : Sep 17 19:48:45 2026 GMT
Subject: CN=6794D2F3D695805EC66EF35FFDDF0167363FCC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:1f:ce:f3:17:0c:33:ef:ec:d3:29:bf:f8:
3c:66:74:16:38:8e:a6:ec:ba:b1:50:8b:c2:cb:e4:
64:24:40:d9:78:5a:33:bb:9b:74:ff:60:46:5e:f8:
81:8f:fc:9e:58:5d:0d:16:79:2d:76:86:6b:7b:55:
b9:07:e7:6f:53:20:20:ec:3d:b0:f5:90:66:0b:c6:
9a:1d:67:ae:2a:2f:82:ea:84:25:c2:94:e2:ca:91:
76:c5:c7:79:af:02:48:e2:7c:77:31:bc:49:0e:7f:
41:e2:ab:b9:75:0b:ab:19:79:e5:44:43:8b:93:88:
2e:bc:33:ca:4a:dd:01:a3:70:b4:37:6e:3a:ed:37:
16:44:ca:e4:9b:1b:a9:cf:d8:0b:a9:18:62:de:97:
4c:b7:44:5e:50:cc:d5:23:fc:53:01:f4:9b:30:3e:
10:8c:12:1c:3d:86:89:1c:2d:05:bf:cc:54:5f:b6:
4e:84:66:4b:d3:eb:0a:f9:60:ca:57:0c:05:93:1f:
91:db:c7:d7:25:8c:ad:5f:ab:c7:96:89:c3:aa:f3:
db:90:17:b4:47:93:ff:97:6c:5e:b8:e3:2a:77:5b:
ad:e1:70:36:98:12:5a:b9:ed:53:d2:66:f9:e3:73:
6b:e2:2b:61:2a:42:5c:2d:69:64:2e:86:d2:ff:83:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:D2:F3:D6:95:80:5E:C6:6E:F3:5F:FD:DF:01:67:36:3F:CC:21
X509v3 Authority Key Identifier:
keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a4:bb:84:69:d0:77:dc:06:69:5a:76:6f:7c:27:15:43:b7:
3e:3f:bc:c5:14:03:52:1c:e4:a1:0f:67:08:65:65:f1:f5:24:
32:77:6e:23:92:68:a0:a5:bd:ec:97:da:a8:f1:60:fb:22:68:
d2:54:4a:04:1d:0e:22:ff:e7:6c:32:3c:0b:41:d4:e8:c0:a9:
7a:78:c1:42:5c:5e:0e:95:7b:66:3e:01:1c:8d:ca:ec:38:ed:
6a:8d:f5:4a:8c:ce:4f:1c:a2:28:4a:a9:05:e9:84:5e:02:d7:
e4:69:82:6e:9b:0b:fa:8b:23:ba:76:7e:4c:d1:5a:77:ca:fd:
3c:82:99:a4:9f:0a:8d:47:35:6c:2e:1f:fb:6c:b6:39:c0:23:
0b:02:37:dd:68:93:77:4d:6f:6d:f1:87:0a:85:48:62:42:41:
49:b1:6c:e2:f4:de:62:b7:fa:3a:a7:a0:38:1c:b6:21:93:5c:
a1:50:3a:d0:c8:c3:7b:61:22:29:b1:d3:e8:82:1c:a4:5b:e5:
66:d4:85:cd:fe:a5:aa:a2:13:41:3d:10:2a:d7:91:98:b2:8b:
75:f8:1c:c4:54:e1:86:33:ae:d1:b9:fc:b4:b4:28:61:8a:a4:
f5:f8:65:de:b6:06:04:5d:96:c8:ea:ea:4d:41:de:08:90:41:
f0:b9:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:55 2026 by rpki-client