
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier: aUWaIbwhltU6gIVP5tudiTa22fPSfuptp/NQidnidB8=
Subject key identifier: F3:1B:5D:C7:F5:3A:AB:11:D0:99:DD:AC:35:E6:2F:53:78:64:34:C6
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 2A4F1A67DF68529CB3EC7D6ABC5172DC14B755D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number: 36
Signing time: Thu 11 Jun 2026 13:07:46 +0000
Manifest this update: Thu 11 Jun 2026 13:02:46 +0000
Manifest next update: Fri 12 Jun 2026 16:58:46 +0000
Files and hashes: 1: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
2: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
3: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
4: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
5: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
6: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
7: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
8: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
9: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
10: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
11: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
12: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: t87TQ/948qTUfx1iS3XvS25igYfJgv1SDPoAhkVO1eQ=)
13: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
14: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
15: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
16: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
17: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
18: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
19: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
20: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
21: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
22: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
23: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
24: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 16:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4f:1a:67:df:68:52:9c:b3:ec:7d:6a:bc:51:72:dc:14:b7:55:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: Jun 11 13:02:46 2026 GMT
Not After : Jun 12 16:58:46 2026 GMT
Subject: CN=F31B5DC7F53AAB11D099DDAC35E62F53786434C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:1a:01:36:42:35:65:63:bb:1f:cb:55:c5:
6a:0f:36:aa:70:d1:32:aa:8c:d1:cd:35:da:c5:a5:
22:2b:a2:2d:a6:55:0b:bb:bb:c0:f9:f1:6c:61:e1:
72:d2:e3:ae:62:01:9b:69:19:af:45:53:53:e2:ea:
a6:39:a9:03:83:37:5d:ef:be:b8:a6:d3:41:6d:fa:
70:9d:e1:12:16:19:69:b4:b2:48:20:41:71:2a:8c:
b1:5f:35:8e:e5:eb:59:23:60:43:4e:b1:dc:a2:72:
c2:3a:c3:f4:f0:fa:bc:e7:d1:6e:bd:ec:57:9d:b4:
d5:05:ba:51:50:04:33:3b:b3:3c:8a:26:00:90:10:
dc:bc:ff:2a:d9:81:d3:7d:1a:eb:35:1e:73:b7:b7:
c5:d7:5c:12:6f:b7:5d:e8:d8:50:99:3e:87:9b:55:
33:33:9f:d2:2e:87:3c:61:3c:dc:d2:32:36:c6:ea:
ff:4b:85:e5:5b:9d:de:c8:bf:07:ca:7a:d0:dd:dd:
c3:06:6f:e7:f6:1b:91:fc:da:81:be:ad:1f:2b:10:
e7:75:31:75:aa:1d:5f:88:9a:59:33:e3:8f:af:1b:
18:f0:24:2b:05:28:0a:05:e9:0b:32:ac:be:ad:29:
dc:58:1b:89:8f:53:e0:2d:2a:81:f4:9b:48:2e:a3:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:5D:C7:F5:3A:AB:11:D0:99:DD:AC:35:E6:2F:53:78:64:34:C6
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:c5:a9:1e:7e:9d:d8:ef:b3:38:d1:7a:7d:ed:b1:48:41:
74:fd:f2:22:5a:89:fe:e4:0c:09:33:39:4c:79:fd:8b:ee:2c:
fd:7c:55:11:6e:43:e2:af:bc:58:cc:c2:38:6b:ac:2c:cc:2f:
d7:94:4c:7d:f5:74:a1:e0:43:71:25:e8:db:ba:95:7b:28:a0:
ce:3e:28:24:88:8d:c3:8a:23:4b:28:72:56:82:5f:89:c7:cd:
19:26:2e:fd:7c:49:5b:ae:fe:96:8a:38:66:fa:0e:b7:83:e3:
43:b5:bc:48:36:cf:a6:9e:e6:d0:1c:0d:24:04:a4:92:74:95:
b1:59:b7:32:7d:9d:c1:a9:b3:c8:f1:49:71:3c:fb:c9:9f:82:
f7:b8:d0:55:e4:57:bf:cf:4a:6c:99:6e:e5:c1:15:da:85:d6:
f4:c8:c5:95:68:b5:18:01:b5:94:aa:3d:16:57:a3:87:57:b2:
29:73:3e:19:5a:34:45:83:76:93:4e:01:a5:eb:a3:50:c6:94:
b1:fd:b7:c3:eb:d3:60:9d:c7:93:b7:f1:d0:0f:68:ce:ba:5f:
d6:ff:9f:84:06:91:90:a9:ed:d4:36:f3:f8:02:f9:e5:bb:ee:
da:87:7b:5a:6d:e6:a2:84:a4:f9:98:1b:97:0f:5f:44:95:d6:
f6:d6:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:03 2026 by rpki-client