
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json)
Hash identifier: 0ipgcvpzXJFjFgxDMeojz316yOZVp98TIfONRmSciMQ=
Subject key identifier: E7:E7:7C:98:C6:85:7C:E2:F1:EB:BC:13:35:27:EA:06:6F:61:D4:3A
Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23
Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23
Certificate serial: 30C40C5AAC7D1EBE373B381669BD8CF560E568B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
Manifest number: 60
Signing time: Sun 12 Jul 2026 20:54:58 +0000
Manifest this update: Sun 12 Jul 2026 20:49:58 +0000
Manifest next update: Mon 13 Jul 2026 23:35:58 +0000
Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=)
2: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: l9eEjC/7F1QDXMw/GfeUAgDFRRlk2SCJcRmCu5I9Lhk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl
rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 23:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c4:0c:5a:ac:7d:1e:be:37:3b:38:16:69:bd:8c:f5:60:e5:68:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23
Validity
Not Before: Jul 12 20:49:58 2026 GMT
Not After : Jul 13 23:35:58 2026 GMT
Subject: CN=E7E77C98C6857CE2F1EBBC133527EA066F61D43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:03:69:5f:94:ef:39:b5:58:62:1c:c4:87:
0e:22:7e:26:e2:60:1f:01:c3:a9:10:c2:60:23:20:
96:39:cd:53:53:51:af:fa:e3:ec:69:75:68:3b:3e:
3d:c0:f1:26:6f:9c:1f:23:02:f2:50:21:f8:1a:cc:
6a:3f:7e:32:70:2c:18:79:16:8c:38:d2:79:fc:77:
b4:4a:21:95:48:63:73:75:f3:80:b5:49:d7:26:e9:
f2:4c:e1:7a:9a:a7:ea:bd:89:2f:a2:b0:19:56:31:
2b:0c:62:e6:43:ff:95:22:bc:bc:88:88:dc:58:1d:
62:83:cf:12:7a:30:83:69:71:ab:f0:b8:81:c6:28:
de:cb:0d:81:f5:63:72:df:35:bb:7a:4c:16:9a:a2:
9a:5c:56:78:3a:6b:0e:63:71:08:ab:11:8d:67:6b:
9a:91:c7:ec:1d:43:a3:51:f9:83:c3:86:87:e8:ba:
e2:37:cf:6f:de:f8:94:69:3d:8a:89:65:1c:97:ff:
bf:62:73:4c:ac:72:98:f6:26:d0:8a:b5:df:96:10:
85:9b:4f:21:ec:19:71:c0:fa:a6:31:74:ff:8a:7b:
47:15:29:38:c7:77:4f:a2:48:34:92:c3:86:cc:18:
ff:ab:d0:56:27:d2:b7:32:7d:c3:6d:48:29:3e:de:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E7:7C:98:C6:85:7C:E2:F1:EB:BC:13:35:27:EA:06:6F:61:D4:3A
X509v3 Authority Key Identifier:
keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:b5:cf:22:02:b4:6c:4a:6f:1a:e3:aa:8b:04:d4:b4:28:
12:ed:73:fa:5a:4b:6e:11:8a:82:c6:2b:67:a9:a6:89:7d:6e:
8a:a1:e9:5f:34:7f:3d:e7:f3:57:62:be:1b:30:e2:a2:0f:6e:
eb:e4:f6:97:95:fd:ff:62:4e:15:fc:b9:37:2a:23:fa:0a:51:
dc:a5:4e:31:e5:49:41:ea:5e:e8:09:9a:19:d4:5b:c9:46:48:
7a:a7:fc:98:97:e9:2c:a1:2b:de:d4:77:d3:55:17:f0:6c:fa:
ce:b4:cf:1f:79:f2:cc:52:5e:d7:52:fa:13:56:c7:1a:20:a9:
30:e5:ba:f1:a5:7b:8a:46:13:de:90:ed:0c:30:bb:c9:f8:5a:
05:f7:67:6c:18:87:23:a1:66:65:86:96:65:13:c1:d1:88:f9:
13:3a:07:53:1b:91:55:f2:18:13:7c:a8:0b:c0:ad:5e:7a:c7:
c0:4e:c2:f8:b9:ac:cc:7e:47:f2:cb:dd:23:d7:73:63:e6:3c:
e8:75:24:fd:5a:ae:4e:e5:2b:13:51:5a:b3:be:cc:d2:57:95:
b9:f4:cf:0f:3b:c8:7f:be:0d:95:dd:1b:76:db:be:aa:9f:f3:
0c:67:8a:39:0c:95:d1:87:04:db:54:15:17:0b:89:d9:a0:a3:
a4:67:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:06 2026 by rpki-client