
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json)
Hash identifier: MR3R++u6NXRV78QI3yKDK2QndiRBgTttH9qJhRnbHVw=
Subject key identifier: 92:C8:28:29:01:97:DF:C9:1F:C6:4D:FE:84:69:15:85:F1:DC:1C:6D
Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06
Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406
Certificate serial: 73EDE3270808C14742E6184F624357AB885E06C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
Manifest number: 94
Signing time: Thu 20 Aug 2026 06:51:07 +0000
Manifest this update: Thu 20 Aug 2026 06:46:07 +0000
Manifest next update: Fri 21 Aug 2026 07:17:07 +0000
Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=)
2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=)
3: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: Ns/M+mz2iGofUhxCIwEz1AtCVym54zlKZMnxL+vITOs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl
rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 06:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ed:e3:27:08:08:c1:47:42:e6:18:4f:62:43:57:ab:88:5e:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406
Validity
Not Before: Aug 20 06:46:07 2026 GMT
Not After : Aug 21 07:17:07 2026 GMT
Subject: CN=92C828290197DFC91FC64DFE84691585F1DC1C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:27:65:82:93:ce:60:5c:5a:78:10:63:34:
c9:5c:bd:ac:46:f9:74:1a:6a:69:1f:a9:d0:64:40:
41:be:a1:aa:2b:11:57:21:3c:2b:a7:0c:28:d0:c3:
60:c1:4b:ef:21:0c:2c:24:aa:a7:cf:0c:77:a6:4c:
3d:f3:eb:2c:78:37:d1:32:c6:53:9f:5a:32:4b:78:
1b:af:8d:25:04:4f:08:20:6d:c0:55:e5:8e:09:7c:
8e:1e:76:3b:22:21:ff:bc:0c:33:04:78:02:fd:b7:
7f:6f:e8:be:7f:93:98:c3:5f:3e:01:76:73:e0:1d:
5a:d8:bf:8b:ea:64:f9:36:c3:37:29:76:7d:5b:97:
6f:54:f3:dc:dc:38:6e:50:22:42:ca:1f:6f:9c:d9:
92:e2:ea:6b:41:66:99:d7:71:4d:d2:c7:b8:dd:f7:
f5:50:1a:81:ae:24:4e:aa:d4:db:9b:4f:a9:08:b7:
28:40:f0:1f:e7:85:34:59:d7:46:60:76:88:f5:05:
d6:0b:8f:a3:91:49:50:73:ed:7d:75:95:a3:99:f6:
14:2f:e4:07:2c:3a:39:73:81:71:ff:2d:14:23:5f:
e1:2e:f2:e5:77:1f:15:b1:25:08:2e:cf:9a:40:bc:
31:df:cc:b5:57:03:e5:c3:34:79:f2:4b:8f:0e:99:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:28:29:01:97:DF:C9:1F:C6:4D:FE:84:69:15:85:F1:DC:1C:6D
X509v3 Authority Key Identifier:
keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:06:c4:1d:d0:6d:8d:63:5d:b7:44:47:f1:ca:ad:a7:79:
c5:5d:65:9e:28:dc:b9:6f:25:aa:77:81:05:59:ba:7e:c6:5f:
8c:e0:52:2b:5e:82:21:2b:72:d4:09:e4:92:e6:f9:36:fd:0d:
4c:2b:8b:b3:ff:88:ff:06:d1:6d:92:7e:0a:c7:35:b7:69:23:
8e:95:0d:a8:f0:b9:d0:0b:be:b4:92:ed:bd:f1:56:9e:80:4b:
73:ec:70:cc:e3:b7:f1:3b:a7:5c:17:41:be:f2:a4:aa:8d:59:
e7:e9:7a:9d:ce:6a:fd:85:a2:2c:85:4b:79:57:ec:bd:fb:55:
cf:ef:41:d5:55:ad:d0:7e:90:01:59:32:7e:5e:bd:5e:3f:2a:
c4:a9:3c:a6:e8:b0:64:d0:13:b2:67:ff:50:c0:79:f1:9e:be:
6a:47:59:34:38:8b:44:68:72:32:c4:90:45:d9:fb:ff:09:15:
5f:19:ad:f0:b5:89:97:2d:c7:94:27:1f:fc:d7:47:f1:28:87:
c6:d6:0e:d9:f8:38:9b:4e:6e:aa:94:5d:0a:fb:a6:d0:70:9c:
51:2c:2f:40:cc:4a:74:3f:9c:2e:a1:a6:a7:df:f6:19:9a:ce:
a6:5c:30:d1:e9:5d:96:18:93:02:c2:e2:bf:6b:87:f1:cf:d5:
31:f2:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 10:23:37 2026 by rpki-client