
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json)
Hash identifier: jL9uvOnsVz1J1Pmlic+SGZBeiEVd5uZP3yrkClil3n0=
Subject key identifier: FE:B9:D9:65:6F:21:CB:83:34:83:AD:6B:DA:B8:11:24:06:85:5F:BF
Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92
Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92
Certificate serial: 66109B58A1254BBFCA80B607326C4B2E38BB795E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
Manifest number: D6
Signing time: Sat 10 Oct 2026 00:28:01 +0000
Manifest this update: Sat 10 Oct 2026 00:23:01 +0000
Manifest next update: Sun 11 Oct 2026 02:18:01 +0000
Files and hashes: 1: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: pr2pzFZixl1MqDeHV8E3/Rus9VoG5CFJQ58Z6l76vD4=)
2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl
rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 02:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:10:9b:58:a1:25:4b:bf:ca:80:b6:07:32:6c:4b:2e:38:bb:79:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92
Validity
Not Before: Oct 10 00:23:01 2026 GMT
Not After : Oct 11 02:18:01 2026 GMT
Subject: CN=FEB9D9656F21CB833483AD6BDAB8112406855FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:91:10:ce:ba:0e:f6:62:34:05:a8:8b:2d:
c1:dc:c5:fa:c8:7e:60:12:6e:78:a4:a7:f8:63:96:
bd:d9:a1:06:a0:15:50:39:ca:bf:64:c9:01:57:b3:
1f:44:58:a4:0b:9d:20:7b:f6:a8:4b:7f:7c:ac:d3:
6b:cd:eb:16:04:a2:cb:a8:6a:53:96:3c:0b:b9:d9:
ae:7d:28:b9:dd:28:56:0e:15:43:f4:2f:bb:f4:31:
a5:dd:22:93:b2:e8:5f:ed:8e:5d:bf:05:1c:44:e2:
a2:eb:db:e4:23:05:6e:d8:8e:fd:e5:89:4a:81:8d:
ae:71:9b:b5:8b:50:11:48:eb:5a:8c:35:d9:58:5c:
38:16:d4:e0:5d:c6:7e:67:59:86:7c:11:2f:b5:0b:
11:79:8c:3a:32:99:5e:4e:e1:7f:71:63:de:0c:95:
a5:1c:4b:3d:06:8b:73:c7:91:af:0e:e4:42:a0:6a:
e2:48:b5:00:6a:d5:7a:2d:ed:3f:2d:eb:22:f1:88:
8d:9a:e5:2d:f6:34:89:4b:d3:88:63:a2:e6:35:5b:
7c:78:90:5a:ff:85:0b:47:60:c1:e4:b5:03:f6:39:
05:1c:05:2e:e1:65:fb:8f:48:a5:e3:35:8b:8f:6a:
0a:89:38:d6:21:f5:94:0e:20:d0:8e:12:1a:7d:71:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:D9:65:6F:21:CB:83:34:83:AD:6B:DA:B8:11:24:06:85:5F:BF
X509v3 Authority Key Identifier:
keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b3:49:87:f2:61:3b:e2:bd:29:a6:eb:42:cf:f7:11:03:c3:
5f:7c:2f:2e:f3:6d:1e:26:0f:b0:f7:53:cd:35:9b:fd:c0:20:
d9:17:96:ca:fc:07:23:19:ff:93:8b:eb:92:c6:59:3c:13:bf:
19:89:39:0f:e9:b7:a6:92:05:10:4b:1f:f8:4b:9a:32:57:7d:
e0:26:e7:76:0f:57:c9:ba:39:a7:fe:ec:85:af:fb:c0:c9:83:
b4:f8:99:d2:de:06:c4:4e:a1:62:7d:ec:0d:96:5f:13:09:46:
a6:6f:e9:e0:d9:c4:64:87:5b:2b:6a:53:45:50:22:29:1b:f0:
71:71:0b:c0:df:50:1f:ff:3b:eb:5a:9b:7f:eb:50:1c:0d:00:
4f:19:e9:98:4c:0e:f7:89:b4:1d:36:63:9b:fc:c2:fd:bc:49:
ea:ee:57:23:62:55:fd:5c:6b:02:c4:f0:fc:5a:de:08:f2:dd:
f5:42:2d:22:65:c2:63:c4:33:51:65:db:9f:44:25:b1:2b:4b:
db:2c:34:db:11:eb:16:c6:9d:f4:b8:dd:03:fe:82:d0:6a:bc:
d3:1c:18:e0:89:ab:c3:71:73:12:6f:96:1e:f8:b2:a2:c5:ab:
4b:ec:ed:13:45:05:28:82:b6:5d:47:57:e1:36:6b:41:55:96:
88:ef:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:28 2026 by rpki-client