
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json)
Hash identifier: zz4K7Y/9Dw4E553kF0+P0WeOMJzloL+EWHfigyevapM=
Subject key identifier: C2:7C:51:B2:8B:E8:75:1F:72:22:70:8F:00:4E:F8:02:3A:AF:3A:80
Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Certificate serial: 60F6BE6115A2514C8E0A33A17397E749A532A7D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
Manifest number: D6
Signing time: Tue 24 Mar 2026 14:21:09 +0000
Manifest this update: Tue 24 Mar 2026 14:16:09 +0000
Manifest next update: Fri 27 Mar 2026 20:46:09 +0000
Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=)
2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=)
3: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: n9rjnhXeBXXFSMeC7q/MEUDl2HhCpxU5vnKy3D8erbo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f6:be:61:15:a2:51:4c:8e:0a:33:a1:73:97:e7:49:a5:32:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Validity
Not Before: Mar 24 14:16:09 2026 GMT
Not After : Mar 27 20:46:09 2026 GMT
Subject: CN=C27C51B28BE8751F7222708F004EF8023AAF3A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:bf:ca:b3:9d:29:fa:39:3a:d0:8c:31:8c:
50:6d:d5:e9:dd:8b:a6:56:99:19:e3:7b:b1:08:c7:
2b:19:02:99:33:73:24:1a:1a:08:66:9a:a4:6a:d4:
9d:c1:46:e9:70:10:76:db:2f:22:a4:5a:50:03:f3:
24:19:c0:ed:f0:7d:38:0a:d8:24:a9:6b:c3:c5:a5:
93:b6:63:5c:ae:49:28:52:d1:15:cc:e8:a3:01:db:
ed:a3:1b:47:2b:85:e2:26:bb:a5:ca:10:8d:26:34:
eb:6a:0f:1c:2a:0b:99:36:c9:48:86:8e:7c:de:51:
69:f8:28:dd:43:8a:ce:6a:5a:de:82:9a:97:c4:2a:
63:7f:ef:da:b9:52:ce:f7:ff:aa:41:2d:0d:18:e1:
37:c7:67:c0:0c:69:59:5a:74:de:24:d0:e3:2b:53:
be:a2:13:8c:a3:89:ad:06:4e:de:95:11:65:28:09:
33:34:76:0e:f1:c9:be:38:41:fe:b8:f3:5e:17:58:
59:a2:7d:08:93:23:1b:c8:99:81:8d:38:de:cc:91:
84:ca:70:2b:4b:4a:13:c9:07:4c:9e:88:ff:1f:6f:
0b:2d:f4:34:cc:1a:d4:66:3b:68:58:69:51:31:7a:
18:5a:be:cb:c8:14:70:0a:52:10:7d:ed:e7:f3:b8:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:51:B2:8B:E8:75:1F:72:22:70:8F:00:4E:F8:02:3A:AF:3A:80
X509v3 Authority Key Identifier:
keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:53:51:5f:a8:f5:c8:2b:31:0c:af:85:81:15:0c:d0:51:e4:
e3:fe:ce:96:e0:77:40:57:21:53:a6:ec:ee:fa:1d:31:cb:39:
c0:87:6c:e2:72:f5:e4:0d:81:fd:97:2c:87:ac:32:f4:45:f0:
22:d4:b5:8c:b9:bd:8a:9c:88:a0:30:81:07:88:2b:ac:ba:b1:
0a:ab:a1:ac:e4:91:2e:c5:6b:da:df:76:f1:e2:df:1b:22:5e:
d8:88:55:c5:17:ed:f4:2a:45:0b:a3:10:f3:4d:b8:eb:d9:ef:
80:52:97:42:cc:fb:50:5c:51:05:30:e2:c2:a5:e5:a2:64:b0:
91:9d:55:58:38:40:64:76:3f:9a:21:fa:65:3b:3e:a1:24:b8:
0b:58:26:17:46:5f:e7:a7:34:08:7a:f3:99:89:92:51:30:93:
d6:0e:d6:0d:58:38:e5:d2:0c:a4:2e:e7:23:26:af:8e:28:9e:
90:23:58:9d:45:8b:6f:56:a4:18:fb:a0:75:49:c2:49:9e:6b:
03:e2:04:dc:0c:ad:1a:b7:e8:e3:5c:4d:97:17:cc:a5:93:21:
14:a2:2b:b6:6e:db:b3:3c:31:ec:ce:a0:f0:ac:89:ff:95:ef:
a8:00:55:00:3e:2c:ba:1a:db:08:33:5c:e0:40:6f:fc:cc:fc:
78:fa:da:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYPa+YRWiUUyOCjOhc5fnSaUyp9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy
N0U0MzBDODAeFw0yNjAzMjQxNDE2MDlaFw0yNjAzMjcyMDQ2MDlaMDMxMTAvBgNV
BAMTKEMyN0M1MUIyOEJFODc1MUY3MjIyNzA4RjAwNEVGODAyM0FBRjNBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVb/Ks50p+jk60IwxjFBt1end
i6ZWmRnje7EIxysZApkzcyQaGghmmqRq1J3BRulwEHbbLyKkWlAD8yQZwO3wfTgK
2CSpa8PFpZO2Y1yuSShS0RXM6KMB2+2jG0crheImu6XKEI0mNOtqDxwqC5k2yUiG
jnzeUWn4KN1Dis5qWt6CmpfEKmN/79q5Us73/6pBLQ0Y4TfHZ8AMaVladN4k0OMr
U76iE4yjia0GTt6VEWUoCTM0dg7xyb44Qf64814XWFmifQiTIxvImYGNON7MkYTK
cCtLShPJB0yeiP8fbwst9DTMGtRmO2hYaVExehhavsvIFHAKUhB97efzuOszAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwnxRsovodR9yInCPAE74AjqvOoAwHwYDVR0j
BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB
MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0
MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1
M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0
QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMVTUV+o9cgrMQyvhYEVDNBR5OP+zpbgd0BX
IVOm7O76HTHLOcCHbOJy9eQNgf2XLIesMvRF8CLUtYy5vYqciKAwgQeIK6y6sQqr
oazkkS7Fa9rfdvHi3xsiXtiIVcUX7fQqRQujEPNNuOvZ74BSl0LM+1BcUQUw4sKl
5aJksJGdVVg4QGR2P5oh+mU7PqEkuAtYJhdGX+enNAh685mJklEwk9YO1g1YOOXS
DKQu5yMmr44onpAjWJ1Fi29WpBj7oHVJwkmeawPiBNwMrRq36ONcTZcXzKWTIRSi
K7Zu27M8MezOoPCsif+V76gAVQA+LLoa2wgzXOBAb/zM/Hj62vE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:20 2026 by rpki-client