
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft
File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json)
Hash identifier: 5A0N5zUInoXPWI6Epgg096J07A4LjsUsMfNBNkGuaXA=
Subject key identifier: EF:F5:AE:7F:CF:73:DA:0D:01:7B:AD:E4:C1:DD:DB:D1:A0:F6:1C:C9
Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8
Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8
Certificate serial: 22493C1243591543C081D27F19927AAD09F3467A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 16:30:45 +0000
Manifest this update: Fri 25 Sep 2026 16:25:45 +0000
Manifest next update: Sat 26 Sep 2026 17:54:45 +0000
Files and hashes: 1: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: VuEC0yORmdEEeKJstvkpaVyZNdtfKVeaClcpD+t9M9s=)
2: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=)
3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=)
4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl
rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:49:3c:12:43:59:15:43:c0:81:d2:7f:19:92:7a:ad:09:f3:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8
Validity
Not Before: Sep 25 16:25:45 2026 GMT
Not After : Sep 26 17:54:45 2026 GMT
Subject: CN=EFF5AE7FCF73DA0D017BADE4C1DDDBD1A0F61CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:bf:90:7b:80:e5:8c:8d:ef:f7:66:1b:85:
1b:5a:07:9a:bf:51:1f:a7:7f:ca:c1:91:cd:e6:d7:
53:d7:d1:0a:30:b5:7f:7b:5a:e0:70:93:25:d2:a8:
53:51:56:fb:c4:da:de:ba:e8:81:6f:a1:68:b8:5c:
79:7d:35:bd:e5:85:3e:0f:66:6b:ad:07:81:21:cd:
f0:7a:c7:4c:82:23:16:ff:83:2e:9a:1f:b0:48:41:
ea:c0:90:8b:b4:48:ba:93:78:28:52:6d:21:2c:43:
a3:0a:bc:87:2a:5d:49:76:2c:c5:3a:1e:51:39:5c:
fe:a8:a7:99:a8:45:35:76:fa:96:31:52:ee:bf:31:
65:5d:16:fa:83:f2:be:fc:9e:7d:5f:a9:09:b6:6a:
6e:14:66:1f:07:c8:0e:ce:5f:20:c8:ad:bc:3d:6a:
31:15:51:f7:d7:76:22:3a:85:e4:9d:93:c8:ba:7f:
ef:a8:9b:59:b9:72:fc:5a:ea:9d:4e:9b:a6:48:92:
2e:89:b8:3b:1f:8a:4a:77:f9:de:57:14:a8:eb:f2:
11:12:94:a6:eb:4b:f7:37:63:33:54:44:7d:7d:54:
a7:1f:74:16:b7:b1:e0:3d:f2:f3:87:bd:f7:f9:60:
0e:a7:70:19:48:11:d4:6d:f3:35:c0:15:c5:1e:f7:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:AE:7F:CF:73:DA:0D:01:7B:AD:E4:C1:DD:DB:D1:A0:F6:1C:C9
X509v3 Authority Key Identifier:
keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:94:fb:96:5f:28:a7:7a:0d:59:41:cc:be:db:04:9c:67:
b9:1f:6b:5e:fe:57:50:7a:cb:7d:3a:6d:70:13:71:b4:73:4f:
98:14:87:8d:dc:39:26:bf:6e:8b:b6:48:a4:13:3d:70:0f:0e:
cf:56:ca:77:b0:9d:1e:9c:79:d8:43:1b:89:0d:d9:09:82:a6:
73:28:1e:cb:88:00:76:44:ca:4f:e1:f8:c1:f3:ec:34:9c:5a:
13:dc:16:c4:3b:e6:b1:d4:be:ea:2c:02:30:85:77:e3:84:51:
21:e3:cf:b9:52:89:a3:b2:9c:7f:b2:19:b0:8d:a5:77:94:67:
36:97:a9:98:77:98:f1:1e:03:ba:f4:aa:a6:c6:b3:45:0c:40:
d6:fa:5d:b6:db:e9:42:4b:5d:fb:76:ac:25:70:9a:d5:6c:32:
2c:b9:e6:5d:68:e9:21:5f:64:81:4a:2f:74:97:cc:d5:a1:f7:
36:a3:6a:25:e7:19:eb:b9:e4:ce:eb:74:60:91:0f:4e:c0:60:
14:17:83:9d:32:d9:e1:08:bf:a3:4e:0c:b9:b6:d1:9b:0b:89:
e1:b6:d5:e1:83:5c:30:03:37:93:55:30:f7:6f:30:07:77:80:
6f:97:95:c2:d0:34:0e:de:7b:36:0d:e7:eb:1e:db:f4:b5:57:
eb:ad:eb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:16:13 2026 by rpki-client