
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json)
Hash identifier: IPf2Weh5vCiuMNHFiIw6eI2OkwPyrBCQs6AjdmcQI1k=
Subject key identifier: B2:95:43:63:96:A8:5C:10:74:9A:F1:12:8C:03:7E:41:ED:59:FA:15
Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28
Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28
Certificate serial: 3D16CFFC98B0734B4D0BB314DC1C5FCFC4B50AD5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 13:57:03 +0000
Manifest this update: Thu 23 Jul 2026 13:52:03 +0000
Manifest next update: Fri 24 Jul 2026 17:01:03 +0000
Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=)
2: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: BJ/FOSe52lI9UjWfp9roty9zf/ymovwKnVLzcSM+P8s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl
rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:16:cf:fc:98:b0:73:4b:4d:0b:b3:14:dc:1c:5f:cf:c4:b5:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28
Validity
Not Before: Jul 23 13:52:03 2026 GMT
Not After : Jul 24 17:01:03 2026 GMT
Subject: CN=B295436396A85C10749AF1128C037E41ED59FA15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:c8:23:1c:ce:be:d4:19:6a:6d:5c:da:3d:
4d:0d:64:86:b6:f0:89:8e:9b:d9:f3:e6:3e:1e:e9:
72:de:a1:1c:cb:53:fd:a0:7e:d1:9b:ea:21:d2:b0:
35:5f:dc:42:da:6d:8d:09:17:cf:ae:5f:68:38:a4:
90:21:8a:e0:8c:ab:64:93:a7:c4:b2:3d:72:ab:5b:
ad:28:e3:41:92:f9:5b:11:e5:32:16:b9:ad:02:95:
a2:bd:9a:66:df:dd:d6:13:37:35:2b:6a:fc:19:98:
51:61:5f:51:c2:c4:e6:3b:3f:04:8c:c0:c9:4a:a4:
0d:ff:fc:33:0a:1c:75:53:62:48:c4:6a:fc:48:2e:
68:e1:b8:12:3f:2c:fe:90:8d:af:4c:e0:86:a0:a1:
55:74:15:f5:4d:a3:da:b3:f4:14:c0:ae:be:6c:c6:
95:30:b7:57:8c:79:a5:2b:f1:e4:8b:6b:17:6e:57:
e6:92:bc:29:3f:9a:98:68:4b:89:9e:b2:bf:97:43:
23:dc:7d:40:02:d3:e6:c3:bc:07:49:37:17:78:d3:
89:b1:f9:fa:68:e8:e2:aa:38:8c:e8:ca:f8:45:1b:
4d:dc:e3:80:db:36:fa:f7:1c:15:bf:f0:d0:d3:b9:
e4:8e:44:27:84:07:87:40:a6:0e:2d:49:58:2c:95:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:43:63:96:A8:5C:10:74:9A:F1:12:8C:03:7E:41:ED:59:FA:15
X509v3 Authority Key Identifier:
keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6f:eb:63:8e:f5:bc:8a:b6:3b:12:2e:3b:b3:8b:5c:8e:59:
7c:4a:6f:4b:e7:5f:1f:66:6a:16:58:ff:3d:e3:00:db:80:e9:
84:82:56:8a:7f:db:dd:57:c7:e6:06:1b:67:31:b8:2f:a1:ef:
b1:76:f4:14:08:a4:5b:5a:5c:d5:78:8a:e4:ee:56:fe:77:9a:
8b:aa:f7:6a:70:0e:ec:6d:12:0e:d3:55:29:7b:10:83:88:eb:
63:9b:68:f7:5e:46:43:ef:87:b6:1c:b0:5c:c1:ac:d8:dc:ba:
5d:a7:18:48:f7:8c:10:56:40:e0:7c:4c:3e:50:63:ed:d3:ed:
36:b2:dc:9e:2e:59:61:81:94:b5:dd:86:06:e1:43:83:26:2f:
1a:d8:fa:1c:8c:86:25:c6:35:87:ff:4e:73:e9:95:9d:cb:5d:
bf:ff:cc:a9:2d:e3:d9:87:30:2d:1b:12:0e:a5:bf:86:da:c9:
f1:5f:36:f3:74:36:1a:79:05:22:4d:ba:5e:52:7d:a9:8d:47:
d9:7d:50:b6:c8:bf:2c:f7:e4:fb:ab:27:01:58:4f:e8:a3:53:
cd:dd:12:1b:0d:61:fc:5f:81:94:26:ab:6e:9d:27:50:ca:96:
a0:94:c4:d6:15:f6:06:bb:ad:10:01:43:b2:67:1e:8b:eb:26:
6f:ef:d0:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPRbP/Jiwc0tNC7MU3Bxfz8S1CtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4
QjQzNUIyODAeFw0yNjA3MjMxMzUyMDNaFw0yNjA3MjQxNzAxMDNaMDMxMTAvBgNV
BAMTKEIyOTU0MzYzOTZBODVDMTA3NDlBRjExMjhDMDM3RTQxRUQ1OUZBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChS8gjHM6+1BlqbVzaPU0NZIa2
8ImOm9nz5j4e6XLeoRzLU/2gftGb6iHSsDVf3ELabY0JF8+uX2g4pJAhiuCMq2ST
p8SyPXKrW60o40GS+VsR5TIWua0ClaK9mmbf3dYTNzUravwZmFFhX1HCxOY7PwSM
wMlKpA3//DMKHHVTYkjEavxILmjhuBI/LP6Qja9M4IagoVV0FfVNo9qz9BTArr5s
xpUwt1eMeaUr8eSLaxduV+aSvCk/mphoS4mesr+XQyPcfUAC0+bDvAdJNxd404mx
+fpo6OKqOIzoyvhFG03c44DbNvr3HBW/8NDTueSORCeEB4dApg4tSVgslZ0JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUspVDY5aoXBB0mvESjAN+Qe1Z+hUwHwYDVR0j
BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD
MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1
QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm
NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx
REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEdv62OO9byKtjsSLjuzi1yOWXxKb0vnXx9m
ahZY/z3jANuA6YSCVop/291Xx+YGG2cxuC+h77F29BQIpFtaXNV4iuTuVv53mouq
92pwDuxtEg7TVSl7EIOI62ObaPdeRkPvh7YcsFzBrNjcul2nGEj3jBBWQOB8TD5Q
Y+3T7Tay3J4uWWGBlLXdhgbhQ4MmLxrY+hyMhiXGNYf/TnPplZ3LXb//zKkt49mH
MC0bEg6lv4bayfFfNvN0Nhp5BSJNul5SfamNR9l9ULbIvyz35PurJwFYT+ijU83d
EhsNYfxfgZQmq26dJ1DKlqCUxNYV9ga7rRABQ7JnHovrJm/v0Ls=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:50 2026 by rpki-client