
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File: B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier: 0nE72hCYj1G+4LI1in5mBkBT4FGrnCJmhQ5gW2/USY0=
Subject key identifier: 36:F1:BC:1D:F4:2A:1D:4F:7E:43:5B:B6:33:28:DD:11:8D:5B:37:03
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer: /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial: 1EAD629F75EAD82CCD847712E776A4F08D938085
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 16:19:56 +0000
Manifest this update: Thu 23 Jul 2026 16:14:56 +0000
Manifest next update: Fri 24 Jul 2026 17:08:56 +0000
Files and hashes: 1: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
2: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
3: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
4: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
5: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
6: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
7: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
8: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
9: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: GT0dX564A0eVjuDZ52KfvagiZbTpGVR+Efb9wkI6m60=)
10: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
11: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
12: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
13: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ad:62:9f:75:ea:d8:2c:cd:84:77:12:e7:76:a4:f0:8d:93:80:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Validity
Not Before: Jul 23 16:14:56 2026 GMT
Not After : Jul 24 17:08:56 2026 GMT
Subject: CN=36F1BC1DF42A1D4F7E435BB63328DD118D5B3703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:95:11:67:ef:74:3d:07:0e:a5:f9:f8:9d:
4f:a6:8f:03:c0:bb:4d:d5:47:0b:44:ef:34:5a:4c:
fd:fb:8e:86:34:a5:77:4f:4a:a5:07:45:4d:ec:e0:
9c:23:36:93:9e:62:f6:be:08:5f:8b:53:ff:fc:16:
ca:8e:b5:33:3a:29:2e:c2:23:8b:f4:36:75:07:1d:
08:f2:ed:82:86:f1:6e:03:97:c0:ec:03:38:e9:d9:
c2:29:c2:f8:b5:ae:bb:cd:50:cb:b7:a9:79:e9:9c:
82:27:b0:c6:7d:8d:46:b1:2f:8c:73:4d:cc:4c:40:
53:d3:3c:80:77:e2:3a:8f:5d:08:9c:f2:8f:da:64:
d8:a6:1b:74:ac:d6:bb:40:b6:a3:cf:d3:42:d3:78:
6e:db:8a:f0:ab:4e:39:0d:b2:48:64:c8:9f:66:43:
a0:6d:90:37:90:79:9b:ad:0c:62:e6:fd:c2:7f:c0:
52:05:68:23:e2:70:9b:2f:a7:71:7e:9a:97:6f:92:
77:e9:f6:03:c3:b6:6b:e6:e6:6b:5e:fa:f5:b1:f4:
9d:21:54:99:79:a8:1f:8e:0e:a0:77:c9:98:de:1a:
ee:cf:46:5a:49:e0:46:bd:3f:82:bc:53:28:c5:54:
28:e1:d8:bf:d0:1f:1d:4e:40:2e:55:19:83:f5:87:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:BC:1D:F4:2A:1D:4F:7E:43:5B:B6:33:28:DD:11:8D:5B:37:03
X509v3 Authority Key Identifier:
keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:0c:60:d5:ed:c0:ae:d0:20:4c:37:45:7a:9d:75:04:56:
b8:72:00:48:02:49:34:ac:ca:47:cb:79:a3:8c:2a:71:ff:2c:
58:48:e7:34:06:28:42:23:1e:eb:3c:4c:cf:e2:af:56:65:72:
d1:75:e7:61:3c:27:38:e8:72:27:ab:71:bb:66:3c:ed:09:0f:
fe:e0:54:25:a7:e7:c2:8f:3f:db:a4:03:f0:db:71:0a:48:29:
cd:4c:ce:d6:72:1e:99:68:6a:a3:c8:45:2a:7e:db:e1:32:fe:
55:71:28:9a:16:ee:13:f6:a5:a4:39:5d:fb:bb:1f:a0:da:fb:
fb:37:74:1f:08:89:f4:c2:a9:eb:e7:e4:ab:49:5b:82:2c:29:
da:ee:4c:d2:00:df:ca:71:42:fa:06:39:cf:4f:d2:42:56:19:
54:44:c4:c7:9e:fd:94:07:8d:c5:0b:0d:70:7e:e5:8b:82:07:
14:a0:53:5d:a2:bf:7c:c6:e3:5f:fb:c7:29:4d:87:39:b8:35:
82:d5:24:e7:57:e4:ad:e6:97:bd:85:5a:4e:48:92:b6:ed:07:
82:04:04:e3:70:36:64:df:6a:69:eb:e2:ae:2c:43:f9:43:f9:
d4:20:04:4d:ad:48:91:a3:5f:86:09:88:cc:a9:06:8e:e9:82:
23:fc:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:59 2026 by rpki-client