
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
File: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json)
Hash identifier: YHaZvhzGVPdnV6MTMJgVxNVDP9DARxAr+n7IyV2gCrs=
Subject key identifier: BD:FC:44:18:5C:45:87:27:32:93:1E:3A:23:C0:41:65:34:5B:B5:59
Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC
Certificate issuer: /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
Certificate serial: 783D29358EBD0A8329F87E6BFB30CC3AE15B549A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 08:15:50 +0000
Manifest this update: Thu 24 Sep 2026 08:10:50 +0000
Manifest next update: Fri 25 Sep 2026 11:54:50 +0000
Files and hashes: 1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=)
2: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: wMvQqn0yoDhZG83Aq8+eMxYzJ49P3JWNvMK6awCqBHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl
rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 11:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3d:29:35:8e:bd:0a:83:29:f8:7e:6b:fb:30:cc:3a:e1:5b:54:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
Validity
Not Before: Sep 24 08:10:50 2026 GMT
Not After : Sep 25 11:54:50 2026 GMT
Subject: CN=BDFC44185C45872732931E3A23C04165345BB559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:66:bb:f9:a9:08:17:71:6d:67:7f:f5:b3:
61:c2:19:3c:56:27:34:a3:71:22:78:4e:2e:37:78:
b4:2a:93:46:e4:ab:28:00:c4:e4:4f:7f:c2:87:3f:
13:c8:17:b6:0d:54:23:51:b4:90:f9:03:64:d2:8a:
b9:39:dc:e1:83:01:5d:7b:08:56:9d:ba:f6:c2:27:
4a:c3:fd:85:19:19:fe:52:15:64:7f:c3:ff:89:0e:
ac:87:34:da:a9:ff:69:b8:cf:24:82:8c:e6:bf:b0:
26:6f:eb:5c:95:cc:35:a5:98:23:cd:f7:d1:53:ad:
b4:dc:ba:6f:50:0c:c2:94:d5:51:5a:e4:b2:a0:d2:
fb:1e:e8:c0:07:ce:68:6d:5d:81:c6:88:50:d9:d2:
68:b8:50:85:9c:34:80:5a:43:e2:85:c8:ca:c7:1d:
92:55:bf:48:23:27:ac:80:44:d8:42:33:d0:fa:49:
2f:f5:a9:dd:81:7f:4c:13:28:97:3b:d5:6b:9c:60:
5e:16:82:7f:9c:8f:cb:08:43:5f:b1:8f:20:6e:1f:
f2:79:2d:31:3a:94:1f:87:ee:69:29:a7:b1:ec:15:
ee:49:4b:c2:fe:2e:60:71:9b:01:7e:31:88:38:c4:
ac:3b:16:fa:f5:1a:6d:d7:4e:33:ea:1d:72:ca:99:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FC:44:18:5C:45:87:27:32:93:1E:3A:23:C0:41:65:34:5B:B5:59
X509v3 Authority Key Identifier:
keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:5d:52:e4:3d:c5:da:ff:18:0d:05:9f:80:34:46:f2:4e:
90:d6:58:38:af:9a:c1:92:c7:b5:c8:39:c2:a5:42:19:76:33:
e0:23:ed:ce:94:9a:0b:56:bf:f1:e7:a7:75:20:a4:bf:3f:bb:
ec:1b:47:c5:a7:b2:0f:96:cc:68:82:02:19:96:70:af:8c:1b:
4d:38:d8:8d:e8:f6:b2:61:97:ad:91:4c:e0:5a:c3:39:e3:f0:
7e:31:52:57:c2:ac:51:13:86:07:b1:e7:bc:fe:f7:8b:3c:26:
b6:c3:b4:fa:df:94:37:d5:12:98:f4:6c:e0:e8:97:a3:0b:11:
ee:ea:25:87:ab:e3:74:12:6a:80:3e:18:bd:22:5c:c9:a3:19:
b8:b1:8d:0c:81:cf:d7:eb:e8:78:c8:ad:2f:ef:0f:b1:f3:db:
b2:2d:dc:cc:3b:de:87:b9:75:7c:a4:1c:8f:cd:d7:d4:3d:38:
b3:8f:93:bb:ca:65:8f:0f:90:e7:62:60:e8:6e:82:5c:a3:55:
6a:05:07:1c:57:b4:b4:5b:cb:48:68:f9:93:89:ab:04:56:4c:
e2:6e:ef:f4:55:c5:12:28:22:ac:b1:52:b0:77:a2:3a:59:29:
2a:dc:6b:2a:fb:cd:1f:32:e3:37:ce:2f:9f:40:4f:a2:57:ae:
67:7a:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:13 2026 by rpki-client