
$ rpki-client -vvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
File: 8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json)
Hash identifier: 3gBrglma1agQJRoxvg7YVna+ShwavNeHyHN2DBPU2GE=
Subject key identifier: 83:DC:70:5B:8A:F7:F5:CF:79:6B:70:61:1B:90:E1:75:F6:C7:EC:33
Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87
Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587
Certificate serial: 07BD794B83D31D0E971D73EF26EBF882BF6FB207
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 18:58:17 +0000
Manifest this update: Thu 23 Jul 2026 18:53:17 +0000
Manifest next update: Fri 24 Jul 2026 20:31:17 +0000
Files and hashes: 1: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: jqdioDtlgOqaZFANM+7N1TL66M/6cuhu6QMW59y/D8s=)
2: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=)
3: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl
rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:bd:79:4b:83:d3:1d:0e:97:1d:73:ef:26:eb:f8:82:bf:6f:b2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587
Validity
Not Before: Jul 23 18:53:17 2026 GMT
Not After : Jul 24 20:31:17 2026 GMT
Subject: CN=83DC705B8AF7F5CF796B70611B90E175F6C7EC33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:d9:6a:59:4c:93:e0:f9:c2:01:85:ed:26:
78:ff:e4:85:96:ed:06:0e:f9:26:d6:bd:e0:14:56:
51:5f:a3:8a:b4:f5:e9:b3:fc:77:d5:98:8f:e4:4d:
cc:08:8f:7b:f8:df:94:7f:65:45:c6:1e:38:c4:ff:
26:88:94:85:62:1d:d5:45:da:f2:4a:d1:ec:cc:e7:
02:94:f8:fa:71:4c:f9:cb:e4:ad:76:14:18:76:cd:
8c:0c:01:4c:0b:29:8f:fa:93:b9:31:91:d2:ec:5c:
c4:7b:3c:c2:de:51:8b:0d:79:43:a8:bc:bb:59:31:
b6:05:6e:86:b6:e0:2e:99:34:0d:0a:b8:62:c9:2f:
4e:cf:f5:51:e8:57:d5:c2:35:65:b7:d9:29:cc:73:
29:1d:83:c9:62:b6:81:01:43:0c:0b:3e:6f:81:d9:
05:dd:6a:1a:b5:86:d3:d3:53:d0:8d:c1:df:b4:8b:
75:48:60:b5:dc:e0:d7:f7:bc:5f:c2:f7:2b:99:98:
fb:8a:8b:39:a6:c3:73:1e:3c:b3:ac:a0:75:df:77:
75:97:47:39:c0:71:ec:5f:b5:32:1c:2f:48:12:a0:
b2:11:3b:3b:00:c5:a5:24:8e:39:5a:af:92:7a:4c:
95:4f:6e:e1:27:80:6e:97:7e:0f:8d:c1:8d:6f:7b:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:70:5B:8A:F7:F5:CF:79:6B:70:61:1B:90:E1:75:F6:C7:EC:33
X509v3 Authority Key Identifier:
keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:71:67:60:4e:64:8c:53:5c:a2:d0:d3:2f:78:06:1d:d9:
de:7e:f1:ad:bb:f6:e2:7c:6e:45:2c:cc:a2:2a:84:3c:ce:06:
8d:f8:52:35:4e:bd:4c:b2:56:28:b8:db:0c:aa:85:53:a0:c5:
e2:81:6e:92:d1:ea:c1:13:54:2d:4e:4d:22:ca:6b:f2:e2:62:
94:ba:96:6e:e6:64:16:73:51:49:44:ac:e6:c1:3a:84:55:c6:
4c:78:7c:c6:8e:db:0d:4e:5b:8d:74:12:77:76:47:59:36:b7:
2e:ee:29:5e:6e:67:2f:c7:71:d9:6f:24:e6:41:37:6e:3e:77:
b3:fd:a5:98:ff:5b:e6:24:15:f6:5f:ba:68:33:10:ac:6d:e8:
9e:c4:98:6f:4e:94:1f:5a:4c:f5:60:97:79:03:2b:60:19:b3:
61:a3:e4:45:fe:ce:6e:a4:b1:a0:f0:44:a6:54:af:f6:d7:2b:
83:6a:62:74:40:75:da:18:ac:f3:d1:66:9f:5b:3a:b2:15:f2:
e5:f5:3d:9c:c6:02:75:6d:84:1e:46:5a:4b:35:14:2c:63:95:
67:69:46:f4:30:40:59:eb:41:97:f7:1d:de:91:e0:ef:04:2e:
30:92:5f:02:dd:fa:fb:c2:b3:26:07:fc:48:bd:14:6b:57:f2:
8e:9b:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:50 2026 by rpki-client