
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json)
Hash identifier: UFrn3HQz7SI7m91U8cLYLw/YL0GCBEOeSKaWE8zskP0=
Subject key identifier: 09:F2:8C:DC:E4:4F:D3:1D:6A:41:C0:4A:65:F3:5D:16:E0:5E:A9:53
Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Certificate serial: 30D2A63DC5D757CA59DE1DF5CD13EF70279E06A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 05:42:47 +0000
Manifest this update: Thu 24 Sep 2026 05:37:47 +0000
Manifest next update: Fri 25 Sep 2026 07:30:47 +0000
Files and hashes: 1: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=)
2: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=)
3: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: WFY4X1bJ/7jzd/8j/IqCzQcWtHPfGRtSFc2XqWF6U6Q=)
4: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d2:a6:3d:c5:d7:57:ca:59:de:1d:f5:cd:13:ef:70:27:9e:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Validity
Not Before: Sep 24 05:37:47 2026 GMT
Not After : Sep 25 07:30:47 2026 GMT
Subject: CN=09F28CDCE44FD31D6A41C04A65F35D16E05EA953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:d3:16:fc:83:0f:f8:16:00:0a:e6:1f:fc:
66:15:c8:ca:35:b9:55:73:b5:34:07:11:51:64:f5:
9f:08:a9:21:3b:78:ae:7b:18:57:e6:5a:41:19:de:
ff:c1:6d:f8:f0:15:17:ca:0b:96:66:aa:f5:eb:99:
7b:99:3d:e5:52:d5:31:e9:d0:9e:82:07:ef:2e:01:
48:07:fc:b5:25:af:0b:51:07:5f:c3:67:f5:6f:05:
3e:94:20:f7:ff:32:47:a7:2a:11:d7:80:f7:75:ee:
20:05:0e:cd:d4:3a:3d:95:b0:36:b6:45:59:ee:53:
06:de:d2:a3:72:2a:fc:7f:91:ba:6e:45:31:71:37:
93:37:7d:d4:2a:1a:47:6c:5d:fb:1a:2b:34:ab:61:
e2:68:58:a0:13:fb:95:a4:56:b1:b9:ab:4e:2f:19:
ff:f8:84:cc:e3:2a:cc:03:95:1f:be:dd:19:ea:a5:
52:0e:88:ec:5a:34:e3:29:cf:94:61:6f:d9:d0:19:
2a:ed:22:af:bd:4c:a5:0f:ee:42:53:75:ff:53:80:
18:f1:03:55:71:2f:e6:ed:0d:ac:6a:c6:0c:55:2f:
c3:ee:04:af:84:f0:ea:81:94:21:b4:9d:69:6b:99:
35:7c:dc:72:a6:35:c4:7e:7a:c6:ae:02:cc:8c:9d:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:8C:DC:E4:4F:D3:1D:6A:41:C0:4A:65:F3:5D:16:E0:5E:A9:53
X509v3 Authority Key Identifier:
keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3f:11:66:15:75:19:b9:39:53:a5:4d:4f:3f:2c:5b:bd:1a:
79:46:5a:b8:18:3f:5c:5d:36:16:64:74:9a:56:d9:fe:d1:63:
cc:4b:06:de:ef:0f:84:76:23:ff:bf:a8:c8:7f:92:36:6f:23:
73:c4:de:eb:08:07:2a:8c:ee:2e:6a:e5:ab:3f:d1:8b:08:d5:
8d:5e:8f:a3:90:96:08:6e:76:55:aa:ec:4a:41:7b:1d:d5:28:
5c:c2:93:74:6f:2d:97:4c:91:4f:e4:49:15:e8:23:e9:41:91:
b3:4e:74:ef:ba:2c:25:7e:e9:76:0c:bd:0a:d4:ec:5a:ce:56:
f2:80:25:6f:17:a0:77:c7:84:01:cb:90:53:75:b7:17:0b:ff:
d3:e4:05:36:72:09:98:3d:d7:bd:27:c0:60:e5:6f:f0:34:7c:
b6:4d:80:39:59:91:ed:24:9c:4d:2b:f3:b1:b7:cf:17:eb:fb:
3b:69:bb:15:2f:46:4d:74:17:5c:ed:ce:23:21:fa:84:6a:31:
ee:68:58:00:21:0d:62:15:1d:9c:b7:b4:fc:22:35:43:d4:5a:
dd:d2:d3:97:79:97:17:e0:c7:04:29:5e:be:52:df:ea:b9:8e:
0d:1b:95:27:d5:39:61:f1:41:8b:9d:09:3a:93:7b:1e:72:f4:
13:e3:3a:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMNKmPcXXV8pZ3h31zRPvcCeeBqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5
NTMyOTZBNjAeFw0yNjA5MjQwNTM3NDdaFw0yNjA5MjUwNzMwNDdaMDMxMTAvBgNV
BAMTKDA5RjI4Q0RDRTQ0RkQzMUQ2QTQxQzA0QTY1RjM1RDE2RTA1RUE5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkN9MW/IMP+BYACuYf/GYVyMo1
uVVztTQHEVFk9Z8IqSE7eK57GFfmWkEZ3v/BbfjwFRfKC5ZmqvXrmXuZPeVS1THp
0J6CB+8uAUgH/LUlrwtRB1/DZ/VvBT6UIPf/MkenKhHXgPd17iAFDs3UOj2VsDa2
RVnuUwbe0qNyKvx/kbpuRTFxN5M3fdQqGkdsXfsaKzSrYeJoWKAT+5WkVrG5q04v
Gf/4hMzjKswDlR++3RnqpVIOiOxaNOMpz5Rhb9nQGSrtIq+9TKUP7kJTdf9TgBjx
A1VxL+btDaxqxgxVL8PuBK+E8OqBlCG0nWlrmTV83HKmNcR+esauAsyMnRIRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCfKM3ORP0x1qQcBKZfNdFuBeqVMwHwYDVR0j
BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3
N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5
NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC
Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFc/EWYVdRm5OVOlTU8/LFu9GnlGWrgYP1xd
NhZkdJpW2f7RY8xLBt7vD4R2I/+/qMh/kjZvI3PE3usIByqM7i5q5as/0YsI1Y1e
j6OQlghudlWq7EpBex3VKFzCk3RvLZdMkU/kSRXoI+lBkbNOdO+6LCV+6XYMvQrU
7FrOVvKAJW8XoHfHhAHLkFN1txcL/9PkBTZyCZg9170nwGDlb/A0fLZNgDlZke0k
nE0r87G3zxfr+ztpuxUvRk10F1ztziMh+oRqMe5oWAAhDWIVHZy3tPwiNUPUWt3S
05d5lxfgxwQpXr5S3+q5jg0blSfVOWHxQYudCTqTex5y9BPjOoo=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:23 2026 by rpki-client