
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json)
Hash identifier: c4CD6pzEw09gT2UX+xhPjZCZHJ1+azudMfqQANFvvMo=
Subject key identifier: 74:D8:85:8D:FC:46:E9:7F:C7:B6:C4:AD:53:21:5C:AD:84:4B:4D:34
Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Certificate serial: 2FFC92B8B5532021BEBD97F7DC37456A914FCD32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 00:24:41 +0000
Manifest this update: Fri 24 Jul 2026 00:19:41 +0000
Manifest next update: Sat 25 Jul 2026 03:47:41 +0000
Files and hashes: 1: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: kgS9RqN45FoOAiy7WsXOCUShmVgrjgNxJaXWph3iJZM=)
2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=)
3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fc:92:b8:b5:53:20:21:be:bd:97:f7:dc:37:45:6a:91:4f:cd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Validity
Not Before: Jul 24 00:19:41 2026 GMT
Not After : Jul 25 03:47:41 2026 GMT
Subject: CN=74D8858DFC46E97FC7B6C4AD53215CAD844B4D34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ce:91:13:1f:7a:3e:5d:a7:26:e7:53:bd:40:
ca:92:eb:0b:49:87:97:2e:e2:69:1d:25:5b:87:09:
0b:65:a2:00:0c:3a:99:ba:63:60:37:90:bd:be:68:
22:c4:e0:31:71:80:3a:eb:ce:06:f1:66:de:44:cd:
d5:60:2d:d2:f3:33:42:1e:e4:c1:15:ef:6e:fc:d7:
1a:d7:0b:39:f0:21:3d:1b:ba:0f:cd:ba:37:6e:59:
d8:b7:a4:ac:f7:26:f2:58:93:cd:71:fa:e3:7d:f3:
f2:4e:c2:24:1f:ad:f9:2a:0a:64:78:fc:af:d0:99:
7d:91:6f:1a:b1:70:bd:66:c7:3e:98:31:a2:b0:64:
25:0d:4d:6e:51:9a:20:0d:e6:51:f7:59:f0:fa:33:
6f:6c:cd:4a:60:0e:fe:f2:2c:e8:e1:91:47:e6:11:
57:22:e3:b3:b9:0a:5e:2f:21:b4:03:6c:6e:b0:91:
5f:64:09:d6:ef:10:4b:37:fb:2d:13:14:c2:65:ec:
bc:c3:54:7c:cd:c5:8d:82:70:1b:8f:ae:2d:a3:64:
c8:ee:c8:ee:6f:1d:8f:76:f2:1e:f8:9d:4d:c7:2d:
c0:ca:55:9c:70:51:11:69:3e:b4:ae:a5:c2:1b:ec:
a9:81:3d:ce:6a:a9:80:17:75:60:22:84:4c:05:a4:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D8:85:8D:FC:46:E9:7F:C7:B6:C4:AD:53:21:5C:AD:84:4B:4D:34
X509v3 Authority Key Identifier:
keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:f1:80:0b:69:6c:81:ae:31:0b:ad:a8:02:6c:01:ff:50:
b2:cd:3d:a1:5b:21:c2:2f:b2:16:1a:47:6b:0d:bd:94:a4:0f:
ae:fe:74:df:e9:e2:6f:92:b0:de:78:61:0c:b6:91:76:59:e7:
2b:d6:84:31:37:17:eb:66:3a:55:e1:94:9a:a5:68:23:ea:e5:
3a:87:71:56:cd:64:0b:d9:01:47:b2:47:28:58:78:eb:c0:82:
ed:8f:a7:3d:f0:70:56:0b:6f:7f:df:7b:53:93:35:cc:8c:87:
b0:6e:28:28:fd:ed:8b:d1:3e:f9:a3:fe:8c:d1:6c:f0:7c:35:
58:5f:80:aa:89:f7:9b:6f:b2:9e:2f:ad:a3:09:99:c2:a0:fb:
5f:9b:ef:7d:08:69:b7:12:11:28:5c:33:d1:0f:03:8a:d3:89:
76:88:a7:60:20:a3:da:43:0b:ca:23:2f:59:94:93:48:a0:28:
d8:a1:7e:e0:24:b3:f8:9f:97:2f:fb:34:20:6b:4d:9d:e5:31:
c9:4a:fd:9b:4a:c3:50:59:ca:97:02:48:20:dd:f9:95:df:2f:
4d:13:28:af:65:45:35:d3:ba:5d:bf:17:64:eb:c7:78:de:01:
59:bb:2d:68:15:71:98:b1:38:bc:97:a5:53:60:20:fd:14:47:
f2:77:a4:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL/ySuLVTICG+vZf33DdFapFPzTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3
MTdGODI3QjAeFw0yNjA3MjQwMDE5NDFaFw0yNjA3MjUwMzQ3NDFaMDMxMTAvBgNV
BAMTKDc0RDg4NThERkM0NkU5N0ZDN0I2QzRBRDUzMjE1Q0FEODQ0QjREMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8zpETH3o+Xacm51O9QMqS6wtJ
h5cu4mkdJVuHCQtlogAMOpm6Y2A3kL2+aCLE4DFxgDrrzgbxZt5EzdVgLdLzM0Ie
5MEV72781xrXCznwIT0bug/NujduWdi3pKz3JvJYk81x+uN98/JOwiQfrfkqCmR4
/K/QmX2RbxqxcL1mxz6YMaKwZCUNTW5RmiAN5lH3WfD6M29szUpgDv7yLOjhkUfm
EVci47O5Cl4vIbQDbG6wkV9kCdbvEEs3+y0TFMJl7LzDVHzNxY2CcBuPri2jZMju
yO5vHY928h74nU3HLcDKVZxwURFpPrSupcIb7KmBPc5qqYAXdWAihEwFpMeDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdNiFjfxG6X/HtsStUyFcrYRLTTQwHwYDVR0j
BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1
Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4
MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0
MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw
N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADQT8YALaWyBrjELragCbAH/ULLNPaFbIcIv
shYaR2sNvZSkD67+dN/p4m+SsN54YQy2kXZZ5yvWhDE3F+tmOlXhlJqlaCPq5TqH
cVbNZAvZAUeyRyhYeOvAgu2Ppz3wcFYLb3/fe1OTNcyMh7BuKCj97YvRPvmj/ozR
bPB8NVhfgKqJ95tvsp4vraMJmcKg+1+b730IabcSEShcM9EPA4rTiXaIp2Ago9pD
C8ojL1mUk0igKNihfuAks/ifly/7NCBrTZ3lMclK/ZtKw1BZypcCSCDd+ZXfL00T
KK9lRTXTul2/F2Trx3jeAVm7LWgVcZixOLyXpVNgIP0UR/J3pMw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:47 2026 by rpki-client