
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
File: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json)
Hash identifier: Id65iI1VMFK3aOQZY0NE4zdwQHtwc+RnydQVxcV2RtU=
Subject key identifier: 1C:57:7F:D9:CF:20:BB:E2:77:14:9F:26:80:29:AA:EE:23:D2:AB:DC
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 0F2276A5E60FC61B6829979E8DAAA842E66644FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 02:57:59 +0000
Manifest this update: Fri 24 Jul 2026 02:52:59 +0000
Manifest next update: Sat 25 Jul 2026 03:01:59 +0000
Files and hashes: 1: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=)
2: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (hash: 76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=)
3: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=)
4: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=)
5: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=)
6: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=)
7: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=)
8: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=)
9: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: 4Q9iFO3TjE/l3D1QG4paADwmfWvHm0qtB66UILaf8Ho=)
10: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=)
11: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: 2Z8fV7mQsbcnSj2qOGXuOzm4WqHV4kRpAnLtM8Y/AlA=)
12: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=)
13: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=)
14: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (hash: Lahi4UMwkr7lfFz+tMIIfdkh1kxRlOqmv3Bjync9vmg=)
15: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:22:76:a5:e6:0f:c6:1b:68:29:97:9e:8d:aa:a8:42:e6:66:44:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: Jul 24 02:52:59 2026 GMT
Not After : Jul 25 03:01:59 2026 GMT
Subject: CN=1C577FD9CF20BBE277149F268029AAEE23D2ABDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:cd:42:95:21:c1:d7:41:cb:5c:12:63:f7:
d1:b3:7a:b1:7f:d6:0c:ff:14:0d:47:cc:1e:c2:db:
04:49:aa:2e:60:e2:85:07:d0:c2:1c:4c:4e:06:b6:
9a:c5:2d:b0:64:7e:56:65:c9:9c:7b:ea:58:05:39:
12:c4:d1:65:a5:5c:40:84:7d:c7:54:86:87:2b:ce:
91:c6:96:2f:5f:5e:35:e9:1c:95:ec:90:af:67:13:
09:52:44:10:6c:75:5c:45:23:be:79:f3:24:f3:68:
7a:d6:60:bf:93:a1:d8:89:58:e9:d8:5f:72:f2:65:
0a:d0:0f:92:03:76:42:9c:05:7f:e1:27:49:6e:7a:
33:ed:78:8c:21:d6:18:53:d2:19:1c:2f:16:d2:ed:
ca:ea:40:33:b3:04:12:36:bf:21:4c:49:59:8a:a8:
56:69:32:e9:cb:79:7d:9f:6a:e0:b8:41:50:17:44:
86:73:83:d5:83:92:89:01:e7:07:62:d5:ce:ef:c5:
74:02:76:10:0c:df:b2:f1:a9:7c:5b:70:ec:98:b3:
90:c8:cc:10:48:72:ea:e4:5a:98:3f:7d:7f:dc:8d:
e7:b7:13:23:d3:cf:95:48:3b:30:d8:35:28:d5:a1:
9a:cb:e7:d7:44:37:e1:47:d7:02:4b:fa:30:3c:04:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:57:7F:D9:CF:20:BB:E2:77:14:9F:26:80:29:AA:EE:23:D2:AB:DC
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:05:3b:47:b7:a3:46:df:67:5d:66:3e:1d:46:6b:8c:7f:
e9:04:ad:5c:83:29:b7:55:65:76:ef:4c:a6:c5:46:8e:aa:c6:
51:bc:21:b5:75:70:fe:ee:13:79:dd:b1:de:86:80:55:5f:93:
53:47:86:81:9b:0b:c7:20:b8:b3:0f:36:5a:45:c4:b6:59:ec:
1a:ab:61:f7:be:14:9b:18:ea:b0:4e:6f:38:82:17:54:89:dd:
0d:90:d7:7f:f7:60:08:49:95:65:c3:62:90:70:41:d0:85:22:
c7:83:fa:1e:2f:6b:cf:4f:e8:fb:28:97:bc:5f:7d:55:f7:49:
f5:b0:8e:fa:db:63:86:43:e2:59:42:9f:37:cf:68:86:b5:b0:
9f:3d:2d:6b:6d:b3:68:03:be:a8:81:e3:17:ef:2a:df:64:64:
0b:02:d7:33:ad:2e:4a:93:6a:bc:69:e7:cc:d5:3a:c5:05:5b:
57:a5:5d:35:7c:34:89:58:2c:6f:5d:39:7f:da:d9:eb:00:dd:
a0:f5:43:77:ef:e0:a6:94:e2:14:49:4d:ff:83:75:7f:bd:d6:
9e:da:46:0d:9e:1d:2c:ef:81:7a:da:92:7d:c5:79:be:a1:f6:
9e:9b:e1:a5:a9:9e:3d:8a:f5:e2:82:6c:ac:db:33:61:bb:0d:
bc:0f:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:56 2026 by rpki-client