
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
File: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft (raw, json)
Hash identifier: Ohxc5lCZJIiEOd4PBJcqNkbH/8cCjxwT2RKAkpAjhkc=
Subject key identifier: C6:CB:B5:A1:1F:04:56:AB:C4:C4:6B:AE:F4:FF:52:F5:AD:EE:84:FA
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial: 7944D25347D01628DB89C5409C4F1C4A803984A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 05:15:58 +0000
Manifest this update: Fri 24 Jul 2026 05:10:58 +0000
Manifest next update: Sat 25 Jul 2026 06:44:58 +0000
Files and hashes: 1: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: 4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=)
2: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl (hash: YcNKAwHbEeYjPPZSiHSTP10lhYgssmys1lnNTs0dNOs=)
3: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=)
4: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: 4io3eCxu167AtlWBsa6dTLlDoZVSSBjQBvpZbbKn9o4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:44:d2:53:47:d0:16:28:db:89:c5:40:9c:4f:1c:4a:80:39:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Validity
Not Before: Jul 24 05:10:58 2026 GMT
Not After : Jul 25 06:44:58 2026 GMT
Subject: CN=C6CBB5A11F0456ABC4C46BAEF4FF52F5ADEE84FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:0e:6a:67:6d:f6:40:2e:b2:f9:0b:9e:9b:
6c:cb:8b:19:b1:28:cc:2b:c6:63:44:21:53:df:aa:
98:d0:63:41:94:27:be:ea:b9:b2:1d:ce:84:43:da:
8d:19:fa:2f:89:83:56:5a:0d:6a:b3:9c:32:8a:b0:
94:f8:c7:c8:d8:98:57:d1:da:53:50:b9:3d:e6:49:
b1:ec:99:2b:3d:13:e3:77:8d:30:4e:4e:73:7c:9a:
ef:fe:d0:4f:69:58:4d:ff:15:f0:30:f5:56:a0:71:
e0:49:6b:e7:3f:d3:f7:a0:6e:1a:c1:ea:6f:db:10:
b1:51:30:58:87:d2:ed:b6:d2:d0:90:2d:72:c2:f3:
fe:4b:82:ac:50:bd:b6:10:c0:f7:ed:ce:50:2c:9c:
7f:b8:cd:83:91:41:3d:d4:0b:29:e4:4b:f9:fc:00:
f6:28:96:5d:24:41:e0:b9:d2:ef:bc:f9:8c:f7:db:
07:be:4b:00:8c:23:0c:05:37:2d:37:78:d5:81:09:
a8:e7:8b:55:61:63:70:e1:82:cc:69:9b:0a:15:34:
32:b2:c7:1f:0a:43:0b:10:55:12:0a:f8:b5:fb:6e:
b5:0b:23:77:b4:e0:b0:e9:77:35:3e:9a:f0:3b:f3:
da:ff:78:7f:dd:1a:30:db:87:c1:38:e1:b9:49:45:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:B5:A1:1F:04:56:AB:C4:C4:6B:AE:F4:FF:52:F5:AD:EE:84:FA
X509v3 Authority Key Identifier:
keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:55:1f:59:50:40:85:fd:9e:24:7d:aa:7d:55:cc:a9:2d:08:
82:90:26:94:a1:7b:59:ed:ec:23:46:02:a8:4e:30:d2:30:27:
3e:8e:38:62:01:7b:7d:20:65:51:30:7e:a3:45:9e:d8:1b:ff:
fc:36:54:ec:ec:c7:d4:67:c4:fe:1b:18:b5:11:de:41:45:77:
37:8a:e9:d3:b8:13:d6:7a:8d:55:86:41:19:d9:6d:ad:a2:de:
e1:9c:98:66:84:cd:8d:dc:f8:a8:57:85:6d:8d:da:62:5e:46:
79:a5:11:91:0d:73:a6:d3:1d:a1:be:b8:3d:0a:f9:43:91:3f:
98:96:13:ea:65:91:bf:8e:9f:34:27:bd:27:16:78:64:91:d7:
ec:16:53:8f:41:cb:eb:2c:f0:50:2a:8e:2f:55:53:3c:a0:a8:
3c:ad:be:29:0f:2d:24:a6:a2:6e:47:36:10:72:0d:9a:98:97:
f6:fa:28:cf:bd:9e:21:76:a6:3f:6e:6b:da:65:a4:d6:be:38:
0c:aa:3a:91:21:90:64:e9:b8:8a:f5:bf:ff:49:0a:df:b9:78:
93:90:c8:dc:5a:73:ac:bd:32:cd:60:10:4b:45:72:71:a8:3b:
76:f4:3d:c7:b0:cb:77:1b:6e:15:e1:9f:e9:68:5f:38:cb:80:
be:e8:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:47 2026 by rpki-client