
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
File: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft (raw, json)
Hash identifier: etJ7XAZ2ieAfa+dT3HmmGQ3umCbqFeUknV0Q0BbH5tI=
Subject key identifier: 99:0B:EC:41:BC:E0:8F:44:D0:04:00:2B:D1:68:E7:0C:B5:9B:08:5E
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial: 3B10A8D647A87F217C4BA6B2A9A2542652502C33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 02:21:24 +0000
Manifest this update: Wed 13 May 2026 02:16:24 +0000
Manifest next update: Thu 14 May 2026 06:06:24 +0000
Files and hashes: 1: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: 4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=)
2: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl (hash: 8Ep5rxlUcFKghXahCA7f1m9K0UEb5g4IXp6mwsCz71Q=)
3: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=)
4: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: 4io3eCxu167AtlWBsa6dTLlDoZVSSBjQBvpZbbKn9o4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:10:a8:d6:47:a8:7f:21:7c:4b:a6:b2:a9:a2:54:26:52:50:2c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Validity
Not Before: May 13 02:16:24 2026 GMT
Not After : May 14 06:06:24 2026 GMT
Subject: CN=990BEC41BCE08F44D004002BD168E70CB59B085E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:92:3e:c4:12:f5:50:d7:62:dd:3e:f7:d6:
6b:51:8e:0d:b2:46:14:17:b0:61:55:4e:93:4e:b0:
19:e8:57:99:57:82:f6:fa:7c:d5:9d:26:69:de:3e:
53:ef:c6:9d:15:77:d2:16:5f:86:05:03:00:63:fb:
ee:2b:fb:1d:01:b5:73:fd:a9:c0:3b:f7:8e:d6:41:
7f:32:e3:b4:c4:c9:40:a5:8f:50:e4:33:cf:db:17:
17:bf:76:cb:6a:6f:40:ed:bf:15:ee:d3:f6:76:26:
4d:8b:0b:26:29:5c:9f:08:07:f8:ee:da:9a:78:0a:
58:a7:83:b6:c5:2c:1a:c4:db:18:7a:15:2a:77:6b:
b2:2c:8b:1a:bd:31:d3:6b:8e:74:cb:6b:a4:2d:2c:
81:e1:7e:f5:9d:ce:ed:85:e3:61:37:cb:ee:3a:b2:
c0:46:b1:f6:a6:05:18:ea:0a:8e:87:a0:29:72:50:
1b:e6:fa:bd:55:f9:35:9a:36:a8:04:18:38:1c:26:
38:b6:8e:f3:de:8a:7c:e3:74:8b:d6:d2:2a:bd:61:
b1:a5:2d:52:d0:cb:77:ea:83:a4:3d:3b:94:5b:7c:
13:8f:d2:cb:6e:6b:22:bc:2e:b2:33:cd:72:82:5b:
6c:bc:d2:9c:ca:bd:ec:9a:2b:f0:83:7b:e4:00:e1:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:EC:41:BC:E0:8F:44:D0:04:00:2B:D1:68:E7:0C:B5:9B:08:5E
X509v3 Authority Key Identifier:
keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:55:a8:f2:42:d2:df:0a:7f:f2:be:ec:fa:28:f3:77:d1:
b7:49:39:31:48:21:21:bf:d8:78:d8:21:8b:3e:eb:7a:91:3d:
10:46:2f:36:58:17:c3:9e:3c:4e:d5:68:c4:29:88:10:67:7e:
7b:9f:c0:47:db:4f:e8:01:53:b2:63:aa:49:ea:54:e5:5a:34:
86:6b:3c:7c:e4:67:c4:b5:dc:57:33:b7:c9:d6:94:ce:9b:65:
01:e3:06:e9:af:55:fe:fa:95:7c:8f:3e:d7:5d:64:f6:76:e3:
0e:36:7a:3f:48:3b:9e:1e:78:bd:e7:b6:47:53:9b:83:9b:bd:
c5:4d:8a:e5:38:7e:60:3e:48:0c:15:3a:ca:c9:eb:0b:37:08:
7d:f2:8d:cb:bf:db:f6:f3:ab:b0:3b:3a:42:70:cd:0d:5c:85:
d0:b5:d8:6f:57:c2:6c:f5:7f:16:9f:e6:99:0d:f5:97:e1:20:
50:61:e3:4f:4f:6c:17:66:6b:83:9d:1a:c0:48:08:de:75:e6:
40:aa:d8:d4:ce:da:31:b1:72:27:15:12:94:df:30:a4:d8:8e:
b6:9c:6c:45:ac:73:79:d4:1e:49:25:5c:d2:de:c6:b9:ad:6b:
12:92:14:5d:40:a1:1f:78:99:02:55:29:5c:ff:76:af:8f:f8:
16:c4:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:04 2026 by rpki-client