
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier: rMrn5IYhMx0J52+hFSQ7XWvXKoNkJScvc1RjQOW3+iw=
Subject key identifier: 05:0B:99:FB:73:ED:23:27:26:F3:A1:E4:53:4A:5A:BD:3E:01:CA:28
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 4F10DAA9407BEF773462EF862A9203F870609E5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number: C4
Signing time: Sat 26 Sep 2026 18:33:00 +0000
Manifest this update: Sat 26 Sep 2026 18:28:00 +0000
Manifest next update: Sun 27 Sep 2026 19:06:00 +0000
Files and hashes: 1: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
2: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
3: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
4: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
5: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
6: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
7: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
8: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
9: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
10: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
11: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
12: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
13: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
14: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
15: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
16: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
17: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
18: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: A9xBa8vkV0huKR0VqXtEFbe0xWv5TefvpOrpnSWIJ+U=)
19: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
20: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
21: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
22: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
23: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
24: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:10:da:a9:40:7b:ef:77:34:62:ef:86:2a:92:03:f8:70:60:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: Sep 26 18:28:00 2026 GMT
Not After : Sep 27 19:06:00 2026 GMT
Subject: CN=050B99FB73ED232726F3A1E4534A5ABD3E01CA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:c1:01:09:9e:10:7b:be:33:48:14:87:8a:
14:01:3b:cb:b0:c3:89:29:f9:b4:cf:5b:00:b8:2b:
0f:50:f1:80:ed:c2:5b:5f:48:b4:3f:93:74:ac:98:
e8:dd:32:95:3d:76:dd:5e:5f:c1:0f:79:43:07:0a:
e1:5a:c3:ad:2d:52:e2:37:e6:c0:69:d6:a1:6b:03:
08:d0:2a:f8:ca:b6:22:62:77:4b:c0:15:16:b4:0f:
23:8c:a4:47:42:a7:7b:4a:f7:9e:5d:50:8c:2e:07:
69:30:b0:9d:9e:99:94:e6:3e:1d:f0:bc:3b:51:3c:
59:17:f8:8c:fc:8d:9a:d6:b2:49:e6:be:4b:3d:4c:
95:a5:41:22:57:e2:ed:54:91:39:73:7c:92:cb:99:
0d:af:5c:85:c7:59:64:6e:e1:10:a0:87:08:cc:6b:
ed:ac:b0:d9:87:e7:e7:05:86:37:9a:b3:16:a3:25:
c7:52:6b:6a:cc:8d:37:8b:c2:03:85:d0:d6:13:ef:
35:88:1d:b9:4d:9a:ba:95:e8:44:77:ec:4d:44:4b:
e6:e7:d5:83:8f:a7:32:cf:b3:4a:5f:64:c5:ae:4c:
ae:5e:2b:1a:63:91:56:42:80:92:17:c3:83:45:74:
9f:ca:7f:7a:0c:86:f5:fa:7b:e8:97:5d:ee:2a:12:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0B:99:FB:73:ED:23:27:26:F3:A1:E4:53:4A:5A:BD:3E:01:CA:28
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d8:c0:a3:62:2c:10:94:c1:ee:27:48:b1:d6:2b:2a:cb:67:
50:95:3e:b8:05:28:24:26:82:dc:54:87:42:6c:81:4f:2d:81:
2d:8e:24:6a:5b:82:25:bb:90:8c:43:c2:ba:3c:c6:f6:0d:3b:
6f:6c:4e:eb:6f:1b:5b:64:9e:0b:0e:cb:27:d4:91:a3:34:07:
ab:40:ce:7c:e8:55:27:af:82:e1:e4:8d:56:4d:a0:f7:2f:32:
e3:76:f4:c1:4a:3b:9a:66:0d:ab:c1:ef:a8:2d:c3:9e:ee:4c:
be:6d:9a:3b:77:17:5c:da:cd:09:db:d5:eb:17:00:59:09:fd:
36:d4:d2:fb:c2:44:c8:90:b3:05:07:c1:32:7b:5e:be:72:57:
6a:66:36:a5:c7:d9:65:01:cb:97:f3:65:01:85:fe:49:70:b2:
06:26:0d:dd:c3:3c:26:74:49:ad:52:85:23:70:38:13:4a:6c:
5e:17:16:c2:fb:60:64:20:9c:10:90:29:f2:db:7f:72:6a:df:
c5:e3:c3:e7:8e:14:30:6d:73:65:bb:a2:49:1d:33:48:b5:c2:
3e:40:52:c0:b4:ae:53:93:3f:84:d4:5c:0c:fd:e5:23:01:99:
38:cd:9b:4b:eb:3a:99:26:cc:ae:91:e9:b2:b0:81:d8:1b:0a:
37:36:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:48:09 2026 by rpki-client