
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier: f/ULvuZo5hKmTUHv7hXnOfEb6zoDKV+Y0JVsX2A/yLs=
Subject key identifier: 59:CD:DC:F2:CB:7A:30:97:2D:C4:BA:37:4A:64:D2:25:45:2B:1D:0A
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 5D14D0F7ECF3CD7BC4A6B4585D31EDBC18464ACB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number: C5
Signing time: Sun 27 Sep 2026 11:08:27 +0000
Manifest this update: Sun 27 Sep 2026 11:03:27 +0000
Manifest next update: Mon 28 Sep 2026 12:16:27 +0000
Files and hashes: 1: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
2: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
3: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
4: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
5: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
6: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
7: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
8: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
9: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
10: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
11: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
12: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
13: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
14: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
15: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
16: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
17: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
18: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
19: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
20: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
21: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: q5rSrVUdcBVRYR5WvSNWpx/reYX2Z6XztnS1HJP08yc=)
22: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
23: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
24: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:14:d0:f7:ec:f3:cd:7b:c4:a6:b4:58:5d:31:ed:bc:18:46:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: Sep 27 11:03:27 2026 GMT
Not After : Sep 28 12:16:27 2026 GMT
Subject: CN=59CDDCF2CB7A30972DC4BA374A64D225452B1D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:6d:8e:f7:7d:d3:b9:ca:1b:af:f6:ab:0f:
d4:2f:1e:96:0a:a4:64:a5:16:f7:19:9a:d1:d8:03:
4e:2b:20:01:37:50:1a:d6:0a:9d:9a:0d:3d:26:f9:
6f:a4:19:17:02:cd:08:50:93:00:b8:1a:4c:74:37:
3f:d8:24:dc:b7:8e:73:ff:96:12:5f:74:8a:14:12:
90:a0:d8:c0:75:39:38:99:0a:6b:ad:33:dd:b3:13:
05:19:41:d8:0f:87:3a:38:e3:58:41:46:c0:d0:2a:
50:74:8a:19:cb:b1:38:08:10:01:cb:b7:5a:24:28:
11:c1:10:04:e7:9c:5a:b8:1c:2b:0b:3a:98:cb:ef:
b1:e1:77:97:af:51:84:06:cd:a9:c1:ba:8d:82:d8:
71:c1:73:58:80:9d:63:06:d7:23:7a:75:f5:49:bd:
c8:82:eb:28:d5:23:87:7a:de:d5:f7:46:7a:83:32:
7c:9f:3e:8c:bf:78:75:4c:cb:8d:42:c4:23:e7:ab:
a3:e7:4b:f2:d1:5c:3b:9b:c2:5e:f6:8b:30:13:ce:
83:40:36:b0:61:06:95:df:4f:bc:87:aa:8e:6b:da:
f1:29:fe:3a:75:d1:ae:b6:34:36:da:09:f4:69:df:
6b:a4:65:81:8d:ad:38:e0:75:e7:e4:b7:30:ed:a1:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:DC:F2:CB:7A:30:97:2D:C4:BA:37:4A:64:D2:25:45:2B:1D:0A
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:33:98:68:c1:16:1b:74:68:99:8f:e1:d5:8c:0c:77:23:a1:
aa:68:d2:07:9f:d6:af:8f:de:08:10:35:f5:63:29:cc:4a:0d:
9b:07:13:63:cb:04:bb:e1:20:92:90:60:d8:b9:db:89:67:1b:
d6:0c:a3:4e:b4:36:3d:ec:6e:f2:2b:a3:c9:b9:a5:5e:85:3d:
6a:10:0a:70:35:7e:72:c9:fc:13:ca:96:35:e0:dc:5f:31:ad:
80:b5:63:51:81:db:84:90:03:f5:9a:f4:84:ac:60:af:26:cc:
77:78:09:3f:bb:8d:53:2f:64:75:74:72:fa:2c:68:7f:56:dc:
2e:42:de:9f:0d:1a:b6:b4:94:0c:01:dd:77:df:60:0b:b0:fd:
5c:7f:39:9d:e3:62:c1:38:ce:09:de:61:d4:ec:8a:6e:2a:ac:
fd:39:ee:df:ae:d5:25:3c:44:c4:a0:19:8a:2f:84:64:39:84:
9f:fe:e2:7f:37:85:f5:e0:66:2a:39:e5:c6:2d:31:6c:f6:8d:
a1:88:e8:4c:4d:b9:99:ad:17:f7:fa:59:89:86:cf:e2:47:67:
26:d0:27:3b:11:1b:f1:29:9b:a2:53:b4:7b:50:e9:02:95:2a:
c5:8f:3a:26:b1:79:46:b9:74:40:4f:bf:51:9c:61:cd:9c:96:
fe:14:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:40:42 2026 by rpki-client