
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier: /hGuwtYt2uLT58gQBP7X9jt1FPy3H9jH9AoBSjMJxRM=
Subject key identifier: 6E:46:9A:A0:C0:8A:B0:6C:FD:88:B0:FF:FD:35:2E:D3:8A:55:13:DE
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 47DD05A0D944A447217CFE2DDD19CBC2B6A120F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:34:23 +0000
Manifest this update: Tue 12 May 2026 21:29:23 +0000
Manifest next update: Wed 13 May 2026 22:04:23 +0000
Files and hashes: 1: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
2: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
3: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
4: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
5: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
6: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
7: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
8: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
9: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
10: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
11: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
12: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
13: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
14: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
15: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
16: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
17: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: tbregDuOV2OEEaj4wq0QVZmEhzc7UgKPh0L4+Z1637s=)
18: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
19: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
20: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
21: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
22: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
23: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
24: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:dd:05:a0:d9:44:a4:47:21:7c:fe:2d:dd:19:cb:c2:b6:a1:20:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: May 12 21:29:23 2026 GMT
Not After : May 13 22:04:23 2026 GMT
Subject: CN=6E469AA0C08AB06CFD88B0FFFD352ED38A5513DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:05:1e:d4:37:7f:b5:32:db:70:49:59:7e:
8e:ac:34:e2:96:3e:d8:a3:c3:52:e4:2b:96:23:a5:
ac:51:7a:57:10:61:66:a3:67:9e:f5:95:d2:17:f2:
03:5d:e7:71:c3:16:c2:26:2b:7b:e2:f6:fd:45:a2:
31:bb:16:4b:27:1f:ab:ca:55:4f:1e:7b:9a:4a:14:
de:f3:c3:2f:1f:0a:88:8f:03:50:ec:c8:3a:e2:0a:
c0:d6:88:21:27:32:76:b1:0f:90:b7:98:7f:3c:a9:
5a:d1:30:f6:62:13:04:26:60:15:97:fb:58:7c:a0:
08:f4:83:68:16:57:e2:3a:88:4a:16:dc:82:b2:c9:
32:6d:21:34:18:85:dd:80:b2:6b:85:aa:4b:fe:ad:
75:54:22:7f:75:63:c7:61:a5:f9:2c:4d:3e:08:0d:
1b:e9:1f:f5:e6:79:96:64:06:01:8f:16:e9:12:9f:
7d:e0:56:3c:c6:de:b7:ac:2b:98:9c:39:3e:67:b8:
56:41:8e:b9:df:fe:48:3d:82:cd:dc:40:ac:2e:08:
eb:99:cd:6a:f3:83:5f:3e:32:34:04:7f:5c:5b:86:
6e:a1:74:1b:37:5c:07:df:f3:5b:67:08:23:fd:30:
09:dd:e5:98:b4:5b:29:e5:c5:a3:3e:dd:54:1b:4e:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:46:9A:A0:C0:8A:B0:6C:FD:88:B0:FF:FD:35:2E:D3:8A:55:13:DE
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:7f:03:30:dd:99:21:17:a3:dd:d1:66:d3:4e:5e:3e:25:
c3:22:af:c1:9a:7f:c5:f0:e4:7d:f7:77:81:8f:82:17:52:ac:
2c:77:85:91:ae:12:e3:48:a5:74:ac:76:ba:be:e3:19:6f:99:
83:0f:b4:6f:77:d1:31:a1:61:01:6e:8b:66:f3:e4:c7:73:a1:
98:f3:15:8f:08:97:4e:9a:a3:89:89:58:d4:f3:0b:9e:ec:6d:
00:21:f3:2b:73:7c:52:a0:18:4e:cf:30:5a:bf:12:fd:52:bb:
bc:d2:80:2a:0d:57:b9:aa:6b:a5:9e:af:4b:b2:74:44:c0:b3:
79:44:dc:c0:8f:00:33:2a:5d:68:3d:fc:15:e7:0f:a0:ec:99:
b0:b9:7c:4d:29:fa:82:c5:78:17:13:70:12:59:23:e1:b7:07:
19:93:53:00:74:8d:a3:ac:51:fa:e5:26:6f:e9:e2:95:80:f6:
c7:00:d5:ac:c3:36:d1:b1:e7:4e:15:49:d9:9f:12:35:80:13:
f2:c9:b9:05:d2:20:d9:1b:0c:33:0d:1c:47:dd:3d:cf:9d:d0:
e7:14:2e:0d:a1:97:7f:4f:71:5a:d4:3d:0e:57:dd:a6:22:e2:
9c:6e:c7:46:b4:5a:a0:7a:fe:8a:4d:94:8b:69:95:7b:3d:f7:
83:43:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:56 2026 by rpki-client