
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json)
Hash identifier: Jtd7Y7+K4Np8Vyo8zl2WvvCHOLyM1g0/1hZ9NDYIXyM=
Subject key identifier: B3:D9:18:55:6C:D4:E2:BD:F3:0C:43:D3:5C:A1:A5:8E:BF:77:16:49
Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Certificate serial: 628C77EB1D8FFF6B365734624C74E0BC84C520DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 12:15:08 +0000
Manifest this update: Thu 23 Jul 2026 12:10:08 +0000
Manifest next update: Fri 24 Jul 2026 15:32:08 +0000
Files and hashes: 1: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: fidsltjFRTC0EL2hj4jw9KuJp4XHE8ysNpARbHkwfRg=)
2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=)
3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=)
4: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8c:77:eb:1d:8f:ff:6b:36:57:34:62:4c:74:e0:bc:84:c5:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Validity
Not Before: Jul 23 12:10:08 2026 GMT
Not After : Jul 24 15:32:08 2026 GMT
Subject: CN=B3D918556CD4E2BDF30C43D35CA1A58EBF771649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:45:f3:c2:b4:92:5e:86:b9:a5:48:fd:04:
50:76:be:01:a6:77:51:ea:f9:e1:b5:05:61:f1:1d:
c9:b3:96:3c:59:27:dd:85:c4:5e:15:f9:bb:56:a5:
0c:c5:19:74:16:4b:72:2b:32:b2:58:ed:8d:ed:8b:
fc:60:cb:b9:8d:97:7f:be:71:48:66:4d:1a:ae:31:
04:4a:c5:3d:8d:9b:4a:65:96:cd:6b:21:42:4f:c4:
a7:a0:13:c5:00:42:00:ef:1a:ca:49:02:61:41:c0:
06:f0:04:19:99:60:a7:07:48:f1:8f:5c:02:a9:38:
43:da:ae:fc:f8:0c:ea:15:fb:b6:62:7a:1a:32:ab:
96:65:de:b4:ec:68:da:0f:54:14:13:9a:78:b2:13:
e7:77:aa:e8:01:82:d8:88:bd:76:6b:63:07:47:33:
14:ba:3c:ef:c6:e6:00:00:40:58:2b:e9:87:54:09:
02:a0:97:73:4b:c6:50:0d:2c:e9:40:a8:d6:ee:76:
4c:f5:4a:de:56:6a:b7:21:41:be:66:c0:ff:e8:2d:
37:53:f2:1b:f0:ef:32:7d:47:c5:af:27:6d:dd:33:
c7:e7:03:c2:56:3f:8e:3d:1b:23:06:9e:92:40:15:
e0:f7:5f:60:3e:19:d5:06:f0:1f:51:f3:34:86:56:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:18:55:6C:D4:E2:BD:F3:0C:43:D3:5C:A1:A5:8E:BF:77:16:49
X509v3 Authority Key Identifier:
keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:39:65:ee:24:f6:49:9e:d8:53:96:64:38:43:16:0a:e9:d0:
3f:9d:eb:41:20:52:8b:cf:1b:f5:99:ad:20:0e:38:6e:71:d7:
59:53:d1:00:cc:e4:82:af:ab:3c:ae:9a:3e:9c:7f:de:a5:f8:
a8:be:f7:e1:16:a9:52:71:18:9b:38:7f:33:01:bd:02:0c:49:
0d:b3:17:1d:e7:82:ba:a8:43:5e:08:e5:dd:2e:3f:3c:96:58:
cc:26:0f:72:b1:b9:50:eb:19:23:db:0d:aa:89:22:77:5c:53:
57:33:c3:41:25:a3:7b:5f:26:b7:f1:a3:8d:d5:30:91:d6:63:
64:7e:e4:ee:23:3b:4d:76:3b:8a:51:37:d9:85:d6:32:bf:51:
0b:54:f0:26:8c:8a:2c:4c:2f:c0:d2:be:7d:4f:9d:92:87:36:
78:4d:0c:b2:3e:83:fa:89:68:63:23:0b:06:7e:47:92:17:54:
1a:12:ee:07:dc:3e:05:93:cb:c8:ab:b6:51:b3:87:c8:87:90:
b5:ac:b9:d1:40:33:52:8b:4b:f9:7b:72:06:76:5e:3c:1c:a5:
3b:90:8b:99:74:e4:22:fd:c9:8d:aa:d8:4d:7b:b4:10:45:7b:
b2:ba:ea:c1:5d:0a:d5:0d:ec:b2:5b:53:03:85:a8:12:3f:84:
05:1b:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:27 2026 by rpki-client