
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json)
Hash identifier: TS22yAL2WU+sJR9n5DpYYE/P9P510SE9rX6OGTUK8FQ=
Subject key identifier: F4:2D:27:2E:53:EA:39:51:A9:6A:53:44:C4:1A:6A:DA:A3:87:CD:5D
Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92
Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92
Certificate serial: 4459696661C9F0364589B15494BF008FF18B0E95
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:59:38 +0000
Manifest this update: Tue 12 May 2026 18:54:38 +0000
Manifest next update: Wed 13 May 2026 20:55:38 +0000
Files and hashes: 1: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: poZuhMfDxKcexYJgl4PCz5nn2fleD0+iIb/xrvj+j0c=)
2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl
rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:59:69:66:61:c9:f0:36:45:89:b1:54:94:bf:00:8f:f1:8b:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92
Validity
Not Before: May 12 18:54:38 2026 GMT
Not After : May 13 20:55:38 2026 GMT
Subject: CN=F42D272E53EA3951A96A5344C41A6ADAA387CD5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:cc:e1:88:a3:52:73:bd:8e:97:94:9a:13:
09:d5:e9:08:e2:77:9f:16:52:63:59:6f:83:2e:a0:
4b:6b:f4:7c:37:81:de:d1:af:45:31:1c:67:3e:0d:
30:55:f2:2d:55:6c:35:b5:49:77:c9:ca:e0:b1:21:
1d:08:92:6e:6a:61:b3:bf:d7:00:e2:86:fb:41:6c:
3f:1e:a4:9d:3c:0a:e6:c1:f4:07:7e:ae:dd:fa:c5:
ef:07:9f:9c:86:c4:02:27:80:68:9d:8c:1a:7a:de:
ad:b6:c5:45:03:a7:57:da:a5:41:43:bd:f8:74:dc:
7f:19:19:7d:33:88:00:24:a8:fe:26:c7:09:7a:47:
d5:10:65:f0:5c:8c:74:ca:a9:2d:7c:89:3d:ee:3e:
a6:90:c0:e5:20:0d:1e:41:48:ca:c8:8a:ab:b8:d8:
14:e9:c7:2c:c6:55:9d:1e:0a:fc:7c:17:71:63:ef:
7f:19:3a:0a:39:60:5b:0c:33:35:cf:0f:4e:41:cd:
f9:bf:b1:cf:c5:fd:50:65:2a:d4:0c:ef:82:56:97:
8e:d8:36:7b:c2:f9:dd:4e:3a:c9:2c:09:60:e3:78:
98:4e:9d:a6:97:48:d6:24:56:36:cc:96:7c:f4:f4:
af:ef:74:d7:a0:cf:1c:f8:c9:55:c9:21:53:cd:02:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:27:2E:53:EA:39:51:A9:6A:53:44:C4:1A:6A:DA:A3:87:CD:5D
X509v3 Authority Key Identifier:
keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cd:ec:e1:fd:4d:49:f7:f9:8f:00:db:3b:89:d7:45:1c:ae:
56:54:87:b1:ee:e6:2a:af:8e:2f:59:4a:b0:a7:c6:6c:47:bd:
63:74:32:99:9c:b7:53:f8:3e:a4:8f:9a:67:9b:3e:f4:47:18:
bb:d2:d9:04:af:f7:c6:52:0b:0f:5a:97:76:76:12:c4:85:b2:
f0:27:57:84:8e:51:82:75:d2:9e:74:a3:47:d8:38:eb:5c:f4:
93:48:3a:03:7f:0b:85:26:38:17:01:54:82:c8:42:a2:42:01:
f4:50:7f:c7:86:f1:2c:ff:6c:26:32:25:b6:85:a3:f3:06:7c:
1c:b2:47:6a:49:4b:85:7a:3f:b4:68:f5:60:23:96:39:46:8b:
99:2f:15:8b:b0:6c:1c:b7:f3:85:a7:c4:2c:82:43:b6:ec:c8:
25:04:b7:c7:ad:58:f6:84:6b:9f:9c:97:08:52:b3:f5:89:11:
64:8a:85:b6:17:3b:1d:7d:9b:af:e4:6b:3c:2c:d7:62:9b:08:
08:c4:10:8d:25:9c:6b:c3:7e:0d:19:ea:a2:87:28:77:7c:24:
54:53:4b:85:18:2f:b5:48:00:1f:66:c7:8c:45:32:e7:3a:74:
9d:c2:6d:e7:b4:3c:97:5a:df:8f:78:ac:b8:c4:62:37:58:e1:
6c:df:bf:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURFlpZmHJ8DZFibFUlL8Aj/GLDpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRB
NzhCOEM5MjAeFw0yNjA1MTIxODU0MzhaFw0yNjA1MTMyMDU1MzhaMDMxMTAvBgNV
BAMTKEY0MkQyNzJFNTNFQTM5NTFBOTZBNTM0NEM0MUE2QURBQTM4N0NENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczczhiKNSc72Ol5SaEwnV6Qji
d58WUmNZb4MuoEtr9Hw3gd7Rr0UxHGc+DTBV8i1VbDW1SXfJyuCxIR0Ikm5qYbO/
1wDihvtBbD8epJ08CubB9Ad+rt36xe8Hn5yGxAIngGidjBp63q22xUUDp1fapUFD
vfh03H8ZGX0ziAAkqP4mxwl6R9UQZfBcjHTKqS18iT3uPqaQwOUgDR5BSMrIiqu4
2BTpxyzGVZ0eCvx8F3Fj738ZOgo5YFsMMzXPD05Bzfm/sc/F/VBlKtQM74JWl47Y
NnvC+d1OOsksCWDjeJhOnaaXSNYkVjbMlnz09K/vdNegzxz4yVXJIVPNAgvXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9C0nLlPqOVGpalNExBpq2qOHzV0wHwYDVR0j
BBgwFoAUiosVXoM1wChUnSv2tUwl5KeLjJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjA1MjBiNTQtM2JhNy00NjMxLWFmMGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4
MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRBNzhCOEM5Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QThCMTU1RTgzMzVDMDI4NTQ5RDJCRjZCNTRDMjVFNEE3OEI4
QzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm
MGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1
RTRBNzhCOEM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABnN7OH9TUn3+Y8A2zuJ10UcrlZUh7Hu5iqv
ji9ZSrCnxmxHvWN0Mpmct1P4PqSPmmebPvRHGLvS2QSv98ZSCw9al3Z2EsSFsvAn
V4SOUYJ10p50o0fYOOtc9JNIOgN/C4UmOBcBVILIQqJCAfRQf8eG8Sz/bCYyJbaF
o/MGfByyR2pJS4V6P7Ro9WAjljlGi5kvFYuwbBy384WnxCyCQ7bsyCUEt8etWPaE
a5+clwhSs/WJEWSKhbYXOx19m6/kazws12KbCAjEEI0lnGvDfg0Z6qKHKHd8JFRT
S4UYL7VIAB9mx4xFMuc6dJ3Cbee0PJda3494rLjEYjdY4Wzfv/I=
-----END CERTIFICATE-----
Generated at Wed May 13 05:57:49 2026 by rpki-client