
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft
File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json)
Hash identifier: VnNQJGxaqceVGmztWb3Ncfo1KemJ4AhsMGDhXQi+yao=
Subject key identifier: 27:02:DF:B4:E8:EB:41:54:F0:09:E2:6B:ED:83:8C:E7:5A:5F:EC:C1
Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB
Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB
Certificate serial: 2C5A94988868DCE5CA9E86C445B1E09C311126AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 19:54:24 +0000
Manifest this update: Thu 23 Jul 2026 19:49:24 +0000
Manifest next update: Fri 24 Jul 2026 22:01:24 +0000
Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=)
2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: 3aMOHrtnInp4ethLZMGEVvsrS8vJAROcYaJRylf7jB4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl
rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:94:98:88:68:dc:e5:ca:9e:86:c4:45:b1:e0:9c:31:11:26:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB
Validity
Not Before: Jul 23 19:49:24 2026 GMT
Not After : Jul 24 22:01:24 2026 GMT
Subject: CN=2702DFB4E8EB4154F009E26BED838CE75A5FECC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:aa:5e:fd:3c:62:53:96:8e:2b:e2:03:bd:
72:e4:40:b5:09:54:34:f4:70:16:69:c6:4a:ff:b0:
23:ac:aa:72:3d:b0:0c:17:83:d6:2c:37:2c:33:2f:
fa:62:ad:ac:69:11:99:6c:5e:21:65:d6:2f:64:8d:
ff:9c:2e:85:3e:38:8f:a7:d4:b9:44:d9:c3:1e:88:
f3:40:10:96:16:2d:5e:3c:bb:3c:fd:4b:f8:54:18:
15:83:f7:73:f3:b3:cd:dc:4a:dd:8a:1e:8c:d2:3a:
71:8a:b2:31:69:4b:cc:cf:93:b8:f2:87:d8:c0:c5:
df:d0:1e:4e:53:a9:a3:ea:25:45:ea:8b:a2:89:2e:
6e:ac:5e:08:c1:a6:9a:01:00:70:d9:99:d6:5f:0e:
dd:11:f8:d0:80:6e:45:58:04:1e:42:ce:f9:bc:9b:
07:1e:60:ea:5e:65:78:e8:3a:bf:fa:f7:72:8f:50:
00:c8:0e:53:08:05:d7:97:bb:4f:97:ac:bd:e9:dd:
68:b0:2f:1f:aa:8b:a3:92:ad:a0:8a:9b:30:53:70:
70:b2:06:ec:d6:9e:3f:d8:58:3c:22:38:cf:b7:a2:
3f:06:75:5e:cf:e5:32:4b:40:2f:14:23:a7:94:f9:
b5:6f:09:d3:30:d1:76:8a:a9:0e:11:32:ea:38:50:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:DF:B4:E8:EB:41:54:F0:09:E2:6B:ED:83:8C:E7:5A:5F:EC:C1
X509v3 Authority Key Identifier:
keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:99:53:2f:40:e0:50:92:c2:7a:cd:d1:02:36:27:a6:6e:
c3:b6:29:13:64:1e:af:59:df:a9:6d:0e:c0:4a:4a:4c:30:c1:
1d:67:1f:66:f0:a3:23:c8:59:da:a6:93:f7:88:16:8b:ec:7b:
b2:7b:d1:d2:c1:b9:bc:d1:a1:ac:d9:7d:0d:e0:f1:ab:1c:85:
69:93:77:20:81:29:23:63:b0:1a:a6:63:6b:85:26:b2:f6:47:
a0:97:6a:12:2b:83:43:3c:a6:83:17:5f:f3:80:b6:1d:e4:51:
1f:33:90:64:1e:ae:08:1d:4e:9d:35:81:af:f8:bd:0b:50:d6:
53:58:2c:6d:05:41:19:b9:bb:3c:e5:76:df:a5:78:46:c6:de:
12:fb:9b:39:0f:f4:65:e2:d4:d6:0d:60:64:dd:5e:84:8e:f4:
30:b3:49:b0:0c:75:ac:07:0e:59:e5:3e:af:b9:3a:f8:66:db:
2a:20:2d:f8:85:d1:67:d8:0b:6a:34:54:de:a1:69:43:89:cd:
55:52:a1:85:e1:c7:b8:d6:6f:78:61:b8:b1:6c:1a:01:e5:e8:
b9:f1:9d:6e:ac:bf:26:27:b7:4c:b7:f9:8d:6d:a6:82:a6:4d:
5b:f4:8a:4f:2b:c6:69:70:c9:0d:56:90:4b:96:88:9f:7e:ee:
d5:17:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:42 2026 by rpki-client