
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json)
Hash identifier: kc7JCdfc06lUxtvOzOAp7LuPTMo4PugtZybf+Nly+UQ=
Subject key identifier: 4D:E7:BB:37:2A:8C:9A:10:2E:2C:D1:42:43:DE:0A:F0:79:C1:E6:D2
Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Certificate serial: 60AE8CD6E5676032F159F819F04C81AB57B447A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
Manifest number: 0553
Signing time: Sun 01 Mar 2026 12:21:19 +0000
Manifest this update: Sun 01 Mar 2026 12:16:19 +0000
Manifest next update: Wed 04 Mar 2026 22:32:19 +0000
Files and hashes: 1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: 92QJjc16g1c4eg9kvUSis/rqkMJg6iTrISPqcXSukuM=)
2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ae:8c:d6:e5:67:60:32:f1:59:f8:19:f0:4c:81:ab:57:b4:47:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Validity
Not Before: Mar 1 12:16:19 2026 GMT
Not After : Mar 4 22:32:19 2026 GMT
Subject: CN=4DE7BB372A8C9A102E2CD14243DE0AF079C1E6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:78:28:dd:3b:17:7d:38:6a:51:70:5f:c2:
d1:64:48:e2:c7:46:94:a9:fe:81:79:de:45:ab:f1:
1e:58:2f:58:12:4a:1b:ec:9f:bd:87:9b:00:b2:32:
b7:27:6d:ff:fb:0e:f7:1d:cf:af:31:da:cd:2c:cf:
2e:aa:bf:ee:e1:f4:2f:1a:c4:27:19:25:b0:db:78:
7e:73:15:cb:a4:43:85:52:62:b7:df:79:94:e7:01:
03:91:23:3a:e2:18:74:54:34:93:17:dc:22:01:1d:
4e:c6:91:27:26:39:71:08:92:45:a5:16:4e:dc:4f:
52:0b:a9:d0:b3:e5:e9:db:71:ab:ac:ea:3d:b5:d0:
a6:f7:63:62:33:2a:47:a8:97:2a:08:df:7f:28:ca:
06:2b:fd:ca:c5:50:ba:1d:63:90:35:1d:ca:dc:9c:
2c:39:16:d4:d8:2c:04:57:73:2c:7c:00:a0:d0:a1:
6b:73:66:1b:4a:f1:63:70:8b:69:1f:e3:d4:5c:34:
03:fb:85:da:8f:03:07:c7:58:95:ef:e0:ae:08:5b:
ec:5e:d6:4d:1d:44:e6:1b:b2:4f:31:ae:83:10:45:
cc:15:7c:16:e3:38:c4:f2:7c:50:cd:04:bc:12:36:
96:69:ef:b5:93:af:df:1d:68:ae:dc:7b:d2:a9:bc:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:BB:37:2A:8C:9A:10:2E:2C:D1:42:43:DE:0A:F0:79:C1:E6:D2
X509v3 Authority Key Identifier:
keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:eb:62:12:c9:b3:4d:71:a3:2e:0f:d1:3e:46:53:c1:a1:
31:77:75:ac:7f:38:93:b5:9d:d9:00:65:41:f3:14:26:34:bb:
61:a2:92:cc:96:93:fe:18:a8:21:69:bb:80:fc:71:d2:5a:39:
d6:0b:ab:00:37:44:3e:08:cf:2f:bf:cd:5e:b0:1f:9b:fb:c1:
2f:9a:6a:d3:81:79:5f:ae:35:e7:a8:6e:97:4c:9b:aa:33:e3:
65:68:c3:6c:2a:2b:50:8f:f4:0f:b0:02:85:d2:53:ed:41:af:
1d:63:30:ba:5e:54:fd:0b:e8:43:d0:f9:45:d5:e1:06:68:d2:
13:26:94:2e:9d:c2:bb:9d:fe:38:b6:69:b4:2c:04:f6:c6:77:
71:69:69:c8:56:43:e4:cd:18:2f:c8:17:ea:88:3c:f0:1a:15:
07:a2:c8:ec:a9:05:01:24:3e:ba:73:19:aa:30:b6:d0:78:0b:
85:ab:0a:88:92:a0:1c:f7:98:7b:e6:61:68:2c:45:89:00:f5:
e2:5b:72:b8:4b:9b:e4:48:69:25:25:42:b5:24:ea:62:68:f2:
16:73:f2:44:67:c8:0a:67:7c:72:f4:78:12:08:d6:be:45:d3:
11:00:34:3e:0d:b1:f5:df:b8:ed:98:6d:e0:44:6e:b4:3c:e8:
c1:22:f1:a8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYK6M1uVnYDLxWfgZ8EyBq1e0R6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB
RjEzNEM3QTAeFw0yNjAzMDExMjE2MTlaFw0yNjAzMDQyMjMyMTlaMDMxMTAvBgNV
BAMTKDRERTdCQjM3MkE4QzlBMTAyRTJDRDE0MjQzREUwQUYwNzlDMUU2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZG3go3TsXfThqUXBfwtFkSOLH
RpSp/oF53kWr8R5YL1gSShvsn72HmwCyMrcnbf/7Dvcdz68x2s0szy6qv+7h9C8a
xCcZJbDbeH5zFcukQ4VSYrffeZTnAQORIzriGHRUNJMX3CIBHU7GkScmOXEIkkWl
Fk7cT1ILqdCz5enbcaus6j210Kb3Y2IzKkeolyoI338oygYr/crFULodY5A1Hcrc
nCw5FtTYLARXcyx8AKDQoWtzZhtK8WNwi2kf49RcNAP7hdqPAwfHWJXv4K4IW+xe
1k0dROYbsk8xroMQRcwVfBbjOMTyfFDNBLwSNpZp77WTr98daK7ce9KpvHyvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTee7NyqMmhAuLNFCQ94K8HnB5tIwHwYDVR0j
BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy
MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz
NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm
NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy
QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADg+62ISybNNcaMuD9E+RlPBoTF3dax/OJO1
ndkAZUHzFCY0u2GiksyWk/4YqCFpu4D8cdJaOdYLqwA3RD4Izy+/zV6wH5v7wS+a
atOBeV+uNeeobpdMm6oz42Vow2wqK1CP9A+wAoXSU+1Brx1jMLpeVP0L6EPQ+UXV
4QZo0hMmlC6dwrud/ji2abQsBPbGd3FpachWQ+TNGC/IF+qIPPAaFQeiyOypBQEk
PrpzGaowttB4C4WrCoiSoBz3mHvmYWgsRYkA9eJbcrhLm+RIaSUlQrUk6mJo8hZz
8kRnyApnfHL0eBII1r5F0xEAND4NsfXfuO2YbeBEbrQ86MEi8ag=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:51 2026 by rpki-client