
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json)
Hash identifier: JL+pB93FzHjpAO1h8RzDI/wyzW4OtYnHoAKgtSL4dq4=
Subject key identifier: C4:4C:D3:EC:0F:AD:BF:F5:FA:A8:7C:4E:F8:E9:9A:1C:B2:2E:72:2D
Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Certificate serial: 51B004D94FC1DEE1C96241FD88D50CB5BAF76EAC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
Manifest number: E0
Signing time: Thu 16 Apr 2026 05:41:10 +0000
Manifest this update: Thu 16 Apr 2026 05:36:10 +0000
Manifest next update: Sun 19 Apr 2026 14:09:10 +0000
Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=)
2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: 6MRMEXTODHlgU4U8KLwccUEYlnJFQla7k+f42WoEAPU=)
3: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 14:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b0:04:d9:4f:c1:de:e1:c9:62:41:fd:88:d5:0c:b5:ba:f7:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Validity
Not Before: Apr 16 05:36:10 2026 GMT
Not After : Apr 19 14:09:10 2026 GMT
Subject: CN=C44CD3EC0FADBFF5FAA87C4EF8E99A1CB22E722D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:bb:02:18:e6:a4:d5:f5:3b:aa:9e:e8:a3:
6f:a5:11:51:e8:27:84:2a:2f:a6:f4:01:bc:86:d4:
dc:28:a1:8b:ed:48:eb:45:dd:a9:07:cd:fb:e1:77:
f5:f5:eb:81:77:6b:c0:cd:38:54:f5:4d:c6:e1:9d:
a6:40:7f:03:9e:e2:6e:af:ff:08:be:a4:e5:f0:aa:
f2:70:d1:56:1b:bd:11:de:1d:97:96:de:f7:b4:15:
e7:32:d6:e6:77:65:34:cd:0d:98:15:4d:7a:53:68:
8e:b5:35:df:72:6b:31:35:23:b9:b3:0e:08:2c:06:
ac:e0:a1:8a:a0:6e:5d:48:47:8e:ee:1d:f5:0d:1b:
c0:a3:55:6d:eb:1d:3c:77:03:3f:fb:f0:76:ab:8d:
e3:8e:4b:88:83:a3:9d:02:12:34:6a:cc:27:86:f2:
cd:08:37:37:a6:f7:9b:de:01:89:ca:62:76:a3:4d:
84:6e:38:1d:25:73:cd:e8:a9:13:00:66:16:0e:1b:
b0:8b:99:8b:e4:59:9d:80:24:5d:57:04:75:2f:e9:
3b:16:b5:e2:33:82:88:ff:3c:b3:ce:a3:1c:94:d2:
12:29:dd:24:05:b3:46:94:7c:c9:b7:79:f4:42:7e:
56:00:26:e7:6b:83:e9:f7:a2:d5:e3:d7:9a:55:47:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:D3:EC:0F:AD:BF:F5:FA:A8:7C:4E:F8:E9:9A:1C:B2:2E:72:2D
X509v3 Authority Key Identifier:
keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b1:62:54:3b:f0:9e:df:65:81:e5:10:30:83:38:c7:87:70:
c2:ea:6e:6a:10:52:2d:d8:39:f1:7b:f8:01:b0:ea:14:46:0b:
71:13:81:d4:db:80:c2:53:ad:7a:b1:97:7c:d1:2e:76:0e:87:
7e:78:15:2e:0f:c7:4a:b2:a9:9b:e4:83:81:c3:f1:f3:58:5c:
95:a6:e6:2c:4a:b7:da:4b:e0:c1:ac:43:8f:85:47:3a:cf:d3:
f0:b8:e8:25:4e:44:02:ed:12:5c:e7:66:86:57:df:91:30:42:
25:e6:3d:e9:fe:3f:ee:e7:f0:63:21:aa:64:9d:b0:f3:0a:da:
97:bc:04:ec:d4:2b:97:3f:6c:04:cc:1b:23:49:61:e9:8e:63:
31:50:83:2f:33:ad:38:fd:f4:e5:d2:e0:9a:6b:f9:07:0f:f8:
75:af:73:f8:d5:2e:e2:99:1d:23:8d:6b:31:a4:95:e1:53:48:
12:23:9e:be:17:e8:b5:cc:e9:89:d2:59:a9:b7:de:38:db:60:
3e:5b:08:19:1b:a6:9a:70:c5:29:18:9d:e4:81:f8:85:97:ad:
2d:68:26:6c:fa:2d:df:2f:5a:b5:8d:2b:c9:70:c6:52:da:e6:
48:ab:f2:28:5d:5e:b8:57:ac:0c:5c:4e:25:dc:9c:cc:df:64:
82:fd:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:59 2026 by rpki-client