
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File: B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier: X+Uv2x8gf+Qox3Wkpz7oRex9cqN95xYt0qcE1fh23LU=
Subject key identifier: 6B:8D:7F:5C:55:09:3D:5F:D0:DB:D7:A5:FE:90:C5:78:05:E3:2A:B9
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer: /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial: 5CA181B03B5DB4119A340E3D9C5BD44DA6772CF8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number: C3
Signing time: Tue 22 Sep 2026 08:21:59 +0000
Manifest this update: Tue 22 Sep 2026 08:16:59 +0000
Manifest next update: Wed 23 Sep 2026 11:03:59 +0000
Files and hashes: 1: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
2: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
3: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: WHHGz0lN7gw3oKB9LpxX34RL2IYDivZf0vDfUqWptwU=)
4: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
5: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
6: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
7: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
8: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
9: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
10: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
11: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
12: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
13: 3130332e31302e36302e302f32342d3234203d3e203535363538.roa (hash: WPTgJgBZn9zU0LYC1z2CqvjiQ+vcOey/7diMUlVA1oM=)
14: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 11:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a1:81:b0:3b:5d:b4:11:9a:34:0e:3d:9c:5b:d4:4d:a6:77:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Validity
Not Before: Sep 22 08:16:59 2026 GMT
Not After : Sep 23 11:03:59 2026 GMT
Subject: CN=6B8D7F5C55093D5FD0DBD7A5FE90C57805E32AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:66:3a:7d:11:c1:5b:30:62:20:cb:01:2a:
b6:3c:22:db:b5:6c:53:02:a6:9e:ea:04:7c:0b:d8:
1c:ae:75:9f:0b:22:cd:7d:2b:59:53:8a:99:47:7a:
25:92:a4:78:d4:50:1f:47:1e:a7:4b:6d:12:9e:cb:
4a:1f:af:e4:3d:1d:28:86:c2:ed:c9:8e:39:c1:b9:
ba:46:e1:65:bf:d4:60:f8:66:b6:67:dd:eb:60:a0:
9c:d9:ee:fb:f8:10:90:3a:43:35:c6:e1:0e:33:ad:
29:56:c1:e5:9b:72:3b:38:3d:9f:74:a7:1e:3b:75:
d1:03:33:e0:d4:c2:53:f3:b9:f6:3c:12:58:75:84:
07:eb:8e:13:c2:36:0f:70:e3:f1:92:9b:ec:c0:60:
16:f8:54:06:04:22:31:22:c6:27:5a:ad:d5:7f:10:
b2:67:a3:42:5c:73:e9:12:04:a9:f8:6a:7a:5c:78:
56:cf:e0:8c:54:67:82:4c:2c:58:ec:90:7c:b3:a0:
49:22:b1:96:6f:62:de:8e:3a:ae:a2:4b:c2:de:f5:
fc:80:14:04:e5:2d:5b:b9:c6:ab:00:66:69:37:0f:
c4:48:75:ea:be:44:e0:cf:fe:5c:fd:aa:9e:84:39:
b7:b8:53:e7:fc:27:a9:7c:73:bf:92:25:96:dd:4e:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:7F:5C:55:09:3D:5F:D0:DB:D7:A5:FE:90:C5:78:05:E3:2A:B9
X509v3 Authority Key Identifier:
keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b3:68:3a:89:82:ec:7d:af:4e:7c:0e:24:72:be:2c:27:5c:
2b:74:d9:7d:94:a8:a7:b7:d7:c1:a4:ab:6b:49:7c:18:54:94:
d8:37:07:d4:70:f2:7f:7f:33:16:2f:9d:b4:3d:87:c6:a9:a8:
c4:a4:04:45:a6:dc:89:39:e0:c8:87:80:dc:60:82:b8:de:03:
5a:6b:06:5e:d8:eb:6c:f2:53:85:54:20:5a:f3:35:3f:32:ff:
ec:43:ad:36:3c:eb:de:87:ee:94:35:c8:0e:50:7b:5c:84:f1:
74:37:cf:83:9b:b8:71:a6:d6:78:2e:3d:f3:02:b1:e2:4e:f6:
ce:2d:c7:63:00:81:9a:c6:f8:22:7c:9d:73:a0:41:77:f7:9f:
10:14:be:26:98:ed:37:4f:dc:cd:99:95:81:75:cd:36:c9:4e:
7c:74:f4:85:c8:e6:f9:0f:0d:3d:46:f2:f0:d3:70:e3:ee:ff:
ad:59:b1:85:0e:38:b9:c1:6e:82:cc:1d:9b:ee:17:7a:ae:7c:
e6:c7:91:3f:b9:43:cb:16:50:c7:03:40:34:fc:97:61:9f:4f:
03:df:73:5e:42:1f:dd:5d:16:a1:47:66:7b:3a:74:a4:66:ef:
f1:1c:7c:79:20:30:ab:62:26:71:f4:70:9e:f9:21:b4:05:c2:
82:45:09:47
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXKGBsDtdtBGaNA49nFvUTaZ3LPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5
MjFDQjBFNzAeFw0yNjA5MjIwODE2NTlaFw0yNjA5MjMxMTAzNTlaMDMxMTAvBgNV
BAMTKDZCOEQ3RjVDNTUwOTNENUZEMERCRDdBNUZFOTBDNTc4MDVFMzJBQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlWY6fRHBWzBiIMsBKrY8Itu1
bFMCpp7qBHwL2ByudZ8LIs19K1lTiplHeiWSpHjUUB9HHqdLbRKey0ofr+Q9HSiG
wu3JjjnBubpG4WW/1GD4ZrZn3etgoJzZ7vv4EJA6QzXG4Q4zrSlWweWbcjs4PZ90
px47ddEDM+DUwlPzufY8Elh1hAfrjhPCNg9w4/GSm+zAYBb4VAYEIjEixidardV/
ELJno0Jcc+kSBKn4anpceFbP4IxUZ4JMLFjskHyzoEkisZZvYt6OOq6iS8Le9fyA
FATlLVu5xqsAZmk3D8RIdeq+RODP/lz9qp6EObe4U+f8J6l8c7+SJZbdTlyHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUa41/XFUJPV/Q29el/pDFeAXjKrkwHwYDVR0j
BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw
RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC
MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz
ZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAz
MjY5MjFDQjBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL2zaDqJgux9r058DiRyviwnXCt02X2UqKe3
18Gkq2tJfBhUlNg3B9Rw8n9/MxYvnbQ9h8apqMSkBEWm3Ik54MiHgNxggrjeA1pr
Bl7Y62zyU4VUIFrzNT8y/+xDrTY8696H7pQ1yA5Qe1yE8XQ3z4ObuHGm1nguPfMC
seJO9s4tx2MAgZrG+CJ8nXOgQXf3nxAUviaY7TdP3M2ZlYF1zTbJTnx09IXI5vkP
DT1G8vDTcOPu/61ZsYUOOLnBboLMHZvuF3qufObHkT+5Q8sWUMcDQDT8l2GfTwPf
c15CH91dFqFHZns6dKRm7/EcfHkgMKtiJnH0cJ75IbQFwoJFCUc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:26:58 2026 by rpki-client