
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
File: 8B18B819BC010B4A4EC66777543486E34AF52ED4.mft (raw, json)
Hash identifier: GB9JrWZYsSn156OVnkNwdOqvr8G85Vqud9GFPoyRiho=
Subject key identifier: CC:B1:74:13:CB:AB:73:52:34:8C:F7:63:38:75:4D:96:8D:1A:FF:C0
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Certificate issuer: /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial: 0449FB9B6CB3527C899578F81422A28A3ED117D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:54:28 +0000
Manifest this update: Tue 16 Jun 2026 20:49:28 +0000
Manifest next update: Wed 17 Jun 2026 23:20:28 +0000
Files and hashes: 1: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=)
2: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: COlbyHboqjdr0Rxi+nWQW3DOPTwsTgMlnilTtD4HKm4=)
3: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: AyZ67OXVVcRP+SaexkcDHK81T3la7ye6jL1yJZbUj4M=)
4: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I=)
5: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: RnWj7aZjC6B4VrPGo8x16jqEQ5V8whLA8BJvLlw1vbg=)
6: 8B18B819BC010B4A4EC66777543486E34AF52ED4.crl (hash: hhQZsg3F5fKZ1BgVvVF47rZIL+0abwaWswnn2Rs98Dk=)
7: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: xAnrR5oDPaIS2eOvjAIZMGHwwrAtXCAYZrjZS6iBlJs=)
8: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: djWo0EMecCkqgPGbJNZ3i1Hzh/Gf4zrbm7OL5FtozEI=)
9: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=)
10: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: h3y36nWPp14vw0klmr63vNHy0YgCfjJ+L67ACCmkzyQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:49:fb:9b:6c:b3:52:7c:89:95:78:f8:14:22:a2:8a:3e:d1:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Validity
Not Before: Jun 16 20:49:28 2026 GMT
Not After : Jun 17 23:20:28 2026 GMT
Subject: CN=CCB17413CBAB7352348CF76338754D968D1AFFC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:e4:43:cf:3e:19:4e:e8:bb:37:11:6a:53:
5c:19:99:d1:03:be:d9:b4:1b:5f:d9:96:23:3b:34:
01:0c:60:9f:6d:a5:ce:63:c5:05:82:d1:6f:66:81:
0f:58:f5:aa:72:b4:9e:b1:31:d7:a3:b7:80:80:39:
37:59:43:43:3d:9f:80:82:ec:ea:1b:05:8d:df:04:
39:a6:68:5d:82:c1:4b:57:81:0b:23:27:46:62:32:
5b:5f:68:ce:4c:96:98:bf:6d:f0:b4:ad:a0:fe:0e:
6c:c6:72:56:0d:a4:f5:29:29:1e:01:6a:a8:c0:b7:
fc:73:79:74:b0:66:67:5d:75:95:d2:35:87:6d:69:
24:35:fa:61:8b:8d:b0:87:e0:52:2c:06:03:b5:29:
e5:3a:cc:70:18:ca:c9:e4:98:9f:8f:87:e3:31:59:
62:dd:c8:46:c0:1a:5a:94:23:32:41:e3:35:94:74:
6a:7a:29:e9:d7:6c:8f:98:73:ce:26:e1:14:e4:44:
71:32:03:89:16:ea:eb:80:f5:ec:70:8b:27:53:b0:
8f:da:5f:f6:5c:1d:1e:02:22:f9:a8:3f:ac:04:37:
90:09:85:78:ce:75:52:b3:a1:55:bb:99:b4:13:eb:
ac:e1:63:b9:fd:bc:f5:c0:82:fb:ba:d2:2d:e4:66:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:74:13:CB:AB:73:52:34:8C:F7:63:38:75:4D:96:8D:1A:FF:C0
X509v3 Authority Key Identifier:
keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0c:cb:38:9b:93:81:1b:af:b9:80:66:64:a3:32:19:25:b0:
e8:60:17:28:8d:17:76:3c:c0:01:49:c7:88:ac:27:1e:90:61:
3b:39:e9:3e:5d:95:71:8e:64:71:f8:4a:04:8c:58:21:38:57:
49:f8:09:ba:0f:d9:ea:c8:9e:57:38:e1:42:ed:89:8e:b8:3c:
41:c9:ef:9e:f6:b1:9d:91:ae:c4:20:83:4e:15:da:30:6c:93:
c5:a9:9a:61:54:f1:25:7c:cb:8c:45:3e:2e:77:39:c1:45:af:
3f:2f:0a:e6:65:f5:1f:5f:9c:68:fb:03:b4:10:06:0c:39:d8:
e3:a4:79:2c:92:56:25:5a:a3:fd:75:a7:98:78:c3:b3:5e:93:
51:de:a2:47:c2:83:b8:e5:a7:ae:94:59:6a:44:57:42:25:bd:
67:2f:ee:89:de:20:65:2d:74:1c:a2:9b:c7:dd:cc:a1:e2:f5:
f4:ca:81:ad:a2:5d:81:43:88:8a:6c:8c:4c:c7:77:46:a2:83:
51:12:08:c4:5f:3a:37:99:5b:f1:66:74:93:fb:63:db:66:81:
2b:a4:0b:5e:0b:da:95:9d:ee:1a:6d:d9:53:ce:4f:18:c0:58:
22:b6:a4:76:3d:c4:47:51:07:1f:da:ac:00:6c:29:17:f7:6c:
4f:5d:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:54 2026 by rpki-client