
$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft
File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json)
Hash identifier: hzBoDITxO4AdnRayt3eK6PAPAgf2ltMYJMbw0ecBKdw=
Subject key identifier: 7F:98:F9:43:28:4D:2B:45:3A:9F:2D:CB:94:35:DF:3A:6A:31:B7:BD
Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC
Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC
Certificate serial: 47D0DDA90A269E65D4C2B32B8EA4427E1D97ACB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 11:04:15 +0000
Manifest this update: Wed 29 Jul 2026 10:59:15 +0000
Manifest next update: Thu 30 Jul 2026 11:56:15 +0000
Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=)
2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=)
3: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: rRgxgLzvF3dVco0DwGD1Qoa+XF7H+9iix8TZlC3yFjg=)
4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl
rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d0:dd:a9:0a:26:9e:65:d4:c2:b3:2b:8e:a4:42:7e:1d:97:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC
Validity
Not Before: Jul 29 10:59:15 2026 GMT
Not After : Jul 30 11:56:15 2026 GMT
Subject: CN=7F98F943284D2B453A9F2DCB9435DF3A6A31B7BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:04:65:8e:ee:4b:7f:23:20:85:19:32:83:
54:b3:16:bd:2b:81:f0:44:65:7b:b0:07:6f:e0:7a:
ab:33:cb:03:50:12:87:f2:60:5c:ab:5a:b1:01:07:
19:55:2e:f4:df:10:24:3a:ac:a4:e2:b2:b1:9b:8f:
6e:6a:b1:d0:cc:09:92:21:54:e0:73:40:72:c1:ec:
00:5f:4b:4e:73:9d:0c:47:af:70:69:9d:60:4e:a6:
6f:54:12:fc:4c:8a:d9:03:2a:48:c5:5b:2b:ae:8b:
7d:aa:bb:20:70:3b:af:72:a2:b8:f3:38:b8:53:81:
5f:4f:d1:f7:27:b6:b7:a3:ea:ca:b7:d3:f7:8e:de:
29:7b:13:17:26:a0:a7:5c:9c:61:06:6a:ba:cd:e0:
f0:4b:6c:e4:72:d7:e2:54:9c:f0:75:6a:6d:4b:2d:
7e:eb:6f:77:3b:18:9c:3e:a8:b5:33:41:5a:ed:0b:
79:07:54:8b:e6:cd:b2:49:5f:85:34:2f:3c:ed:47:
b6:92:9a:36:3f:35:17:0a:1e:30:d0:ba:36:4d:40:
47:1d:3d:f7:27:63:a2:5e:90:63:d6:e2:2c:7a:af:
33:3c:c8:79:e5:97:05:20:e9:84:3d:77:c3:9c:1e:
69:2c:c2:df:09:d1:37:ae:5d:12:09:63:44:5b:cf:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:98:F9:43:28:4D:2B:45:3A:9F:2D:CB:94:35:DF:3A:6A:31:B7:BD
X509v3 Authority Key Identifier:
keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b6:ab:21:7c:8f:1d:1f:5f:67:83:98:de:1f:54:74:04:ec:
e6:5a:d4:fb:e3:6e:16:20:e4:4e:95:45:a9:5c:de:9d:39:a6:
de:8d:f9:25:8d:eb:be:1a:ad:a6:7b:01:44:23:76:3e:6f:36:
2d:e2:34:af:db:9f:92:51:4b:ec:27:ba:7f:cb:3a:9c:d7:0f:
d9:99:96:ef:5d:1c:84:fe:f9:bb:01:36:85:f7:80:9a:e3:8b:
ad:84:d8:6f:f8:33:32:65:31:00:6c:30:f5:8b:d9:a9:58:38:
7c:e3:aa:59:6b:69:2c:65:18:22:44:7f:53:89:64:49:9f:e0:
ae:a1:4e:38:d6:c5:09:3e:53:3f:87:0d:3b:4c:81:86:14:38:
be:80:7e:f9:18:52:3c:06:d6:54:d5:96:a8:45:fc:f6:66:f7:
24:90:38:7c:cb:80:c4:6a:20:41:94:60:e4:40:b3:91:31:61:
df:06:72:45:0a:9d:73:51:65:78:0e:62:da:63:d7:e1:62:15:
37:73:28:92:ed:d3:e7:5c:5d:44:4e:c4:60:c8:52:98:b9:c0:
ec:3c:c3:4e:87:c5:ae:5c:43:d5:f3:39:2c:c4:97:67:55:71:
3b:d8:1d:22:76:8b:68:6a:cf:24:d9:2f:8f:0d:cd:29:f8:20:
81:3e:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:49:41 2026 by rpki-client