
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft
File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json)
Hash identifier: TsVLKZT2+qpjynHjhcgFZa6KvgQ6JcwNz/94ggucfoc=
Subject key identifier: 2E:7D:BF:8C:6B:51:15:42:1A:B8:C7:F9:01:9A:65:DE:B9:C3:CE:9B
Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF
Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF
Certificate serial: 2835EFDED0C6556EFE20B51AA946EFED76EA4CE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 09:04:00 +0000
Manifest this update: Wed 17 Jun 2026 08:59:00 +0000
Manifest next update: Thu 18 Jun 2026 12:40:00 +0000
Files and hashes: 1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=)
2: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: nbvDTgOGYhLiBAFGAO7xPGQEN14WVSBy7HLDgBHzFbc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl
rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:35:ef:de:d0:c6:55:6e:fe:20:b5:1a:a9:46:ef:ed:76:ea:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF
Validity
Not Before: Jun 17 08:59:00 2026 GMT
Not After : Jun 18 12:40:00 2026 GMT
Subject: CN=2E7DBF8C6B5115421AB8C7F9019A65DEB9C3CE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:77:1b:50:b0:78:5f:b3:d8:74:a8:12:a6:
ef:9e:65:9b:4b:14:b7:1e:e9:4a:e7:12:57:3e:37:
88:cd:6f:0c:6f:e7:39:67:3a:b6:c5:5e:7a:0d:13:
37:a3:66:e3:51:c7:e0:21:da:b3:8b:56:5d:01:cf:
27:38:7f:5c:65:b9:8b:80:9b:14:aa:e7:22:d9:e3:
e7:90:17:ae:7b:f2:fd:71:7a:df:4b:b6:b0:4c:1b:
80:cc:56:00:a0:fd:55:a1:ba:82:21:27:bb:6a:b3:
63:17:69:2b:4c:48:06:39:98:5d:3d:ad:08:79:c8:
51:ed:f0:82:cd:57:99:41:06:1c:a2:bf:0f:08:1c:
b7:8c:1c:6a:47:bf:f2:c0:fc:3b:bc:59:06:a2:03:
95:8a:18:d4:10:db:cd:c1:f3:e3:0d:d6:7d:ed:c6:
68:7b:f2:c7:b9:a3:13:13:26:5c:80:7e:7c:c4:12:
e2:09:9b:49:df:07:82:ce:80:c8:9f:3b:23:e0:e8:
28:b2:1b:a9:a1:0f:c3:8d:10:ec:02:8d:54:bd:f4:
dc:af:37:ba:b8:4a:46:58:99:35:fa:e7:7d:12:2e:
b2:9c:02:dd:4f:7d:0d:23:f8:a9:88:49:a5:ba:06:
d6:ab:dd:1f:a3:01:b5:88:91:f8:fe:a4:6e:50:40:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7D:BF:8C:6B:51:15:42:1A:B8:C7:F9:01:9A:65:DE:B9:C3:CE:9B
X509v3 Authority Key Identifier:
keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c7:55:16:ac:f5:b5:ea:67:9c:6f:bd:85:0f:00:4b:20:10:
22:96:ad:96:81:60:f0:e7:c3:7e:c3:8f:02:04:09:58:0b:76:
8e:b1:d8:62:27:e7:0e:d7:b9:5f:13:84:83:2d:cf:a6:c6:45:
5d:35:e7:c2:a1:4f:4f:d4:de:13:e4:b7:39:cf:6d:49:b8:c8:
26:bc:ea:7f:b4:46:dd:23:df:9b:e1:84:52:95:1d:44:b4:8b:
4a:98:3f:24:fa:a8:41:b3:e4:33:20:a8:52:0d:0b:e3:ec:7a:
78:cf:53:6e:ca:45:6d:b5:69:29:44:f4:5f:a7:18:09:ff:5d:
9a:86:03:54:9e:d8:2e:aa:3c:cc:07:e4:78:11:52:c7:a1:2d:
b5:6e:83:2d:2a:13:47:78:03:ec:e9:80:2a:25:c3:26:15:fa:
e7:7c:7d:ee:f7:20:89:7f:80:41:4f:45:0f:97:a4:ca:4d:d1:
e6:ce:25:e6:5c:92:75:32:80:1c:08:91:c7:08:ac:f5:b6:e4:
8c:62:69:72:14:25:45:f0:9e:40:8b:fc:d2:a7:29:1c:44:40:
38:91:75:91:66:97:07:e6:8f:b3:70:73:39:0a:6b:0b:ca:f8:
4d:02:fb:62:7a:4b:b7:f2:f2:7a:58:4c:4c:b0:27:51:0f:35:
0f:90:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:26 2026 by rpki-client