
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft
File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json)
Hash identifier: DMhT7gNm4smMr9OEgic6AKYkP01OBOJDldPrjAVQ8ag=
Subject key identifier: 55:D3:CC:E9:6F:54:7A:9C:A6:C7:24:01:79:AB:E4:C4:9C:A3:CF:97
Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7
Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7
Certificate serial: 03159A7DB16C9D29099CEEBDFB6C509654AEA01B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 06:32:54 +0000
Manifest this update: Sat 26 Sep 2026 06:27:54 +0000
Manifest next update: Sun 27 Sep 2026 08:56:54 +0000
Files and hashes: 1: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: icXYVhETAt3GFOS/LGwqav7OQChEL+V1NNpfT+hxk0M=)
2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=)
3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=)
4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=)
5: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl
rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:15:9a:7d:b1:6c:9d:29:09:9c:ee:bd:fb:6c:50:96:54:ae:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7
Validity
Not Before: Sep 26 06:27:54 2026 GMT
Not After : Sep 27 08:56:54 2026 GMT
Subject: CN=55D3CCE96F547A9CA6C7240179ABE4C49CA3CF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:c4:1d:ea:8f:9c:0f:73:45:52:ce:29:ba:
b2:c8:85:92:d2:4a:98:7f:de:a6:7b:3c:8e:c4:44:
29:29:9f:8f:08:8e:9e:1f:ce:c5:a4:1a:e4:70:a8:
3f:99:9b:f2:f2:30:84:8b:af:f0:08:2a:d6:f9:b7:
9a:b3:bd:b5:be:d7:0d:1b:9d:5a:84:de:0e:51:1c:
6e:67:98:19:65:1c:b7:32:7d:92:03:e1:bf:88:fb:
d2:d3:f1:87:f9:f4:6f:d7:35:06:bb:ca:bc:d3:f7:
f0:fd:35:1d:36:21:f5:13:c7:80:67:5e:42:3b:fa:
90:1d:d6:c3:2d:3e:8a:dc:af:86:7b:45:2f:a9:84:
c9:9a:71:ff:39:c1:95:db:75:74:a2:9e:19:0c:2b:
e2:14:e0:67:f7:ae:73:12:07:6e:9d:b1:0f:94:4d:
76:93:60:9d:ef:44:72:75:c4:8b:59:fc:5d:04:e2:
c7:14:87:ed:1d:5a:2d:ff:65:a7:ae:28:26:de:5f:
78:38:5f:68:38:a0:ac:60:1b:22:69:ff:ad:8d:49:
a2:12:82:64:7c:51:7d:cf:8c:23:d8:2b:ca:11:1b:
42:24:3b:90:59:5a:bf:4a:fa:32:97:cb:54:81:87:
e6:ec:31:e6:0c:f8:fd:38:07:b4:3b:9b:86:1a:31:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:CC:E9:6F:54:7A:9C:A6:C7:24:01:79:AB:E4:C4:9C:A3:CF:97
X509v3 Authority Key Identifier:
keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:a9:af:4c:04:93:99:cf:78:09:0e:f0:66:2d:11:cf:e5:
15:04:e8:74:53:eb:b1:23:89:44:b3:15:e6:7c:1f:6c:68:a9:
5a:5e:f2:69:cb:38:39:37:96:31:cd:ec:70:ab:c0:8f:37:5d:
8f:bc:25:8a:33:e4:0d:bf:cb:0d:8f:f6:19:cc:bc:eb:08:ca:
0d:46:dc:27:98:b9:0f:16:ef:8d:b5:c9:ea:76:ec:1b:0c:ab:
84:e4:dd:e5:01:25:25:be:e8:a4:4d:4b:da:22:4d:69:22:c3:
7d:bd:45:20:dc:e0:f6:8d:df:0d:40:69:63:3a:da:de:a4:16:
ba:b9:9c:8f:fc:27:e3:c4:8f:32:be:01:30:66:9d:09:2f:6c:
03:84:ec:9f:2f:50:6c:ad:a3:00:a0:ee:b8:d3:0f:e0:b2:8b:
2e:73:4f:e9:e3:62:a3:7c:8c:b4:f7:b4:35:a3:d4:6a:2e:ff:
f1:05:e4:f5:31:88:25:5b:c7:c1:b7:2d:a7:71:fa:78:dc:ae:
34:8e:36:23:9c:68:39:b3:dc:b8:b3:e8:f5:de:a1:ab:50:7c:
b7:d2:7b:20:ab:09:89:58:19:00:07:80:84:11:27:c1:7f:3b:
61:d8:b9:ad:7e:f1:3b:14:1c:09:d4:16:95:65:13:62:83:76:
a9:79:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:59:03 2026 by rpki-client