
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
File: 008FD9C34C50033457705A2A8FA8AD31C58901DF.mft (raw, json)
Hash identifier: fdfzmUln2R8+idOZm2DrPbU2SxrcF2Ie6rey7xLDwnY=
Subject key identifier: 74:FE:3C:42:2F:3F:59:B9:8D:F6:8B:61:05:61:73:31:C9:07:EC:95
Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Certificate serial: 726964D926296E93CBAA25BF78A537F2CAFA2A7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
Manifest number: 0100
Signing time: Tue 10 Nov 2026 16:11:28 +0000
Manifest this update: Tue 10 Nov 2026 16:06:28 +0000
Manifest next update: Wed 11 Nov 2026 17:34:28 +0000
Files and hashes: 1: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Ym+oQJAC/FZcNlOtyNB+PyxQjFt4qpTGx2NjQCjEW8k=)
2: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=)
3: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NbNZZ1h00KtVz1iU/OgERwDxHBaHy3Lol9PQ30yLH20=)
4: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: 7PYR6KQD363PCA9CqbyRe3Hlyct7YlcslSh5J5MCne8=)
5: 008FD9C34C50033457705A2A8FA8AD31C58901DF.crl (hash: 2MArgp326Lf6aCym+Jd2r13iapsh5xEnc43eZE2tyIc=)
6: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: WS26qbff4FZd1gBCBy7MpBk2HRkLgCPS9ErpAbqZ1Kk=)
7: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: ikR/F9w4LitTShzkD+KXZlE08zWYB4wLcQeSOu40MHY=)
8: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: KRcAvz4S9RiZMOJ4ntySfmti6yb9mI07p7EYZgs2VTA=)
9: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=)
10: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 08:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:69:64:d9:26:29:6e:93:cb:aa:25:bf:78:a5:37:f2:ca:fa:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Validity
Not Before: Nov 10 16:06:28 2026 GMT
Not After : Nov 11 17:34:28 2026 GMT
Subject: CN=74FE3C422F3F59B98DF68B6105617331C907EC95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:c7:2f:fa:8b:4f:a6:ae:6b:8d:a3:7c:20:
cd:f6:9e:a0:5e:b9:23:1c:bf:ad:6f:cb:da:95:dd:
30:b1:28:4d:7c:e3:8d:84:67:5a:90:dd:f1:49:49:
12:22:3f:b0:24:6a:9f:87:22:8c:59:6f:bd:86:40:
d0:17:96:c7:56:1a:0c:1d:a9:7d:42:54:20:d7:2b:
e6:c8:91:f3:dd:52:7a:1d:b6:9d:18:d6:72:50:6e:
ae:b7:e8:e3:74:93:15:ec:a8:0e:8f:a4:51:18:63:
d4:bd:9d:48:06:2d:9c:42:0f:f5:a2:81:a1:5a:d7:
48:d4:f9:fd:61:8c:85:92:2e:2f:db:90:f6:34:23:
2f:a5:53:bd:ee:8f:46:ce:5b:e3:76:54:5d:1e:ce:
be:74:ed:d2:cb:f1:e6:10:3b:01:7c:8b:4b:12:8f:
03:48:f6:13:b7:74:fc:f6:52:2c:f6:f7:97:fe:12:
6a:23:1e:75:de:76:75:73:0b:b3:58:75:11:43:b0:
17:92:be:b4:e3:81:90:8a:e9:57:60:9b:11:5f:c5:
e1:3a:31:c7:a8:fc:ab:35:3f:34:0f:cf:c1:7f:d2:
5d:77:e7:42:f1:b0:8a:a5:c9:89:a1:5c:55:59:8a:
b4:ff:76:68:bb:ff:60:b3:3d:d5:ea:68:89:63:bb:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:3C:42:2F:3F:59:B9:8D:F6:8B:61:05:61:73:31:C9:07:EC:95
X509v3 Authority Key Identifier:
keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:c2:65:12:f1:7f:c0:d9:d1:da:9d:0a:c2:eb:a7:2d:6e:
40:b8:9c:38:f5:61:81:e1:d1:3c:c5:ec:5a:ff:a7:9d:dc:fc:
0d:11:f2:c8:fe:79:dc:6b:90:9f:18:54:3a:a4:68:30:28:92:
ee:ab:8f:ab:93:3c:7e:4a:85:8a:e5:56:aa:f8:3f:5c:86:b7:
92:fa:a4:aa:66:4b:47:9e:76:95:97:8b:e4:e8:ce:bb:33:09:
25:92:ad:cb:65:6a:5c:65:7a:34:fb:ea:23:5d:e0:b1:c3:2c:
6d:23:4a:a9:45:fd:8d:54:a6:ac:ca:0e:e2:1b:69:d0:65:f3:
d8:52:e1:8b:af:a9:19:0e:52:69:6a:f2:1a:81:4f:4b:8a:71:
92:71:14:4f:ea:43:94:84:6e:10:6f:c8:45:db:8c:e6:e3:1e:
29:22:3e:c5:2a:3e:e2:09:98:b3:22:e5:ef:f8:5b:68:ba:49:
7c:60:77:0f:3f:be:82:d6:a7:47:5c:8c:83:91:19:78:56:6c:
fc:5b:58:4f:c2:0a:46:47:d3:a3:78:a4:fb:37:84:aa:0a:65:
11:53:6a:39:58:f1:46:af:75:aa:33:d8:1f:c7:50:dc:e6:ee:
e3:a1:73:f9:9c:0e:7b:1a:98:3b:50:54:22:80:23:cf:ef:a2:
80:ae:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:53:41 2026 by rpki-client