
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json)
Hash identifier: P3ZErh4jASbYfXAyf3uGAhxA3XjPY3YpgfzZB36CGSY=
Subject key identifier: 3D:A7:A7:E5:EE:72:DD:77:46:37:2E:18:39:62:BC:2B:73:BB:7A:EC
Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164
Certificate serial: 648012673E1D235AF547D8D0B0A44946FCB4ED82
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 01:44:59 +0000
Manifest this update: Sun 14 Jun 2026 01:39:59 +0000
Manifest next update: Mon 15 Jun 2026 03:10:59 +0000
Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=)
2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=)
3: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: VUU6zN6TrVpcJ8KRn0lsAhYY34scCSU0RiaZtaIJ9dU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 03:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:80:12:67:3e:1d:23:5a:f5:47:d8:d0:b0:a4:49:46:fc:b4:ed:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164
Validity
Not Before: Jun 14 01:39:59 2026 GMT
Not After : Jun 15 03:10:59 2026 GMT
Subject: CN=3DA7A7E5EE72DD7746372E183962BC2B73BB7AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:34:79:bc:79:2f:22:d4:46:6a:27:8c:9d:
0e:22:04:44:1f:39:d2:7a:ae:ed:e8:24:ba:53:b3:
4f:6e:cf:89:d1:ba:e0:ce:ab:6f:c1:4c:d3:d9:07:
8a:9d:bf:41:72:f1:c8:88:c0:a2:28:3b:95:a0:d3:
ad:04:8e:c7:02:bc:6f:56:04:39:57:cc:d1:63:3f:
93:a1:68:78:e1:70:09:4a:8d:43:5d:c2:f8:da:33:
3a:a1:2f:d8:8b:cd:89:ee:58:04:06:46:30:3a:0f:
55:e1:12:52:8e:06:cd:e0:06:1d:e8:76:7a:ad:8e:
26:1a:31:86:3a:4a:14:86:6d:ae:f3:28:2d:64:7b:
5a:63:cb:f5:3d:ab:6a:30:af:29:67:d1:8a:c2:56:
b9:04:16:60:83:74:21:08:dd:8e:36:88:42:8a:80:
5b:23:8d:36:a8:12:90:a0:d7:cc:ed:32:ed:7c:d0:
45:e4:17:07:a3:df:28:02:c7:cf:a9:59:5e:c2:fd:
99:15:a0:56:0d:53:45:f2:2e:d5:1d:19:9d:54:f1:
7b:7c:c7:e7:30:ef:52:44:ca:ea:75:89:02:76:04:
07:ff:e9:8d:de:3f:36:6b:6f:1e:59:a1:7e:d3:71:
f4:f9:76:db:b8:d6:a8:97:27:a8:b5:f4:6e:6b:71:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A7:A7:E5:EE:72:DD:77:46:37:2E:18:39:62:BC:2B:73:BB:7A:EC
X509v3 Authority Key Identifier:
keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:67:9f:df:3a:19:d9:bd:5e:b7:be:04:66:c1:fd:ed:b1:
9d:d1:c6:16:1c:1b:41:3b:31:6f:01:47:8e:26:38:77:00:00:
18:ac:37:52:0c:d1:8d:19:1c:90:21:ce:10:54:be:60:09:0a:
78:6c:50:e2:16:e1:5e:83:d6:60:d1:9e:26:b3:04:86:21:5b:
fc:13:7b:5b:27:27:df:92:4e:e3:a9:53:0e:c7:71:e0:2b:f4:
d2:13:e2:41:df:25:21:71:44:3d:ab:70:3d:5a:92:0d:b8:35:
c6:6d:81:b0:62:b4:e1:81:50:5a:69:cc:7c:7c:29:2f:22:03:
73:d6:94:88:b6:48:c1:aa:6a:09:0f:a2:9d:10:3b:49:32:52:
f9:b2:fd:b1:f2:fe:37:22:e6:39:53:f8:d1:65:48:5a:f2:01:
76:85:a6:e5:43:b0:3b:f6:24:de:a6:06:61:51:66:0d:4f:4a:
ac:c4:28:25:1d:6b:91:09:0d:2c:30:34:10:95:a8:c3:de:7e:
66:e3:f3:c8:0c:a4:38:10:fd:87:f2:26:be:b5:4e:09:d4:2c:
52:12:97:ea:72:4b:eb:41:6c:66:db:52:c4:2c:3a:e3:1f:6f:
49:72:27:84:bf:b3:88:5b:f4:1b:9e:43:0e:18:a9:20:2f:ba:
30:91:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:22:04 2026 by rpki-client