
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
File: 8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json)
Hash identifier: MIFetiwXnHH52Kz2VFk5sTCqdoiMvRwCWxHedYIO1XI=
Subject key identifier: 9E:C2:C7:BF:16:78:90:B4:87:B9:71:64:05:AC:84:49:49:2B:80:2D
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial: 5AFD21453E740EB438D7873A1F69A6CF682886A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 18:34:48 +0000
Manifest this update: Tue 28 Jul 2026 18:29:48 +0000
Manifest next update: Wed 29 Jul 2026 20:36:48 +0000
Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=)
2: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=)
3: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=)
4: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=)
5: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: vgPEJo4ugK1ML7KRnmzFTerBUeUoSe8W0EN3f6qtBbs=)
6: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=)
7: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fd:21:45:3e:74:0e:b4:38:d7:87:3a:1f:69:a6:cf:68:28:86:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
Validity
Not Before: Jul 28 18:29:48 2026 GMT
Not After : Jul 29 20:36:48 2026 GMT
Subject: CN=9EC2C7BF167890B487B9716405AC8449492B802D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:3a:41:0c:e4:dd:0e:23:2a:99:05:ec:2c:
f9:31:ee:3f:98:12:e9:83:d4:39:4d:83:67:17:c0:
1d:2a:ef:49:78:76:c1:5e:f1:f0:35:ef:4d:02:bd:
eb:15:52:8d:83:d8:b6:24:10:a9:91:a7:92:bc:eb:
08:ae:51:46:13:92:4c:33:ef:03:70:2b:75:94:88:
f7:90:bf:c2:9c:68:97:24:ce:6a:dc:f7:4a:e3:e7:
60:4f:80:22:af:d8:d9:71:a8:5f:23:75:45:c5:57:
93:4e:3f:60:70:4d:f6:01:d2:08:39:ad:ce:8d:f8:
35:7f:d0:d1:ad:07:62:d3:21:66:cc:8a:da:ec:fa:
e6:6a:5c:4a:cc:02:b6:43:a9:ab:72:32:aa:b4:1b:
ea:8d:32:48:09:75:76:e0:24:2d:25:9d:a4:71:d8:
bb:0d:3d:47:e3:f4:bc:0f:29:b1:14:23:68:25:3a:
48:93:67:70:ea:13:9a:6c:c2:98:99:2e:d5:60:02:
2a:03:90:f7:88:a6:fd:38:0f:75:3d:ac:6c:a6:7d:
06:1f:fa:20:91:32:1a:64:2f:ca:b3:52:a3:30:9c:
07:05:aa:b1:bb:12:77:69:6c:2c:b0:6b:ca:a1:58:
cf:33:5f:82:20:3d:08:a3:16:9b:e8:c2:3c:6d:b9:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:C7:BF:16:78:90:B4:87:B9:71:64:05:AC:84:49:49:2B:80:2D
X509v3 Authority Key Identifier:
keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a4:50:80:aa:85:c2:92:9b:4d:6c:d0:75:56:ad:4a:57:0e:
9b:ca:f3:a5:51:70:63:05:bb:81:d9:15:6a:f9:cb:ac:e9:8a:
98:eb:a3:4d:70:4d:60:e1:4c:17:c9:93:c0:77:b0:c9:64:41:
4f:4f:35:d1:36:1d:ec:d4:11:d1:46:3d:30:c4:47:97:24:8b:
08:c1:ac:9d:31:e9:44:46:77:ed:4e:b2:d4:02:fd:33:38:5e:
04:38:e6:7f:a0:94:50:2f:36:29:ae:5f:09:c1:a8:02:e4:70:
b6:5a:d6:ce:48:ef:c8:25:b3:b7:e9:2a:b2:0d:67:6c:41:21:
ef:33:43:6c:62:ee:0a:9e:ce:9f:87:fc:34:9e:c9:80:49:3c:
dc:7f:74:50:fe:9a:4b:c0:dd:ad:ca:71:6e:3d:be:4f:d9:9c:
65:37:67:53:19:dc:9e:52:f3:c3:96:af:42:fb:31:25:cd:71:
cf:8f:96:6a:0d:fc:e1:39:8e:5a:d7:7b:d6:d2:02:96:22:47:
f1:29:d1:13:90:98:fd:a0:60:6e:e2:d4:b8:12:a3:e3:8f:85:
23:99:e7:8b:d6:ad:4c:66:78:ae:96:a7:d2:69:c3:8a:17:a7:
90:94:c7:22:18:ae:8f:bb:80:8a:88:eb:69:a3:3b:fa:1a:cb:
59:86:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:12 2026 by rpki-client