
$ rpki-client -vvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json)
Hash identifier: w93ok1nNGiALPV1/wURTsT9R/lPmyf5sgygeaeVsE/w=
Subject key identifier: 1B:33:6A:7C:0E:36:8B:5D:8F:73:2F:77:B0:1F:13:58:33:CC:9B:C2
Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4
Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4
Certificate serial: 57541321679DFC7278716B478BE0705D769B83D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 09:39:42 +0000
Manifest this update: Wed 17 Jun 2026 09:34:42 +0000
Manifest next update: Thu 18 Jun 2026 12:54:42 +0000
Files and hashes: 1: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=)
2: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: ++eIxDNvOm5IdvKY6fE9uwXuqNmn61M7X/s7nTZrDbU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl
rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:54:13:21:67:9d:fc:72:78:71:6b:47:8b:e0:70:5d:76:9b:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4
Validity
Not Before: Jun 17 09:34:42 2026 GMT
Not After : Jun 18 12:54:42 2026 GMT
Subject: CN=1B336A7C0E368B5D8F732F77B01F135833CC9BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:4f:c5:ae:0c:2b:2c:64:bc:7d:4e:a9:f4:
6e:a3:68:9a:a6:e6:29:c0:f8:09:f2:31:27:1e:af:
a6:c5:bd:87:e2:ff:9b:d7:f5:ff:2e:ce:94:12:57:
37:7f:e4:a4:c0:41:f5:85:98:b3:10:4f:41:bf:81:
a7:90:43:c2:1b:dd:a9:c8:2a:8b:1c:eb:04:a3:c1:
73:ad:e9:e7:bb:84:31:01:e0:04:0f:89:35:81:a2:
7e:c4:2f:ce:b1:df:d5:d1:8b:2e:02:cb:d9:09:12:
a1:41:84:31:45:66:69:b1:5e:14:c3:e6:58:43:d8:
03:87:09:a3:ca:c4:56:75:d2:1a:62:e7:e0:cb:a2:
a2:e2:73:1f:a9:0c:91:0c:75:4c:c2:80:37:5d:3d:
e6:ea:0e:3f:ea:32:a7:6e:31:bd:e4:c0:bf:b9:c9:
56:1e:97:79:74:ee:c5:46:c4:84:60:a4:82:01:09:
f6:08:9a:b3:31:d4:4e:9e:9b:aa:ae:ec:48:35:c7:
1e:5e:7f:1b:f1:6d:9b:29:da:03:82:56:e3:44:ec:
e1:d9:38:6b:5a:b7:06:c7:d5:9a:cd:5f:1e:b2:f0:
37:81:2c:f5:2a:f0:ca:0d:0a:74:4c:15:84:3f:11:
0b:61:41:35:c6:bd:18:59:52:a9:33:d3:b0:fa:05:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:6A:7C:0E:36:8B:5D:8F:73:2F:77:B0:1F:13:58:33:CC:9B:C2
X509v3 Authority Key Identifier:
keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c9:97:a7:4a:9e:fa:91:f9:8c:aa:c5:f8:2b:39:e2:0b:57:
b8:ef:52:e4:17:73:6c:4f:fd:12:df:b2:30:c5:f8:e3:51:08:
3e:02:19:3d:22:db:c0:aa:88:01:36:25:43:dd:55:14:fb:b6:
c4:0a:42:26:e2:d4:07:64:d8:84:57:83:e7:63:3b:b6:e8:9c:
49:0e:07:6e:3d:c5:45:10:72:1e:49:82:d1:2d:65:99:1c:08:
96:1b:76:3c:24:81:ac:ac:92:8b:08:99:db:b4:cd:63:dd:5d:
80:88:5e:d2:0e:68:7c:94:ed:ca:58:44:c5:e2:97:c5:7b:cb:
66:b5:a1:f8:c9:4b:bc:e4:ed:ba:a7:9a:54:45:fb:11:8c:58:
9e:c2:57:25:d3:6b:da:15:29:8e:82:5d:0b:54:78:ce:cb:58:
d1:a8:a2:b9:f6:34:9f:b7:4d:c0:e9:00:3a:83:01:ce:23:34:
78:89:41:0f:12:9e:5e:7d:be:63:00:38:cc:a6:a9:50:6a:fe:
9b:e4:19:ae:23:16:2f:0e:72:1c:03:9f:11:c2:d4:bf:85:b8:
b1:a7:42:c4:86:86:b5:66:88:fd:c5:c0:0c:3e:be:5c:7f:37:
79:54:73:55:04:a5:aa:4b:b9:9b:15:87:f8:14:bf:b0:4f:c8:
91:31:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:39:59 2026 by rpki-client