
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft
File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json)
Hash identifier: ce64KheV1bJZf8FStqwPREClNyNsN7vOEV2FJeEZNsY=
Subject key identifier: 14:18:5A:D1:3B:AB:8F:E4:DB:33:55:74:DD:93:84:F2:75:C4:D8:75
Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E
Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E
Certificate serial: 09B70A794A331117088EFCD6F242B3BB40777319
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 05:40:57 +0000
Manifest this update: Sat 13 Jun 2026 05:35:57 +0000
Manifest next update: Sun 14 Jun 2026 08:27:57 +0000
Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=)
2: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=)
3: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=)
4: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: uSz2TauBNzLC/0pAIl3ApweNI84Gfe4wtqZkUWjCmrc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl
rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b7:0a:79:4a:33:11:17:08:8e:fc:d6:f2:42:b3:bb:40:77:73:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E
Validity
Not Before: Jun 13 05:35:57 2026 GMT
Not After : Jun 14 08:27:57 2026 GMT
Subject: CN=14185AD13BAB8FE4DB335574DD9384F275C4D875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:42:b9:86:03:82:62:f2:65:2d:94:5f:29:
0f:2d:28:a4:46:54:53:37:14:07:4c:24:52:ec:0f:
07:10:22:5b:57:7d:18:fc:e5:7a:dc:1e:2f:35:87:
e1:0c:2d:7a:c4:30:50:99:65:8b:99:4e:ea:7e:b7:
ad:2f:d1:0a:0d:5c:12:f1:ed:46:20:96:93:94:d0:
34:a2:41:1d:95:16:c1:5c:aa:d9:0f:a2:52:ab:23:
e1:6f:93:ac:bc:01:68:b9:c3:af:30:65:8b:9f:f3:
ed:4c:af:9f:2f:f7:d0:08:8f:f8:61:d8:14:ac:71:
71:e8:e7:47:95:90:7f:b1:ed:fa:26:b2:1c:f1:be:
5a:3c:d5:a2:f1:1f:a1:7b:d7:3c:49:9b:01:e2:42:
36:5b:9a:0e:9f:a9:32:cb:52:f4:94:6d:dc:71:c3:
ca:a8:ce:0c:39:26:e2:05:ca:1e:43:65:37:73:57:
c7:25:a7:a3:75:d0:e4:a8:3e:d4:0f:1e:e6:eb:9c:
90:ff:bb:cc:00:c3:57:37:54:1c:2d:97:c5:9b:e6:
70:26:c3:1b:6b:b8:7d:da:d4:f4:a8:e8:70:ac:80:
f2:0c:39:35:2a:3a:99:6f:c6:f6:66:a9:f6:8c:c2:
76:eb:78:ef:45:33:84:82:f1:35:fc:a6:3b:35:78:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:5A:D1:3B:AB:8F:E4:DB:33:55:74:DD:93:84:F2:75:C4:D8:75
X509v3 Authority Key Identifier:
keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:21:d6:2a:69:35:7f:aa:78:b4:87:62:5a:0f:65:ad:ba:ab:
6d:17:0e:66:74:65:21:76:e8:32:8a:2f:78:92:f0:72:93:d1:
0f:ec:f6:9d:59:bc:73:0f:2f:49:88:6b:1c:d5:3c:7f:44:a2:
8d:be:a4:52:33:2e:72:cd:a2:b0:47:dd:c7:cf:8b:ce:0b:a3:
28:c6:41:c6:56:3c:77:02:f9:19:e4:a8:6c:a0:a0:0e:e4:50:
11:91:51:95:72:c4:6d:3e:1a:f0:fa:46:60:c5:7f:fa:6d:88:
47:c3:78:77:3b:38:21:fc:ed:86:9f:89:93:b7:52:eb:20:6f:
5f:9d:d2:4e:e8:93:b5:c5:c4:88:ed:69:f9:ed:78:dd:94:2d:
0d:bc:d8:9e:73:64:85:f6:59:68:69:60:37:4d:f6:e3:6d:84:
8f:21:0d:21:d7:21:21:82:59:50:f6:e4:e4:7d:eb:6c:a1:67:
44:51:02:66:19:de:f4:e3:1e:25:be:6b:19:dc:23:6a:cf:cf:
6b:83:93:52:57:fc:88:d2:5c:c9:6d:74:32:c2:e7:51:d4:1b:
6a:b8:47:a5:74:a7:73:e9:c1:32:fb:a9:b3:cc:3b:58:ef:3d:
aa:3c:a9:4c:e5:8b:2b:f4:43:03:12:bf:31:6e:ee:e8:e0:52:
24:2c:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:50 2026 by rpki-client