
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
File: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft (raw, json)
Hash identifier: lQJDy7g4I2vg09kCzqlrWzmpr13sCCXA4f7xc2C00nA=
Subject key identifier: F0:3F:A4:71:C5:DE:BA:B8:96:03:9E:26:05:A1:71:28:98:C6:09:9C
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial: 140334D2412AE1DA0517364BDCFD27B3F2C3B884
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 07:16:42 +0000
Manifest this update: Wed 17 Jun 2026 07:11:42 +0000
Manifest next update: Thu 18 Jun 2026 07:30:42 +0000
Files and hashes: 1: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl (hash: Xl3PcGKEfZRaEzPZ9VVNduCEt8E2/nv1cuqwqMVg9/M=)
2: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=)
3: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: 4io3eCxu167AtlWBsa6dTLlDoZVSSBjQBvpZbbKn9o4=)
4: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: 4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:03:34:d2:41:2a:e1:da:05:17:36:4b:dc:fd:27:b3:f2:c3:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Validity
Not Before: Jun 17 07:11:42 2026 GMT
Not After : Jun 18 07:30:42 2026 GMT
Subject: CN=F03FA471C5DEBAB896039E2605A1712898C6099C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:7b:2b:08:7b:dc:e5:bf:9c:1a:c4:3f:0b:
79:32:5a:21:1c:57:40:9c:06:71:e7:f9:11:2a:43:
72:f7:ed:2f:93:66:2c:51:b1:08:b2:86:79:dc:c1:
20:11:22:7a:1d:6e:2f:ce:72:ae:4c:84:93:f8:42:
01:77:ee:5d:dd:1a:8f:b6:1c:09:67:46:5e:80:32:
89:c2:0f:6a:cb:af:35:32:f0:64:8d:bf:c0:35:06:
72:b5:60:bb:8b:60:0a:84:14:67:1b:4e:16:ab:94:
80:84:63:d9:9d:8a:b9:5e:6b:c7:57:46:58:e3:11:
12:1b:55:34:0e:67:f3:c2:6d:09:cb:6b:e5:8c:df:
06:f1:81:b7:b9:9d:4e:10:2c:ee:bf:2f:67:34:5d:
59:8e:d5:1a:3a:ef:7f:2a:28:0e:ea:7b:38:f6:56:
b3:35:5e:d5:b5:5b:a8:a8:9c:7c:91:79:db:90:2b:
43:a8:2b:13:08:49:84:c7:b8:e0:fc:bd:e7:24:df:
11:24:7d:4a:c0:e2:6f:0b:f2:5f:d2:69:1f:4f:5d:
b4:56:4e:b1:82:ec:82:56:ad:02:fa:12:af:0a:f7:
f8:d5:23:1a:1c:17:9a:49:e0:73:65:6f:9b:56:c9:
e5:7b:53:21:8c:0e:78:4a:cd:f0:8d:0b:9c:ec:57:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:A4:71:C5:DE:BA:B8:96:03:9E:26:05:A1:71:28:98:C6:09:9C
X509v3 Authority Key Identifier:
keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8c:a8:80:1c:fc:de:55:b6:85:22:90:e0:76:fc:a3:35:1e:
b0:d0:35:33:f7:b6:9d:3c:cd:15:b9:01:70:34:a5:5d:d3:ce:
9a:b7:0e:c7:43:cd:38:92:9a:e2:b4:ca:7d:dc:30:6a:be:be:
8e:64:5a:01:d6:be:92:1d:0b:84:12:3e:4e:7d:3b:0b:47:7c:
ab:98:fe:ce:db:99:4d:ab:f9:b2:c5:24:1e:e6:fc:ca:68:19:
d8:26:dd:a7:55:23:53:0c:5e:83:5f:13:0a:87:e0:4c:81:58:
e6:af:19:cb:fa:9e:f4:e9:fc:b2:98:b4:39:9e:62:a0:23:c1:
41:80:b6:b5:e2:02:1f:73:70:eb:cf:5b:a0:97:ef:5c:56:a2:
6c:fa:8f:7e:d5:d8:92:ad:ea:eb:1d:27:b6:69:7c:7b:46:f6:
6e:b0:68:8f:14:45:1f:74:80:71:29:6d:b1:da:d7:34:1a:49:
c4:c8:a3:3b:08:71:24:a8:b2:39:a9:35:31:00:bc:01:5b:0b:
68:6b:42:80:09:18:9a:34:48:cd:ac:77:25:d8:08:b6:34:c3:
1d:fd:54:a0:58:91:af:97:04:4c:c9:7f:45:75:4e:f0:98:8d:
5b:54:0a:0d:26:13:74:92:46:fa:2f:ae:5b:19:0c:2a:ed:f6:
cf:30:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:54:27 2026 by rpki-client