
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier: G5S8qD94Njazi/Q+28mlF+V1piAOCZvvcqQadePHtkk=
Subject key identifier: 39:CA:A3:6B:BA:84:C4:A6:A1:E8:71:4C:AE:BB:A1:C5:16:83:65:51
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 7CE9DB26A175D818B7C9708DC9D0F29AF8FCF83D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 15:19:46 +0000
Manifest this update: Thu 24 Sep 2026 15:14:46 +0000
Manifest next update: Fri 25 Sep 2026 15:44:46 +0000
Files and hashes: 1: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
2: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: nf0QWAfDrWhUXB7B+6T9tIQb8JdQfnUKz0b+krqSrTA=)
3: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
4: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
5: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
6: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
7: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
8: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
9: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
10: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
11: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
12: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
13: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
14: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
15: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
16: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
17: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
18: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
19: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
20: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
21: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
22: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
23: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
24: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e9:db:26:a1:75:d8:18:b7:c9:70:8d:c9:d0:f2:9a:f8:fc:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: Sep 24 15:14:46 2026 GMT
Not After : Sep 25 15:44:46 2026 GMT
Subject: CN=39CAA36BBA84C4A6A1E8714CAEBBA1C516836551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:d9:8d:dc:23:85:c7:9e:9d:e0:d1:a3:f9:
17:13:c5:ea:7d:ae:13:df:2c:7e:43:87:01:42:75:
82:d1:f6:77:49:00:7f:b5:4e:da:7f:7d:89:7f:c1:
42:30:93:fc:f4:30:61:cd:fe:68:26:46:41:0e:1e:
fa:c3:f4:f2:9c:f0:40:17:b2:e3:49:b0:df:b3:dc:
50:f9:fb:e6:f4:8d:68:ee:a8:ea:20:fe:c6:5e:1b:
21:45:88:81:68:a1:e2:95:a2:6c:65:6c:99:b3:7a:
c9:1a:cf:42:89:51:c6:ab:6f:95:a7:9d:4f:f6:fa:
00:6d:3f:4d:f1:ba:72:14:44:12:51:3b:e6:89:64:
b5:9d:6a:64:5f:b3:fe:25:32:10:b5:42:7b:48:9f:
1d:fe:9a:62:46:7c:03:02:9e:1d:3e:d0:f1:2a:c4:
0c:67:aa:19:db:05:23:ee:09:89:40:44:96:da:c9:
65:88:bf:93:38:35:17:77:2e:0b:a3:42:1b:b3:31:
6c:e3:f7:6b:90:3e:53:e3:9b:3f:75:4b:c5:1d:c1:
73:58:4f:6d:9e:2d:6a:de:90:e5:69:55:8e:8d:e8:
00:bf:4b:b0:9e:c6:df:2f:39:43:7e:73:b3:c6:ac:
fc:75:5d:24:a1:80:d0:8a:7e:bc:df:dd:2f:58:f9:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:A3:6B:BA:84:C4:A6:A1:E8:71:4C:AE:BB:A1:C5:16:83:65:51
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2b:6d:4e:d0:49:91:a5:d7:33:33:a7:a5:a6:33:44:a1:a9:
91:71:d4:8d:1f:93:05:21:49:67:70:79:b6:ab:a0:ce:61:95:
1e:34:71:91:47:42:a7:25:cc:2f:fa:4c:c6:66:72:12:d7:c0:
13:51:ce:61:90:ab:15:71:1a:0d:e5:43:a1:c1:41:a7:d6:f7:
c3:e6:9a:41:3b:cc:23:7b:f2:59:5b:fa:e0:cd:d2:9d:b9:f0:
cb:e4:bd:63:5d:ba:3d:d9:cd:ca:c3:2a:49:cc:d2:f8:92:14:
de:e0:30:da:41:e0:a4:b3:93:6f:3e:c6:0c:82:bf:48:0a:87:
2a:c6:03:e7:ed:10:3d:93:bb:ef:08:56:12:66:c2:2f:89:4e:
64:87:11:a7:ff:2e:61:55:83:95:0d:98:fb:d3:f5:b2:c2:95:
f6:9f:55:6a:f1:de:fc:5b:a0:0e:e1:08:54:8a:e8:9d:a9:5b:
84:26:1e:7a:07:20:0c:53:2b:e8:71:9a:5e:11:60:55:cd:7f:
b7:65:3e:24:09:d5:18:b6:cd:8a:36:58:a6:96:ab:b1:eb:88:
c3:4e:15:65:ae:a7:0e:60:7b:3f:da:a4:d1:aa:a5:9d:a9:bd:
3f:ee:8b:14:63:b0:36:b2:67:fa:a5:43:4a:e1:e4:85:1e:9e:
5b:fb:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:53:51 2026 by rpki-client