
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json)
Hash identifier: GcCbn0Xckz5Ffsgtf8VMA1km3Dtfe8CAXR0JBK9PyLI=
Subject key identifier: 70:52:34:61:27:69:BD:C5:9F:AC:9A:8F:2C:1D:C2:53:66:B6:4A:3D
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Certificate issuer: /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial: 792106B362CDAFC8C3226193CD21DA5B55CEFF07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:43:04 +0000
Manifest this update: Tue 02 Jun 2026 14:38:04 +0000
Manifest next update: Wed 03 Jun 2026 17:06:04 +0000
Files and hashes: 1: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=)
2: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: govI4v+bJHr2KYqxQUHINCr+9HvtKJ4WU3zkJLoYFJg=)
3: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=)
4: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 17:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:21:06:b3:62:cd:af:c8:c3:22:61:93:cd:21:da:5b:55:ce:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Validity
Not Before: Jun 2 14:38:04 2026 GMT
Not After : Jun 3 17:06:04 2026 GMT
Subject: CN=705234612769BDC59FAC9A8F2C1DC25366B64A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:3f:7f:2d:a0:36:e9:aa:db:8a:2e:92:69:
3a:63:21:98:dc:7b:81:e8:2d:bf:7f:95:39:7e:27:
15:49:24:b5:ab:e3:6c:d1:0e:16:0e:cc:4d:f4:2e:
74:04:b1:a1:35:1e:a7:2b:c4:2e:b1:b0:4f:3b:f0:
e5:2c:b3:22:84:56:3e:eb:f0:ab:db:da:db:6c:e7:
02:47:ba:77:54:79:f7:14:7c:33:f3:7d:b3:78:51:
ab:f4:01:98:ef:9e:af:4b:10:07:37:a7:2d:14:a6:
2e:79:dd:5c:fd:1d:19:f4:89:bc:1c:51:60:a3:70:
bb:55:9f:52:b7:e5:95:e5:bd:79:55:b6:09:2d:4c:
2b:a6:2b:94:75:fe:1a:cb:fa:b7:67:54:44:83:97:
fa:9f:47:d5:85:03:49:9a:bc:aa:6a:22:36:58:32:
f6:76:1a:d3:1f:91:b7:48:9d:2a:3d:62:10:8d:4b:
62:a7:c8:64:3a:a7:c1:4e:4d:dd:07:3c:4f:f9:6f:
f3:6a:29:44:44:37:17:78:b9:59:41:40:93:e3:82:
83:2a:2d:44:e9:fd:6a:be:bf:86:68:97:d8:14:3f:
03:14:e5:53:6e:d0:d4:74:a5:b8:31:27:52:09:1e:
f3:9c:13:31:81:b4:68:5d:5c:db:bb:40:cf:68:9e:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:34:61:27:69:BD:C5:9F:AC:9A:8F:2C:1D:C2:53:66:B6:4A:3D
X509v3 Authority Key Identifier:
keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:06:53:34:1b:b9:1e:a4:f6:f5:fc:4a:06:21:91:e8:0a:ac:
65:49:5e:2e:fd:4c:f1:46:2b:50:9c:93:a1:aa:91:d4:a0:b1:
06:f9:dc:63:37:06:b1:b4:3a:f8:57:a1:c4:6b:b9:a5:a4:7e:
fa:0d:a1:5e:bb:50:32:f6:ff:9e:c3:e8:96:98:1c:6a:ee:ac:
b2:21:3f:71:25:56:d8:e9:f9:99:fb:70:66:a8:5e:fa:58:ab:
62:0c:03:ce:05:ba:2f:12:7b:06:7a:6e:6b:ec:a4:f0:27:04:
c3:1f:dc:be:67:9f:73:79:bc:97:be:72:47:fb:fe:57:96:b8:
1f:32:f2:2b:f3:eb:df:0e:1e:52:aa:8f:e1:b6:cb:c3:5d:ee:
a0:e8:01:dc:65:dc:cc:08:fe:0c:62:72:b0:46:88:22:fb:d4:
dc:07:66:96:7b:fd:bc:4b:b9:9f:96:79:8a:d4:72:2e:8c:77:
50:45:66:60:0e:a6:0a:60:89:69:7e:43:ba:ac:27:fc:8e:6f:
0f:b0:8d:4e:9a:90:67:3b:5f:f4:69:06:4a:fa:4f:80:c4:28:
13:4e:57:ac:e4:9f:a2:3a:c7:08:3d:4f:72:0f:40:28:ba:fa:
1d:52:82:4b:fb:ba:dc:8b:3a:70:dd:05:62:c9:f8:6d:1c:b3:
3c:91:90:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:29:38 2026 by rpki-client