
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
File: 906CD1832E095FD864326D9340C3360CE2E04D88.mft (raw, json)
Hash identifier: EydPuNJl+nHbxGd2cPiEpoI9n63aLU3znfrpH3HPhmw=
Subject key identifier: 88:F4:43:50:E6:58:94:A4:06:53:15:8B:FB:2B:36:6B:F4:48:5D:12
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 405FFAD4D3DEBE5AE13091B5F174A1920A577E90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 13:41:48 +0000
Manifest this update: Tue 02 Jun 2026 13:36:48 +0000
Manifest next update: Wed 03 Jun 2026 14:05:48 +0000
Files and hashes: 1: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (hash: ZoVbl1Ej5vOkXGYFcM3GgFWF5vBfmm2YepIHJBqDbQM=)
2: 3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (hash: d6Y5uYZP91y+eB3UDXZIOMOBcAWU0tFndBdXQKLT93k=)
3: 3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (hash: hj8RfWuHMvR3IOUvRxyV2D2ELgKW3xEoS/ad7SVLqpU=)
4: 3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (hash: IJ1gl0sL1RWrdcu45xJfEOPZ3S24w9hNHw27+5W3EfU=)
5: 3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (hash: 4YrgDfVD0BXsVITQ1qM6LdwihWuqC7JjlQdVH1myE2c=)
6: 3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (hash: 0jFA4bTcIReYiFePWq4UpaLmoZT+NXzEuKJPz4tjPhs=)
7: 3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (hash: 18ON4ArCTP+lfrAOcIUbJ7NgSJlxjIjAeKAx8615vRA=)
8: 3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (hash: CTAc5TKDYG8jWJrPFMAEsp+Pffmom314/f31IgCyWSY=)
9: 3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (hash: hDks4xSZEu4ylfv9eeFQE9ITujGlv6mJTmcyl6KcPEA=)
10: 3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (hash: Ng7waYdDe1Dfj8ZChcOrErxA2un9U810Hwr4zNlkzaw=)
11: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (hash: F6CH1xWOW04b9AWH9hOzpC9sPtP3FUKuSlUMhrOcMFU=)
12: 3131362e3231322e37342e302f32342d3234203d3e203436303330.roa (hash: YdaOKtrJJCfB2mcsh0BnmVaHbwYDxWuOal7DMCKT+z4=)
13: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (hash: NjGWi/sX/azA4LSsxWgygXlT2qGazE96SDmeU5APEvg=)
14: 3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (hash: /3/1RjKyrZlHVoTiW/tcRKdAaD1qr1a2KPJUdaqHdzc=)
15: 3138322e34382e3137372e302f32342d3234203d3e203436303330.roa (hash: AB/+vqxGjG+WUGNrWInFpg+QqvDIp89T4SFZCCScCf4=)
16: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (hash: zas81XYAzKm/epSWBwoKOUmYW9ltga5JFRl4SlgFNYQ=)
17: 3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (hash: UGbDMfBesxO5/EEF+JrapKZzclHkwuQF79qZ/AxYM8I=)
18: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (hash: 58v6IS1MSPKg2yYeVDyyuTvIzqpTnW0JbX79eRAkar4=)
19: 3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (hash: aA2PRrfzpM7G6vMr09KAyWMRPmTA4TQcAHLLZIN3rO4=)
20: 3131362e3231322e37352e302f32342d3234203d3e203436303330.roa (hash: ynlFVYrFuOPTuw4PJgeuIV9yoIQbBvpsmkdgLM0exm0=)
21: 3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (hash: 5T8Tor9uEyt7xupZTf9YjNdQa3WiJhFlyyfkYzVReeM=)
22: 3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (hash: J+EGvFPD67LFXGQZEHfVWDkOrWmqXhH9UPZC8CcEyic=)
23: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (hash: nIA/3S+EQWlw4ZuLmZhS5zgcudA5d4PuWSKtEk22u0A=)
24: 3138322e34382e3136362e302f32342d3234203d3e203436303330.roa (hash: 2D0T0jFXIOTwpKsYTX89X6+Gi1/+sOAN5iJ3Wcaskhg=)
25: 3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (hash: Ztfsn5PM55Asy7cf5oKAtrKPTWkPp+IkS2IEf6RTR1I=)
26: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (hash: JelzHvBp0OxgIxm8Nd0pErRqQIE2QVfU6EWcp42vk6c=)
27: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (hash: Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=)
28: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (hash: ewmkkTzxhOGyo6MzFFyyoH5/Y+VapDFv9s96w13qA+g=)
29: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (hash: 1gQP1KipyggAd+ZWxNv0xkFTvLsvr+/k6WShmO+e4Iw=)
30: 3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (hash: PCggWZ4S0cmAIvlQ9OKIUJbBVOoSGkwzhD1/wRPVPCQ=)
31: 3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (hash: 2snhbL2/LyEOsVO40C/SJRnBQy8yVpoiYYd3VX7I0Dk=)
32: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (hash: 9EIhETWWjW1dZSmzJuION9agY2xrl3P3+FsQS+Eeaz0=)
33: 3138322e34382e3138342e302f32342d3234203d3e203436303330.roa (hash: DZQzCrIgtUXS6Vb+eF76haovEcz46KiCQaKT5Azbp5Y=)
34: 906CD1832E095FD864326D9340C3360CE2E04D88.crl (hash: rR3ykCaDq0tvGbPkiDcFyf2tNF5FGH4dPfEfr43eNfA=)
35: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (hash: o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=)
36: 3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (hash: tPLdls9+EYZXd6ZrhIRMSY3IobhJMxdyCJJTVoTUXQ8=)
37: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (hash: 4anjPKb7dXOuM/Ubgl9czTBsQlokGVQ9YcUxyhwp+mc=)
38: 3138322e34382e3139302e302f32342d3234203d3e203436303330.roa (hash: wwLLX5QwOXj8WIt4dR7Y6UuHuuR7pT2z8l/3xL/x9i0=)
39: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (hash: B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=)
40: 3138322e34382e3136322e302f32342d3234203d3e203436303330.roa (hash: ZqAYiu/koAeNsoyjhjEI/IMs3ALOlSSQoYQ1BRd+P1g=)
41: 3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (hash: 2Ix9NBX4ryTwqueIaz6deDkrg5ibNpli+8/f+eL7h/o=)
42: 3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (hash: df8xcJtq0OjCMROhoKXLPGgNOi+tmSvnEinNpF80Ac0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5f:fa:d4:d3:de:be:5a:e1:30:91:b5:f1:74:a1:92:0a:57:7e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: Jun 2 13:36:48 2026 GMT
Not After : Jun 3 14:05:48 2026 GMT
Subject: CN=88F44350E65894A40653158BFB2B366BF4485D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:40:73:ae:2d:d2:a3:23:47:e1:cb:a8:45:
3d:dc:14:cb:41:1f:89:62:fa:05:4a:c7:f5:76:a1:
ea:41:38:aa:c7:ab:3c:9d:eb:9a:5f:3d:1b:d7:ae:
9e:81:f2:cc:e2:a7:e1:03:3f:53:a6:63:ca:8b:66:
b8:fd:2d:e0:cd:30:ae:b5:86:ce:ff:16:94:8b:61:
5d:c2:5a:25:e0:9b:f5:82:a4:5b:96:46:bf:ee:dc:
92:63:5a:98:7c:08:d6:f5:d9:ec:f8:64:ac:38:05:
3f:3e:b6:4e:5e:79:a5:03:c9:b0:78:32:11:82:e9:
ce:86:10:14:aa:16:eb:e9:0c:dd:fe:fb:53:37:38:
53:38:9a:79:00:df:08:14:10:5a:f4:03:ef:c4:e0:
bd:d6:42:a6:98:dc:f5:a7:f4:56:b0:e4:29:67:76:
ec:5e:f9:0d:5a:ce:17:f2:4f:26:d7:c5:0d:26:59:
17:e4:d1:25:dd:79:85:00:9a:73:dc:f4:d1:cc:c3:
a7:9a:72:c6:4d:ea:6f:f2:4e:0c:32:1e:ca:6b:20:
92:db:f0:35:9a:98:2e:ed:a6:82:c4:6e:b6:57:a2:
e2:30:89:f9:55:c5:43:91:15:2e:11:66:bc:c2:5b:
88:07:82:f1:cd:b4:16:20:81:51:52:1f:14:2a:b6:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:43:50:E6:58:94:A4:06:53:15:8B:FB:2B:36:6B:F4:48:5D:12
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1a:e5:40:eb:71:58:57:13:a1:b7:89:b1:c1:5b:b4:ce:de:
4d:5c:b3:10:8c:f5:50:74:70:5e:19:73:40:bf:4c:67:f0:33:
cb:db:fd:ac:ef:ca:7b:6f:b3:e6:8c:74:cc:e6:42:02:8c:eb:
fc:2a:ac:16:21:d0:e1:71:b5:be:44:dd:b6:bd:66:0c:29:18:
c6:e0:a6:09:96:ba:bd:d1:d2:2f:21:6d:17:bb:41:71:d2:fb:
e3:b3:5b:8c:4c:b9:31:8f:8e:a5:e3:d0:1c:92:12:78:6b:f8:
3f:bf:12:e0:b5:35:f2:9e:d7:b4:b9:13:18:da:a3:10:33:fe:
f6:e7:5c:eb:e6:c2:f0:6f:a7:9e:cb:97:a4:79:39:f9:61:17:
aa:7f:14:63:49:23:cb:0c:04:5f:99:53:9a:8c:46:37:78:68:
2f:af:f9:90:8b:5e:5e:0f:c7:e5:38:20:5c:e3:bb:5f:c9:35:
a9:84:bc:35:75:81:0f:81:05:59:b8:27:16:62:c8:83:0b:7b:
58:e6:89:e7:8c:17:1a:2d:7e:8d:e2:a7:4d:84:bb:ac:9a:f0:
7b:1f:ec:1d:c6:2d:bc:bd:e6:50:4e:47:5a:43:9d:f7:6f:6f:
be:92:ad:14:a3:08:8f:c3:85:56:1e:24:33:33:17:bb:09:87:
b4:36:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:38 2026 by rpki-client