
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
File: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft (raw, json)
Hash identifier: 1UsAL7lhpIf4+oaNIdjQdTin2ldvu9tsZ3KLGclcYLA=
Subject key identifier: 1C:BD:AF:49:E7:D7:14:19:5B:42:17:2C:D3:49:1D:7B:46:05:D1:97
Authority key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E
Certificate issuer: /CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E
Certificate serial: 69F53C3DF093E224B46DC2FEFFAB1EF92A55796A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 01:26:25 +0000
Manifest this update: Wed 03 Jun 2026 01:21:25 +0000
Manifest next update: Thu 04 Jun 2026 05:02:25 +0000
Files and hashes: 1: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: 50gojjHGXgJ+6nXVYxXceIc5Q4+LdUoXKFR2P9HxySs=)
2: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl (hash: 0Bp+LX5V9ltnBt+l6zScIqTPsEfWITJU0GAHXxZPXbU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl
rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 04:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f5:3c:3d:f0:93:e2:24:b4:6d:c2:fe:ff:ab:1e:f9:2a:55:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E
Validity
Not Before: Jun 3 01:21:25 2026 GMT
Not After : Jun 4 05:02:25 2026 GMT
Subject: CN=1CBDAF49E7D714195B42172CD3491D7B4605D197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:85:3e:40:97:2d:23:9d:ef:60:74:1e:bd:
c6:46:a9:44:09:a4:1f:d4:cc:19:c4:1e:a2:f3:ba:
ff:d3:4f:2e:be:1e:4b:95:d5:56:e3:17:94:ab:56:
3b:45:ef:5a:0f:d0:1a:45:f5:50:cd:fa:56:70:6f:
fb:24:3d:3a:4b:03:86:9d:89:ab:69:24:4d:b8:7b:
8d:6d:95:b9:19:73:45:a6:6a:e4:70:19:6d:e5:78:
f5:a1:02:8e:a3:23:fe:4c:19:4f:fe:50:bb:1c:ad:
0d:b4:f6:94:ad:6b:d8:f7:0c:f3:6a:b5:73:9a:98:
6c:2a:38:e7:aa:fb:31:29:c4:75:7b:0b:1f:47:29:
c9:56:5e:9c:30:ad:1c:24:a9:95:52:ca:42:cb:ea:
1f:4f:75:e7:91:23:35:75:13:4b:98:46:65:4e:94:
16:54:4a:ab:35:2b:c2:48:99:69:e6:4a:bd:80:65:
36:13:de:f0:30:ca:12:ba:94:96:da:9c:83:a1:9a:
b5:c1:cc:a4:49:58:ec:70:22:d1:4d:07:0f:d4:80:
6e:94:f2:d3:83:8b:76:ad:38:2d:4e:fb:43:5f:62:
c7:b1:05:1e:ff:80:89:76:f8:49:d1:81:6f:33:35:
ab:4b:91:66:c3:dd:e8:3e:e9:5e:81:ce:03:43:bc:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:AF:49:E7:D7:14:19:5B:42:17:2C:D3:49:1D:7B:46:05:D1:97
X509v3 Authority Key Identifier:
keyid:D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:64:4c:14:98:c3:6c:e4:a2:8e:9e:9d:dd:a1:35:05:2d:b0:
29:97:9b:a3:8a:cc:2b:ab:ea:30:36:3c:fb:7f:d3:be:3a:4a:
2c:40:d7:86:8b:d3:0c:e7:51:2a:f9:61:f0:05:16:c5:40:c3:
27:6e:e4:f0:ae:18:52:3f:4b:f7:f2:99:fe:28:05:da:99:a8:
c7:59:7b:a4:c1:5d:d6:c9:f4:ce:c2:ed:e7:42:6d:37:7c:91:
f1:20:7a:6e:d6:34:94:94:93:11:c9:a0:ad:97:47:77:c6:9d:
2d:3d:c4:3c:5c:9e:e5:3b:d7:b1:0b:55:80:17:e2:92:21:e0:
0a:45:ad:b5:31:0c:5b:37:f9:73:e1:4c:82:8c:af:7f:61:c3:
a3:ba:95:8f:96:0b:2b:e0:65:58:e3:b8:e3:e8:95:77:aa:8a:
8a:90:8e:4a:09:9e:a3:db:18:f8:de:3b:35:79:f6:8a:04:4c:
3b:9e:58:fc:02:84:50:d1:be:ff:d1:f4:ba:2c:47:43:ec:26:
33:e2:39:3d:3a:00:52:d8:06:19:c0:b6:d1:99:24:c1:98:11:
a3:10:26:4a:b0:19:8b:e1:27:3b:8b:96:84:64:83:42:25:61:
f4:a9:81:1b:47:27:67:ce:e8:b1:04:37:1d:f3:d0:6c:c6:9e:
f0:86:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:53:49 2026 by rpki-client