
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft
File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json)
Hash identifier: 0zG/EUkeVHRxItvzJVVq00PsW5Ni2UaoAjx1bS2zTtI=
Subject key identifier: 40:B9:2D:91:C3:41:17:28:56:73:B1:74:13:72:B0:35:AB:4F:CD:C7
Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF
Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF
Certificate serial: 13697FE886ACDFD8215FBFB8BF25B88EE554253F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 22:56:23 +0000
Manifest this update: Wed 02 Sep 2026 22:51:23 +0000
Manifest next update: Fri 04 Sep 2026 02:35:23 +0000
Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=)
2: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: Qj09o9PAg4X/W8NMy/TeLtVrV8AGivbuok7rRGRYrJA=)
3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl
rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 02:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:69:7f:e8:86:ac:df:d8:21:5f:bf:b8:bf:25:b8:8e:e5:54:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF
Validity
Not Before: Sep 2 22:51:23 2026 GMT
Not After : Sep 4 02:35:23 2026 GMT
Subject: CN=40B92D91C34117285673B1741372B035AB4FCDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:36:64:f5:9d:ef:9d:be:27:d2:8a:e2:7c:
e0:cb:92:0a:9f:ff:3b:96:e6:69:b6:57:e3:c3:33:
eb:84:2a:93:f1:49:07:2e:6d:0a:a2:2e:eb:39:f9:
ab:6b:86:7e:0a:a2:47:58:34:b0:2b:90:0c:7e:9e:
a2:3f:83:c9:94:f6:7f:2d:28:3f:34:90:12:52:82:
62:1b:59:a8:4e:fe:70:37:f5:ed:e9:b3:11:6a:51:
70:5d:db:ce:ee:1a:24:bb:4b:a5:03:77:16:f0:f1:
12:cf:be:43:62:b8:56:0b:1e:77:a7:1f:b8:4b:ad:
09:b4:17:f5:6f:ae:1b:03:3f:ef:64:e1:91:df:ba:
6f:20:ca:8c:46:1e:1a:20:9c:73:29:97:85:dd:bb:
68:f8:8f:b9:17:8e:4d:84:29:2c:39:aa:9c:55:e8:
63:9f:90:98:d7:1d:4a:e4:26:40:97:69:a3:3a:d3:
9d:fb:1b:9a:88:ad:23:74:aa:8e:3e:74:d1:55:d3:
fe:ed:a2:02:12:6f:f4:ac:86:64:ae:f6:9e:61:5d:
d1:d3:2a:50:ad:c1:b4:c0:4b:fb:d2:6c:61:15:fa:
f8:ac:cd:f8:2c:0c:11:6c:2e:09:f5:56:76:50:79:
e8:10:fa:71:12:03:be:42:a9:c8:b9:6c:e3:ea:f8:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:2D:91:C3:41:17:28:56:73:B1:74:13:72:B0:35:AB:4F:CD:C7
X509v3 Authority Key Identifier:
keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:78:31:6b:38:a1:4f:2a:2f:e0:4a:bc:b8:68:a6:17:89:
f4:4f:ec:b2:30:b9:1b:75:2d:8d:24:e5:bd:28:60:bd:5b:66:
d6:44:ef:4c:83:20:5c:50:1d:69:8a:e8:86:3a:00:c1:3a:98:
52:59:34:d2:b2:bd:84:d2:09:e2:35:a8:f1:a8:db:dd:68:be:
20:0f:31:b2:70:9f:15:ac:19:ed:81:b0:f4:5d:48:03:b6:aa:
70:29:76:25:99:e0:98:65:30:0e:a3:fa:2a:16:42:3d:04:36:
c5:c8:2b:31:30:68:f3:a1:46:40:ee:a6:fc:14:16:4f:81:c1:
6e:5d:10:28:d5:ab:15:aa:4d:c6:2e:6b:ed:1b:a3:61:e6:9d:
d3:0e:b0:f6:cb:a1:6f:cf:a6:b3:d8:03:61:0a:bf:ed:cb:b1:
ae:24:1a:73:cf:34:94:98:fd:85:8a:29:b7:07:44:bd:3e:e0:
5d:3c:86:ee:96:f5:48:42:b8:8b:da:98:28:4d:91:5a:57:1f:
ce:67:8a:a9:ed:21:9a:72:bf:94:08:c4:04:8f:d5:a2:5a:0d:
c5:09:c0:28:34:07:ef:8d:29:0e:85:e1:18:39:a8:4f:d4:fe:
ad:70:72:dd:fd:f1:5f:c4:bb:69:77:8f:57:2b:a1:5a:64:14:
1d:da:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:17:25 2026 by rpki-client