
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json)
Hash identifier: CcP0Ay1PxYDCaiYdDiCvvUlwJ7uqk9t6mMtWDXo+qAM=
Subject key identifier: 66:C4:8D:3F:7F:34:90:7A:47:1D:3F:09:6D:CC:A3:ED:51:CF:6B:11
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial: 32C2DA2CABDBA7C9BBE3789A0860004AA3F3D0AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
Manifest number: 04A7
Signing time: Fri 06 Mar 2026 09:31:31 +0000
Manifest this update: Fri 06 Mar 2026 09:26:31 +0000
Manifest next update: Mon 09 Mar 2026 20:33:31 +0000
Files and hashes: 1: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: Vb5cnFC6Wpj880gEVaQTtTKJLSX6B7dTQEwn1sKGOMQ=)
2: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: I+1VVYj6jtqkdnEHUu+yoBW+N9Gr17EVEw+bCbgU0gI=)
3: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: sq/0fvOFms0qFpGRWg5mX5JvD7f9RJUAzIkpMRNMLNE=)
4: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: 7pHManaPZkFlhfeOFk5WWLbfjaz9rFOW48sliqyfNRA=)
5: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: m2OZ4XMcLl0P7HlEaALJYW+kWpR85aBYZcawB+LS50Q=)
6: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: HwyLb5wrnXQ2TUn7JAl0tKf5RhJTtuv+1v09MJtniBE=)
7: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: 2iQsY2shTRUgO13U5IiTRn4DaQNWjPojhHqwN4kzhnY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c2:da:2c:ab:db:a7:c9:bb:e3:78:9a:08:60:00:4a:a3:f3:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Validity
Not Before: Mar 6 09:26:31 2026 GMT
Not After : Mar 9 20:33:31 2026 GMT
Subject: CN=66C48D3F7F34907A471D3F096DCCA3ED51CF6B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:f2:76:d5:0b:0e:25:8f:62:38:a4:e2:4a:
dd:e1:95:14:a9:47:79:f5:10:e4:6a:fe:a9:bb:a6:
bb:c8:c7:14:ee:16:15:57:28:a5:f7:92:df:ca:ef:
9b:50:54:d4:a6:d5:77:81:3f:86:4b:c5:cc:65:3c:
31:5e:72:77:9c:f2:ab:0f:85:a2:d4:45:9b:ce:cb:
b1:19:79:a5:04:ca:e4:ee:56:3b:be:65:d4:8b:57:
89:ef:c8:ec:10:5e:a5:7f:5e:6f:f5:ee:37:2c:47:
26:d5:e6:55:52:aa:2e:9a:c6:78:b3:aa:02:4e:c8:
28:e0:56:3f:fd:d9:4a:05:3f:47:4f:6a:77:ec:a2:
e8:3a:39:11:d2:64:1e:a7:61:20:e0:38:c4:8c:b4:
c7:2f:45:7e:4e:32:d4:8d:0b:33:9f:a3:9e:a4:22:
16:9a:b5:f7:cc:6b:0c:5e:75:2b:bb:f0:fa:e7:bf:
56:44:f6:3b:24:cc:c0:c4:ff:a1:46:d3:1a:88:e4:
e0:1c:a4:4c:da:02:21:22:2e:3d:0c:86:dc:82:51:
5e:a4:bb:97:9e:a7:04:2f:e1:92:d5:f1:ae:0c:00:
26:94:93:7a:34:c5:43:05:43:71:f8:c4:77:a7:c9:
5a:9e:c5:fc:d8:79:66:f2:52:b4:b1:67:34:42:4b:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:8D:3F:7F:34:90:7A:47:1D:3F:09:6D:CC:A3:ED:51:CF:6B:11
X509v3 Authority Key Identifier:
keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:88:0c:08:c0:4d:ec:80:5a:c6:d5:3c:39:5e:8f:15:cf:
15:99:f2:5d:8f:78:ae:e3:dd:89:8c:11:95:09:f0:e1:50:64:
05:fc:b4:03:99:01:cc:b6:1f:ef:f2:5a:41:d4:a6:3f:4b:ee:
71:fd:59:03:a8:2c:8b:c2:ce:3e:dc:b5:c0:cf:44:a4:0a:37:
83:fe:af:d0:56:08:13:db:18:ea:b9:ba:5f:17:19:0e:73:26:
76:1b:34:bf:d4:c5:64:0b:ff:59:fa:8a:a4:8f:41:29:9c:08:
e9:87:ac:d0:66:9f:37:e1:cd:fc:76:4f:42:69:ac:29:88:db:
5e:6f:44:c5:ad:6a:ed:f2:53:e1:fb:02:92:36:39:3e:3f:f4:
4a:1a:92:8c:c9:a4:49:b4:80:97:eb:29:19:2f:bd:fb:c2:e5:
f3:61:5e:e8:7a:01:41:d1:cd:b9:2e:c2:65:8f:02:1f:24:86:
08:d5:9c:a8:c7:55:aa:e2:df:3b:44:8a:3f:35:60:ec:88:cb:
b4:dc:ae:f0:a8:76:88:a4:96:e3:bd:e0:b3:19:1e:7d:3d:7e:
72:29:2e:c3:4b:41:4d:89:8e:d1:0d:b6:62:e7:b4:77:bc:7f:
2f:43:8a:36:d6:f0:58:62:41:0e:45:50:cf:05:fc:8b:ad:09:
71:d6:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 18:18:44 2026 by rpki-client