
$ rpki-client -vvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json)
Hash identifier: Go/CTc8hg5ntTs969zqNV0yBTFHSh4oRHle/8jYQIZE=
Subject key identifier: 73:B3:56:96:A6:8F:CC:6C:68:0D:3B:FE:EE:AB:DD:49:FE:91:4D:7F
Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Certificate serial: 128B5E8D3F96CF14D5937B54F00B504AD24166DE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 06:02:09 +0000
Manifest this update: Sat 20 Jun 2026 05:57:09 +0000
Manifest next update: Sun 21 Jun 2026 08:34:09 +0000
Files and hashes: 1: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: jyTZ+VGA1IlZ5eegBIe48bw+qtbomHtd+LkEaoS9vDE=)
2: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=)
3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=)
4: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=)
5: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=)
6: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 07:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:8b:5e:8d:3f:96:cf:14:d5:93:7b:54:f0:0b:50:4a:d2:41:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Validity
Not Before: Jun 20 05:57:09 2026 GMT
Not After : Jun 21 08:34:09 2026 GMT
Subject: CN=73B35696A68FCC6C680D3BFEEEABDD49FE914D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:25:93:e1:c3:ec:91:39:4c:a2:d0:c9:4f:
a3:0c:51:b1:b1:69:eb:73:ad:c5:d0:5a:ed:43:af:
fc:a5:4a:56:f9:ab:d2:3c:a0:c0:8e:f1:62:c0:b4:
35:93:0b:4b:4e:8c:8d:d9:7c:07:c9:d0:1a:46:36:
8e:bf:91:dd:63:90:9f:f1:a2:f0:5f:44:d2:a2:26:
5b:b5:ad:92:5b:f3:36:c8:e8:00:ee:ae:e3:e6:27:
43:d0:b1:72:0d:06:76:2c:45:38:0e:12:32:0f:9e:
60:b1:15:13:37:e0:b6:08:a7:d5:e0:0f:10:6e:be:
d5:5a:c3:8e:68:95:90:54:72:64:30:1b:ec:2e:0b:
f2:85:19:f0:7d:ab:7d:85:b0:09:90:a3:5b:18:3d:
ee:9e:77:e0:33:61:c2:d6:44:aa:57:f0:be:c8:4e:
32:a6:b1:47:4e:74:fe:18:ce:d4:b0:d2:0a:1b:28:
74:8d:67:33:87:c8:2f:06:17:f3:1b:86:99:6f:cf:
2e:3c:b3:64:94:0f:83:60:d5:12:9e:e2:75:6a:80:
49:ab:13:7d:0a:27:f3:17:7e:4e:7b:5a:19:50:14:
2f:15:7b:22:c2:05:dc:a0:0b:8d:b9:64:8c:28:2e:
88:83:0c:ec:44:4a:53:78:4d:13:f9:88:c1:c2:92:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:56:96:A6:8F:CC:6C:68:0D:3B:FE:EE:AB:DD:49:FE:91:4D:7F
X509v3 Authority Key Identifier:
keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4f:74:f2:c6:97:01:7a:f3:41:ca:1e:b9:fe:ea:5d:ef:33:
00:b6:b6:42:05:92:34:a7:28:d9:56:8c:14:ef:cc:6a:79:a6:
b5:f2:90:8f:dd:12:65:ad:1d:82:57:cc:ce:df:bd:10:66:64:
13:76:73:96:0a:2f:2e:05:c2:53:42:e3:a5:3f:08:0b:72:68:
d3:21:08:de:9e:eb:11:7c:8f:31:25:51:b9:d7:0a:91:20:7e:
d5:1f:70:a5:96:b3:99:fd:c5:99:f3:37:7e:ab:ad:59:00:19:
0e:0a:bb:64:ae:46:8c:70:aa:40:87:f5:6c:a8:d7:a6:62:bd:
29:9c:85:91:76:84:40:d7:1d:03:cb:09:7a:ac:f5:ef:4c:b6:
be:08:38:d5:a8:23:de:76:2f:0e:5d:76:2b:73:f3:59:92:df:
8d:cd:66:f8:2e:24:5b:c1:dd:3a:4e:b2:33:f0:ed:ba:f2:d7:
4f:05:97:20:39:83:67:14:35:c8:5a:5e:d6:d9:9f:87:a2:29:
07:81:04:7e:2c:5e:8d:02:a1:4e:2b:a6:ca:02:c5:4f:21:e1:
38:21:4f:66:1e:66:b2:e3:2f:ec:7c:0f:67:23:fc:03:e7:0e:
6e:44:74:22:c1:c8:3f:96:97:3f:0c:1e:ac:3d:df:d0:58:a0:
4a:64:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:06 2026 by rpki-client