
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
File: 06083035B4010CEC337EE26F5EA15A04DD209219.mft (raw, json)
Hash identifier: m0yXh960efpYWYdDjQV6SWVC/lLcH02mPX7eD+TkUJE=
Subject key identifier: 1C:21:40:2D:4E:72:4A:33:CF:54:EB:61:BF:87:2B:B0:38:91:BC:A1
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial: 62C7B5F9378DD19942FF1564E97253E412990E05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 15:33:22 +0000
Manifest this update: Wed 16 Sep 2026 15:28:22 +0000
Manifest next update: Thu 17 Sep 2026 16:03:22 +0000
Files and hashes: 1: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=)
2: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=)
3: 06083035B4010CEC337EE26F5EA15A04DD209219.crl (hash: xJAfU7kZ6jW5RTY6D7uq4f8OyP/35a0j1YRdN3TjMbQ=)
4: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: PCIebsIX9snQ/16KTknT7n3JoWYoLSW34RbZ1h8yq10=)
5: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c7:b5:f9:37:8d:d1:99:42:ff:15:64:e9:72:53:e4:12:99:0e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
Validity
Not Before: Sep 16 15:28:22 2026 GMT
Not After : Sep 17 16:03:22 2026 GMT
Subject: CN=1C21402D4E724A33CF54EB61BF872BB03891BCA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:da:3b:0a:98:ea:66:7c:32:13:bf:81:d6:
35:a1:8f:2e:59:ef:5a:43:bc:22:99:e2:0d:85:9c:
ab:9d:d2:0f:fc:87:69:5e:fe:20:a6:3c:a9:76:d6:
cd:1a:e6:7b:f6:0e:f1:4c:6e:b4:19:e3:a8:f1:e7:
3d:fe:08:7b:c9:a2:a5:0f:c3:07:3e:e9:a1:ee:97:
b1:23:ab:a6:a6:de:e8:aa:27:b8:39:61:7d:9c:46:
bb:3c:87:59:90:6e:df:b6:4d:32:a5:fe:28:fa:ff:
5c:56:53:2f:10:67:57:f4:a7:bf:43:20:d4:96:b0:
55:a9:f7:08:27:e3:80:ac:c4:b7:47:34:45:54:3d:
99:29:a6:08:70:ca:84:7a:b0:ca:ab:ea:6d:79:f8:
14:f5:35:56:31:01:b0:94:4a:c1:79:51:1b:f8:fa:
07:e1:e7:6e:37:3d:ed:d4:67:64:85:44:81:6b:fe:
9a:dc:2e:fd:8c:f6:16:78:e5:82:93:88:7a:f7:8f:
a4:4c:75:30:68:f1:9f:25:76:27:ab:59:14:9d:7a:
2c:00:d3:5c:33:8c:52:fc:78:6e:d4:3e:d8:9b:cc:
fe:6b:4f:36:5e:d0:07:e0:dd:2e:80:64:89:e6:4d:
53:3f:06:a5:cb:00:4d:dc:54:ca:79:e9:1b:c9:18:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:40:2D:4E:72:4A:33:CF:54:EB:61:BF:87:2B:B0:38:91:BC:A1
X509v3 Authority Key Identifier:
keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:62:cb:31:7e:fd:94:7b:d8:b7:66:02:85:79:1b:5a:c5:
d2:7d:be:84:a6:fd:50:96:61:34:44:92:de:3d:84:22:49:4e:
d0:95:29:1d:ce:cc:fa:d1:5e:a7:53:5e:8b:e6:36:60:d9:a5:
22:75:ae:ea:e6:77:cb:53:34:85:b9:f1:d8:3f:89:49:a0:60:
eb:72:a3:97:72:e6:7d:69:31:7a:73:69:c5:a1:3f:6c:ca:bf:
96:9a:25:d8:d4:4e:93:17:e6:de:e3:90:cc:ef:d6:84:9e:f8:
d2:6b:56:f0:76:37:43:a0:f6:15:a5:36:e9:4f:21:a0:6f:6b:
3e:58:bc:08:0c:47:26:3f:13:d5:2a:14:5b:f3:82:61:a6:19:
0c:45:21:4c:b5:7e:98:7f:4b:ac:e2:e4:55:cf:6c:1a:3d:ee:
79:4d:a1:16:ea:00:fe:ef:0a:44:4d:7b:ea:d1:4d:7b:07:6a:
73:11:b3:76:4e:b0:01:4f:ff:68:8e:06:8f:c0:dc:69:db:17:
15:f7:bf:0b:06:97:31:dc:38:6e:44:69:17:7d:94:47:54:c5:
38:32:6c:58:c9:4e:95:39:32:a4:57:40:d1:b2:fb:7a:79:9e:
04:88:3b:57:ed:29:ea:f7:1f:b3:68:4d:c9:20:b1:d5:6b:91:
51:c8:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:23:29 2026 by rpki-client