
$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
File: 0BA4160695EA940C660FFE532DE277E48EEAA80C.mft (raw, json)
Hash identifier: XGQdOLwammR0Lo8qZVQOLCJazGMjHNI38vU5emTXih4=
Subject key identifier: 56:AE:06:D5:A9:3B:9B:F9:78:66:BD:8F:F8:D0:E6:89:F5:50:87:16
Authority key identifier: 0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C
Certificate issuer: /CN=0BA4160695EA940C660FFE532DE277E48EEAA80C
Certificate serial: 6A1C86478CD7FBBBF8261E45AA801C762581C9C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
Manifest number: 41
Signing time: Sat 20 Jun 2026 05:00:53 +0000
Manifest this update: Sat 20 Jun 2026 04:55:53 +0000
Manifest next update: Sun 21 Jun 2026 08:14:53 +0000
Files and hashes: 1: 0BA4160695EA940C660FFE532DE277E48EEAA80C.crl (hash: UxzrlGY0v1g1OgvRbNRFyboDGUtmMw2fUkH237ciXZM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl
rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 08:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1c:86:47:8c:d7:fb:bb:f8:26:1e:45:aa:80:1c:76:25:81:c9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BA4160695EA940C660FFE532DE277E48EEAA80C
Validity
Not Before: Jun 20 04:55:53 2026 GMT
Not After : Jun 21 08:14:53 2026 GMT
Subject: CN=56AE06D5A93B9BF97866BD8FF8D0E689F5508716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:38:4c:75:09:25:64:71:54:05:2d:76:2f:
ab:a3:10:bb:fe:3f:52:53:51:17:ad:4c:1d:0f:59:
a7:02:64:85:e8:6a:b0:ad:15:41:90:40:bf:66:0b:
55:45:8b:a2:a8:e0:14:0d:f9:06:26:3b:24:48:bf:
d8:85:11:34:81:d6:a8:0b:14:0c:46:8b:dd:c7:aa:
81:5b:64:30:a4:0c:20:bb:63:c3:b4:b1:ff:92:c7:
43:26:40:6d:7a:17:ab:cf:6b:cf:9e:1d:f9:7b:c6:
b2:cd:ce:1e:c8:73:83:85:d2:ef:84:e6:79:34:ef:
44:bb:d6:82:0e:d1:a1:69:c2:a8:f2:22:a3:41:21:
dd:22:5b:e7:a3:a6:b3:45:40:90:5e:4f:ee:23:fa:
77:cd:40:d9:17:bb:2a:c0:0a:6d:8a:76:b1:01:c1:
0d:c3:a3:32:56:5d:05:ee:52:8a:90:eb:21:01:62:
96:a9:c4:f3:0b:ca:dd:74:0d:ab:f6:73:7b:22:5a:
cb:8b:93:c5:29:96:c9:96:a8:fd:53:39:81:5b:1a:
ee:b2:6e:4f:27:a3:db:e0:d1:69:25:57:e1:01:67:
c6:3d:57:b7:ee:7b:77:97:8e:2f:8d:2b:d1:00:5f:
29:55:ba:2e:9c:ba:71:69:3a:f5:ab:a2:e8:92:06:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:06:D5:A9:3B:9B:F9:78:66:BD:8F:F8:D0:E6:89:F5:50:87:16
X509v3 Authority Key Identifier:
keyid:0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fb:7c:02:2b:ff:a6:fa:d1:85:0c:b5:65:e6:12:42:80:05:
32:d9:d8:85:02:25:64:b0:fc:af:61:7f:1e:82:14:fb:32:bd:
cf:a2:82:85:0c:94:6b:36:e8:96:df:a7:a4:1a:f5:ce:f5:f1:
2f:9b:0d:ab:b5:7e:9b:1f:3f:8c:17:98:2a:86:72:1a:c1:b2:
ac:7f:f3:f9:47:c4:e6:8b:26:dd:fc:cc:3f:2e:72:e1:3c:62:
c6:a1:06:6f:60:0c:ba:44:aa:e8:a9:81:2f:a7:c2:ad:01:50:
fe:73:08:19:a7:00:e1:4e:f6:00:0b:c4:be:9b:c9:85:80:14:
d9:84:49:42:49:ad:22:22:ef:ce:30:97:cd:42:c7:90:11:60:
7e:5e:b9:6f:43:17:a4:3f:e2:3a:3e:ef:78:cb:0c:4e:e3:a8:
ac:8a:b5:ad:60:4b:39:94:17:6d:a6:6f:72:a4:0d:21:a0:62:
10:d1:35:f5:f8:73:c4:8c:a6:97:f2:ef:e4:27:45:fa:0d:23:
fe:f9:ea:9a:fb:40:1e:0e:9c:89:d7:05:be:a8:a7:44:3f:17:
a5:e9:78:97:74:b4:b4:c2:ff:2b:53:10:f9:86:71:09:47:71:
9b:72:f2:bc:c4:93:f1:c4:0b:08:73:95:f9:67:0c:e5:fd:d5:
3e:8a:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:35:43 2026 by rpki-client