
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
File: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft (raw, json)
Hash identifier: PoP54L9/SCPhHebtW6h48ND167U9UjoyHR0cuOUNC4U=
Subject key identifier: CA:D6:3D:AF:71:21:01:53:3D:31:8A:27:91:94:F3:3C:AC:24:C1:05
Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Certificate issuer: /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Certificate serial: 1D0BCB51B790E8C22D0F5EF2633C64F270B7AAFB
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
Manifest number: 12B6
Signing time: Mon 27 Jul 2026 04:17:08 +0000
Manifest this update: Mon 27 Jul 2026 04:12:08 +0000
Manifest next update: Tue 28 Jul 2026 05:18:08 +0000
Files and hashes: 1: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl (hash: DlTaI6ajxRnMx1mLYQrmJZGqYayuUQ36B8Lv95X0ZAo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0b:cb:51:b7:90:e8:c2:2d:0f:5e:f2:63:3c:64:f2:70:b7:aa:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Validity
Not Before: Jul 27 04:12:08 2026 GMT
Not After : Jul 28 05:18:08 2026 GMT
Subject: CN=CAD63DAF712101533D318A279194F33CAC24C105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:6b:0e:dc:bb:43:ae:bf:d7:c3:17:eb:83:
80:44:01:83:8d:3d:8a:44:42:a0:85:94:06:81:fb:
71:6e:38:c3:77:c7:15:0f:cc:55:c6:d4:ab:46:49:
83:cc:93:b5:11:dc:cd:4a:ee:a1:b2:da:b3:d9:af:
44:6f:5b:cf:c6:da:bc:f2:eb:d0:d4:b8:4b:70:0f:
fc:1b:01:00:c4:97:e7:89:7b:6e:f2:36:fd:6e:6c:
bd:45:2b:61:f7:db:f5:56:71:3a:af:a6:f5:27:5f:
a4:0b:e3:f3:2e:bf:d5:dc:ca:eb:ff:f0:fe:88:bb:
2d:0a:bb:f2:a7:e6:d8:1a:c2:3e:d2:0c:c9:c2:79:
f7:58:b8:62:03:7b:ff:e9:ab:d3:c9:b0:5f:89:5a:
62:a3:ba:6e:2a:66:1c:81:e9:aa:c0:7c:35:c5:f6:
de:40:53:a1:10:bd:98:f4:24:c4:a4:b8:5f:a4:52:
91:f6:e1:08:1f:b2:c0:8a:f8:ce:f5:63:8c:ee:38:
37:89:ce:fb:c4:98:4e:aa:91:8e:2d:77:d3:e5:8b:
86:39:47:16:27:ac:b5:92:f8:c2:50:08:47:9e:79:
2b:37:93:f7:69:ea:cd:fa:ec:49:7e:1b:f5:dd:c3:
81:ea:2f:2d:ca:ec:d6:b0:95:88:09:a8:8f:e5:eb:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:3D:AF:71:21:01:53:3D:31:8A:27:91:94:F3:3C:AC:24:C1:05
X509v3 Authority Key Identifier:
keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:52:28:9f:47:a7:7b:2a:4a:f8:b7:16:62:93:96:23:3e:95:
2e:4c:95:67:ba:76:97:f3:52:7e:a3:05:11:f1:14:aa:5f:11:
99:ac:a5:f1:d3:b1:06:7d:94:1e:ba:89:3b:73:8b:ff:ca:28:
df:b6:2b:c5:15:c3:e4:c2:9a:83:7f:c2:ca:6f:86:26:8c:5c:
6f:bb:58:33:2c:58:26:c6:fb:43:ca:9e:5a:f6:f9:83:c8:2b:
83:7a:c8:5c:7a:b7:87:e0:f3:98:d2:fc:6b:35:82:71:42:7e:
6a:95:d5:7a:41:de:2d:a6:d5:dc:23:57:e3:84:e7:78:78:55:
68:9a:44:88:35:e7:a0:4a:78:46:f0:68:e7:ec:4a:ab:58:21:
a9:b0:f9:0f:52:f4:dc:2f:47:2e:31:ca:67:99:40:4b:8c:ff:
45:16:6d:54:a1:ef:ce:4f:da:8a:d6:3c:b1:bc:f2:da:fd:e5:
fc:ca:9e:da:99:bc:f7:a7:25:f7:e6:10:e5:7a:a1:3a:bc:5f:
fc:45:d3:07:87:d7:a3:e8:19:8e:42:5f:dc:cd:c4:79:08:1a:
7e:be:d7:6e:ee:de:7b:df:f9:01:01:0e:ae:a7:99:1f:ff:e6:
c3:18:32:a0:07:47:bc:cc:a1:9d:18:49:8a:03:c1:2c:a0:3b:
31:ff:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:44:05 2026 by rpki-client