
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
File: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft (raw, json)
Hash identifier: IHxL0XzXpvWkcdprBkhh5uJwfIWNE6LYxxYzQxhk608=
Subject key identifier: D0:AD:6D:46:E1:EC:51:15:15:DF:BE:69:02:B4:06:55:C2:31:05:C0
Authority key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E
Certificate issuer: /CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E
Certificate serial: 562DE5E4A343A9BBB91330FA1F39FF31EFC95780
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 22:06:13 +0000
Manifest this update: Wed 16 Sep 2026 22:01:13 +0000
Manifest next update: Fri 18 Sep 2026 00:15:13 +0000
Files and hashes: 1: D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl (hash: FQumv5B0DygBFS6vaJ/v4o63ApfrFC4j49ZUDy0b65E=)
2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: 50gojjHGXgJ+6nXVYxXceIc5Q4+LdUoXKFR2P9HxySs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl
rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2d:e5:e4:a3:43:a9:bb:b9:13:30:fa:1f:39:ff:31:ef:c9:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E
Validity
Not Before: Sep 16 22:01:13 2026 GMT
Not After : Sep 18 00:15:13 2026 GMT
Subject: CN=D0AD6D46E1EC511515DFBE6902B40655C23105C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:03:4a:24:89:3a:b5:7f:14:b0:ba:eb:8f:
f0:ef:cf:37:b0:99:cd:4a:d9:96:40:d1:cc:2c:58:
c0:a4:49:18:e7:5e:90:51:06:98:17:b8:4c:0c:93:
15:90:0a:4d:d7:dc:c5:36:23:51:ff:b0:78:d7:5c:
5a:10:69:6c:eb:32:99:23:7c:11:cd:ad:11:e4:a4:
23:41:c1:01:6b:0c:fa:91:84:36:1c:32:be:34:74:
a4:d4:3a:d3:50:f0:2c:22:d3:7c:37:a9:db:bb:0c:
89:d0:0b:74:0d:33:c7:02:23:61:0b:5c:86:71:d3:
3c:c7:97:08:08:76:29:3a:57:02:c5:b4:37:10:73:
8f:fc:6f:de:42:3f:8c:4c:eb:24:27:c2:68:7e:fe:
6f:f0:12:a7:58:4c:18:d0:1c:75:57:8f:a3:ac:53:
85:ea:16:ba:af:04:04:e9:44:a4:29:aa:af:c1:38:
7d:85:92:ab:8f:be:5d:62:f9:81:ec:84:6c:55:25:
eb:34:11:67:b5:07:46:41:33:5f:f0:e3:f0:5c:c8:
95:a8:16:3b:c5:d8:e6:ad:bb:74:7f:02:fd:84:8b:
68:73:fd:78:8a:7c:6b:23:df:a4:7e:23:ea:db:f0:
b6:24:e3:2c:55:18:31:7f:80:ad:ce:50:03:47:df:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AD:6D:46:E1:EC:51:15:15:DF:BE:69:02:B4:06:55:C2:31:05:C0
X509v3 Authority Key Identifier:
keyid:D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fa:d6:e1:19:ee:c4:fc:4f:8c:35:9c:d6:a5:ca:08:ed:bd:
4c:f1:5f:f5:6a:c2:80:a3:10:53:c5:d6:d3:38:c9:ea:c6:8d:
c2:e5:bc:f4:d2:1f:1f:80:8d:89:40:ab:83:fd:8b:1c:3f:90:
f8:38:63:cc:f2:06:24:fd:dc:aa:76:be:c3:a4:2e:ed:c8:86:
3e:ca:c4:a7:d9:6e:b5:8b:3c:60:14:3e:a5:97:f3:41:2d:c5:
61:e3:8d:98:51:ab:8c:7a:99:05:fb:44:25:64:34:0f:71:7f:
57:91:b5:c3:87:13:c1:6e:0f:14:5b:84:46:c3:bc:34:5c:9f:
d3:db:e9:79:29:81:ba:b5:05:6a:a8:19:9a:4f:b2:32:ad:d4:
d0:35:60:9e:cf:d6:58:35:30:35:ff:ec:33:04:72:8f:68:8f:
ec:3f:84:04:c4:e7:f2:12:91:a0:e0:2f:d0:5b:b7:d7:7c:9a:
a3:fc:16:0c:bf:e7:94:c5:47:aa:e9:fb:f0:ab:0d:e0:b8:86:
ed:ba:b8:24:fd:f7:45:58:76:61:2d:bd:e8:aa:8c:95:25:1e:
8d:7c:a0:79:f9:a6:58:61:2c:f8:76:41:75:82:3f:df:24:37:
9f:63:6e:9f:6a:bb:5b:a4:eb:be:ba:d9:2a:1c:45:65:63:f6:
22:99:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:56:58 2026 by rpki-client