
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
File: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft (raw, json)
Hash identifier: j54SsemlF/efl0m5ccVQVETQStFzkXSxb/MQzRFSASo=
Subject key identifier: 4A:07:7F:7E:B6:89:7F:85:63:7A:87:D4:92:4B:DF:06:F4:EB:54:B0
Authority key identifier: 06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
Certificate issuer: /CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Certificate serial: B9B4FCDD6E246B29CCD085367CA1D2084F9E86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 18:42:19 +0000
Manifest this update: Wed 16 Sep 2026 18:37:19 +0000
Manifest next update: Thu 17 Sep 2026 20:41:19 +0000
Files and hashes: 1: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: 4qEfAhcwD7rfPzD19j4fQcoIdGMpA7OvU8syRxtutsI=)
2: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: c1IaaPvES86C/ZZ1qO/4DafLyFYnH2TdFMWKivpkZPQ=)
3: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl (hash: Q90YCvnGPrZk7fTw1frC12W2eY0kWaIE3Mdfe12G8Zo=)
4: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: WAD2+w/CJq7TKnjfHAKkYTukDrVBX6bUYx0hl9v//LE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b9:b4:fc:dd:6e:24:6b:29:cc:d0:85:36:7c:a1:d2:08:4f:9e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Validity
Not Before: Sep 16 18:37:19 2026 GMT
Not After : Sep 17 20:41:19 2026 GMT
Subject: CN=4A077F7EB6897F85637A87D4924BDF06F4EB54B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:db:a3:e2:3d:17:76:bb:8d:b5:56:74:ee:
79:54:64:01:5c:76:df:90:08:76:13:66:cf:4f:e3:
bc:c3:24:b3:8a:4b:18:cb:9c:f1:a9:2e:51:d9:44:
76:75:68:0a:53:b6:6a:1a:38:f2:ff:13:01:2d:c0:
0c:82:75:b5:ed:71:16:de:9b:15:14:35:55:7a:e9:
06:49:c3:f9:f7:ac:b2:f8:40:c7:aa:66:8f:53:a5:
89:32:e0:76:af:c0:fd:4e:67:73:99:77:58:80:35:
70:93:c9:fb:a8:c5:68:5c:bc:de:7e:88:9e:24:63:
6b:89:90:d4:12:56:43:ad:24:f5:6c:74:b5:ac:bd:
b8:38:4c:25:46:c4:f3:10:d6:5d:20:bb:f8:1d:d6:
50:b1:6f:1f:17:fb:28:f8:2a:d8:65:1d:23:ca:10:
bd:18:a7:ec:57:c6:9e:81:4f:b9:98:8a:89:57:f4:
3a:56:d3:4a:19:05:a5:43:90:83:5e:a4:2d:cc:47:
78:31:4c:1a:e7:45:a7:12:6e:1f:f3:b4:4b:53:af:
ff:f4:10:3c:63:90:c8:40:4e:34:c2:68:17:38:e7:
e8:6b:21:d3:fe:91:66:ca:e8:6a:1b:dc:13:42:c0:
b3:f7:75:12:17:ee:d6:04:98:84:e8:32:cd:06:ff:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:07:7F:7E:B6:89:7F:85:63:7A:87:D4:92:4B:DF:06:F4:EB:54:B0
X509v3 Authority Key Identifier:
keyid:06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:8f:d7:9b:18:76:64:92:7d:77:71:9e:31:e3:9c:5f:21:
0a:7f:52:32:2f:e5:bc:3f:1d:2a:bb:70:02:5a:5d:3e:57:79:
45:8f:da:53:0f:f9:6e:04:ff:5f:88:1c:dc:11:12:55:a8:7c:
7d:99:3d:13:b9:ed:a3:60:e9:13:82:7b:77:4e:d0:94:55:43:
2e:48:db:d8:65:3b:53:21:22:fc:82:33:6c:4a:11:12:17:53:
58:b5:2b:29:e2:a3:6c:7a:dc:94:3f:25:42:0e:ce:1e:71:2d:
f6:35:75:e1:c6:7a:e4:46:de:f8:28:55:5d:a7:6d:cf:64:bb:
4d:ae:8a:8e:ad:3f:db:dd:84:8e:1d:25:5f:82:b1:f3:db:dc:
fd:67:ac:0d:6a:b6:15:56:9b:45:2f:79:13:eb:e8:73:4d:36:
a0:14:20:3f:96:32:99:20:ee:11:5e:6f:39:70:b6:f2:35:ec:
19:63:47:36:38:c8:0f:86:23:71:50:da:79:56:02:1a:a7:e3:
52:80:e7:27:04:d6:53:53:b9:79:8d:c9:05:95:02:9b:87:d3:
d9:6d:40:5b:e9:1f:07:cc:8c:a3:15:7f:75:51:a0:e4:8b:91:
3c:d4:8e:39:03:54:fe:7d:67:bf:d2:7d:e5:40:6b:db:b2:89:
fa:fb:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:28:15 2026 by rpki-client