
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json)
Hash identifier: lwWVNk7HX4J8lqkngPhL1P+R6pS/+AXoyjFoRyopm6c=
Subject key identifier: A2:42:77:92:71:D8:3D:F8:ED:AF:FB:CB:E5:4F:E3:AE:03:30:84:6A
Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Certificate serial: 6F93D4C6EB9144C23F88E0C123F3B72E40321756
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 03:33:34 +0000
Manifest this update: Sun 15 Nov 2026 03:28:34 +0000
Manifest next update: Mon 16 Nov 2026 06:21:34 +0000
Files and hashes: 1: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=)
2: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: /tj1jx2cQao1aA+o5O2w+DNsHB0PTLiKOB5uuV4jBDk=)
3: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=)
4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=)
5: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=)
6: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 06:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:93:d4:c6:eb:91:44:c2:3f:88:e0:c1:23:f3:b7:2e:40:32:17:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Validity
Not Before: Nov 15 03:28:34 2026 GMT
Not After : Nov 16 06:21:34 2026 GMT
Subject: CN=A242779271D83DF8EDAFFBCBE54FE3AE0330846A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:08:1d:d8:d9:29:32:db:32:46:e8:70:1a:
26:63:6b:27:63:80:29:d9:ea:c1:db:a7:99:e3:dc:
e5:89:70:72:b2:af:a3:8b:45:ea:d9:39:72:b9:08:
53:e5:6d:85:14:74:1a:4f:af:70:1d:cc:4c:8f:d5:
39:e0:02:a1:24:65:cb:46:63:6b:ab:1a:9a:43:17:
ca:d6:73:91:aa:ac:d2:de:68:89:ca:d6:87:d0:63:
83:89:a9:f2:8e:c1:5b:e8:71:ad:22:fe:94:0c:0a:
b6:1d:93:61:5d:5f:0d:b1:c3:bb:9a:18:25:20:6a:
e6:bd:79:03:81:22:4b:0b:b3:c4:df:4b:c2:22:85:
18:6d:37:49:ca:00:fe:54:54:bc:be:6e:ef:01:c2:
27:f6:16:ce:a3:70:65:81:a3:ee:05:7e:b7:0a:6f:
cd:46:15:d7:04:5c:8c:69:39:5f:6c:04:e3:b3:ab:
98:4e:ea:35:43:8c:de:68:b7:ae:6d:4e:23:7c:8c:
85:76:8c:e3:01:8c:51:12:15:d3:90:25:ab:0f:eb:
09:d8:37:dd:d8:15:c2:92:a6:a5:1b:fe:bd:ce:63:
ff:9e:38:e1:4c:9b:44:52:63:7b:32:c9:10:1c:3e:
91:d9:da:31:3d:d1:b3:f4:bb:6b:02:ba:1b:01:a6:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:77:92:71:D8:3D:F8:ED:AF:FB:CB:E5:4F:E3:AE:03:30:84:6A
X509v3 Authority Key Identifier:
keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3e:74:fc:5d:ff:31:b1:17:36:dd:4b:0e:3f:d1:9c:96:2f:
08:74:ea:b5:ae:26:2a:c1:5a:bb:1f:b6:c4:21:db:11:0e:b5:
7f:bf:0a:b4:47:ef:ec:9c:86:eb:e4:3c:22:e0:f2:d7:be:02:
8a:c5:c5:c9:60:d2:fa:2a:fa:50:20:ef:7f:ef:1e:49:99:6f:
3d:95:53:42:db:af:21:4c:1e:0c:94:c9:1a:5c:da:47:78:d0:
80:04:4f:15:84:44:17:59:74:c0:f1:c8:b6:d7:dd:ec:6f:b1:
fe:48:3c:97:b0:96:2e:0d:ae:90:4f:30:9a:34:7d:8b:a3:71:
00:59:e1:86:3d:5a:13:71:4c:c9:d0:48:5c:55:65:bc:28:ae:
8c:09:39:42:c5:38:17:a6:ee:2f:91:55:57:e9:77:11:1b:d9:
ee:ae:37:5d:df:3e:2e:c1:4c:42:bc:77:5a:6c:68:33:77:ff:
d9:e4:3f:e8:6c:3c:c3:d3:50:55:d2:e3:d8:a8:d8:b5:fa:3f:
da:17:0e:0e:22:ce:98:55:83:09:28:82:6c:c7:a0:f6:0f:82:
5b:34:66:a6:f9:51:93:8e:d0:32:82:88:0e:de:0a:1c:7f:0b:
45:d8:ec:18:52:bf:70:83:4e:b0:d7:0a:20:6b:8d:a3:97:75:
70:ae:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:10 2026 by rpki-client