
$ rpki-client -vvf rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft
File: 0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft (raw, json)
Hash identifier: L3LdkoDTUyi84ohOCIDbwa5vK9pRHUyYfm8CanfvXeU=
Subject key identifier: 7B:1B:58:70:FD:E6:D0:D7:A2:DE:A2:72:00:B6:11:2C:28:C8:23:FD
Authority key identifier: 0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C
Certificate issuer: /CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C
Certificate serial: 2341B3A362299C387244A491210E741501896689
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:44:11 +0000
Manifest this update: Tue 12 May 2026 18:39:11 +0000
Manifest next update: Wed 13 May 2026 21:04:11 +0000
Files and hashes: 1: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: fn14xb7Fet3D9STECs6nLsztZDz4SqE0tmJcaxx1cKk=)
2: 0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl (hash: iVMmqa1ejMVMQ4ZMvrTvWXJdtxcQPkDxSzNl/QfnQNs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl
rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:41:b3:a3:62:29:9c:38:72:44:a4:91:21:0e:74:15:01:89:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C
Validity
Not Before: May 12 18:39:11 2026 GMT
Not After : May 13 21:04:11 2026 GMT
Subject: CN=7B1B5870FDE6D0D7A2DEA27200B6112C28C823FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:e5:78:9a:c3:03:51:f3:91:fc:0d:fd:6d:
23:62:17:a7:54:07:a9:e7:53:6f:70:1e:73:46:c1:
36:10:9d:e6:01:9f:27:cc:f8:41:4d:83:bc:bb:70:
84:28:5c:f1:fe:cd:ac:18:85:07:e7:23:34:df:a8:
fb:c1:8f:d0:cf:6a:f2:0e:d7:3d:6b:cf:66:aa:f8:
28:8b:ba:98:64:fc:f3:14:ad:ce:ff:63:76:a9:cd:
c7:89:5e:14:0c:7d:81:eb:e9:0a:bf:d0:f4:dd:57:
9b:ca:43:f6:7c:e5:59:10:3e:5e:b3:88:b7:1d:85:
f2:8e:9c:ba:ff:ef:0f:60:70:db:a0:34:2f:fa:fb:
83:00:bb:ce:af:1b:47:80:d0:9c:6d:f5:a1:9d:88:
bd:07:36:16:38:31:7d:2d:84:df:2f:71:7c:22:94:
63:94:33:5b:c1:65:34:64:bf:e1:50:98:22:59:e9:
5a:53:30:38:eb:b4:a1:39:37:84:20:8d:65:38:41:
73:12:b7:65:78:a3:c7:11:36:f3:93:0f:6c:c0:4e:
47:28:79:ba:a3:2a:79:23:0d:33:ed:d1:ac:dd:10:
32:13:6f:7a:3a:c8:06:43:38:41:6d:fc:53:49:24:
61:bf:6e:b2:a6:5f:89:11:31:af:d0:f4:a7:78:f9:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:58:70:FD:E6:D0:D7:A2:DE:A2:72:00:B6:11:2C:28:C8:23:FD
X509v3 Authority Key Identifier:
keyid:0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c6:9c:c3:ca:99:e7:16:ca:9d:4d:3c:14:17:fa:4a:2a:74:
81:63:ce:dd:57:bb:7c:32:e4:a9:a5:42:b4:17:d8:d5:be:e5:
fe:ee:78:59:07:de:37:35:22:0f:9a:0b:cf:e7:ca:0f:12:93:
7e:ff:ea:55:d9:54:03:1c:28:b4:df:c2:ed:8a:e2:27:07:76:
4c:f0:5e:b4:24:ef:b7:04:27:3c:11:eb:14:c1:07:d1:d9:9f:
26:d1:ac:e7:50:3a:0c:8b:05:5d:85:ce:9c:d2:92:b6:db:f1:
e0:9e:dc:af:4b:38:f7:96:b3:86:52:21:2d:a1:92:49:bf:8c:
d0:2f:c6:5d:ff:38:cf:8a:eb:f8:d2:b0:52:ae:82:93:4d:f4:
02:78:b7:97:88:b4:91:eb:ad:a7:66:dd:5a:b7:75:5c:57:24:
17:ac:97:bf:0b:cd:19:c4:32:51:cb:76:b4:90:41:72:41:56:
8a:05:78:e2:fa:19:af:aa:30:fd:4e:06:32:75:09:99:5a:7e:
69:bc:e6:c2:d3:17:f3:cc:93:fc:cd:1b:94:0a:0d:24:29:69:
d2:00:53:5c:5d:e0:a4:92:f6:b0:34:f3:b3:01:0f:5f:ab:cd:
b5:8b:95:8a:bb:03:0c:5c:83:2e:87:3a:d6:04:a7:4c:64:d8:
85:2e:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:56 2026 by rpki-client