
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft
File: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft (raw, json)
Hash identifier: F5Gof6/iC+oRQOIYDaRgC0OguxjX3e/K38b9HrWjYD8=
Subject key identifier: DA:2B:5F:A2:45:58:43:14:F6:FC:85:FC:6A:30:66:38:17:55:31:28
Authority key identifier: 0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6
Certificate issuer: /CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6
Certificate serial: 7B410CD7FC58A91FB5F27611A7D4780D9EF7F98C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft
Manifest number: CA
Signing time: Wed 30 Sep 2026 05:17:13 +0000
Manifest this update: Wed 30 Sep 2026 05:12:13 +0000
Manifest next update: Thu 01 Oct 2026 08:08:13 +0000
Files and hashes: 1: 0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl (hash: PqZ8FOVqHGyEVzjf4k37/GFwS9WabcM4zgGekwBReQM=)
2: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: bOv9UB+jH3yIgez1h0+9f0ARyXLXbtpazjPu+Jy6jyY=)
3: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: RduQCu6LK4ze8a1KtgwVd9edcTww6Gh3TJk7wQrWXc0=)
4: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: uH7wCiM64P68t/GjuIUuXpirB813LNqvCv6j5LUhOUQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl
rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 07:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:41:0c:d7:fc:58:a9:1f:b5:f2:76:11:a7:d4:78:0d:9e:f7:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6
Validity
Not Before: Sep 30 05:12:13 2026 GMT
Not After : Oct 1 08:08:13 2026 GMT
Subject: CN=DA2B5FA245584314F6FC85FC6A30663817553128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:82:27:49:d1:79:cb:8c:46:9b:38:00:b1:
5e:cd:0f:0d:1a:e0:cd:c2:3d:6a:60:61:62:76:e3:
b0:7f:fd:11:db:f9:a0:61:5f:5c:71:64:56:c8:2f:
0b:21:d4:f0:a2:42:90:f8:2d:5f:63:a2:d6:b6:59:
54:60:cf:e3:42:b8:25:55:04:96:73:97:fc:92:0f:
a0:cf:b0:ec:0f:90:83:90:2f:fc:8e:10:ce:2e:ea:
73:84:23:c5:e3:0d:ee:b4:d3:58:7d:4c:02:c1:3b:
1f:7f:81:18:73:2c:4a:1b:76:45:8b:94:94:ec:b7:
58:66:5c:54:af:e9:ac:bd:2e:49:3a:2e:b1:8a:c9:
e6:f5:81:33:e2:37:73:22:9c:16:63:c7:5a:ac:ac:
94:db:82:7a:1f:55:38:94:8f:99:35:6e:7c:55:89:
48:3f:d0:2b:cd:79:1c:5a:ee:64:ac:3f:de:ec:1e:
23:1d:ee:3a:3a:c8:b2:aa:ee:b2:7a:7c:76:86:5f:
b8:cb:98:4f:d3:fc:d5:93:88:a8:02:0d:10:a0:70:
fe:93:94:1b:ee:fc:1c:7f:c8:6e:40:14:28:bc:2f:
ed:da:1c:00:11:cf:83:63:85:97:b4:0e:22:50:8a:
b1:b2:71:4a:cc:58:8c:2a:b5:e9:f4:6c:d3:e7:68:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:5F:A2:45:58:43:14:F6:FC:85:FC:6A:30:66:38:17:55:31:28
X509v3 Authority Key Identifier:
keyid:0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d4:86:20:9f:cb:fb:3a:32:2c:3b:df:35:60:3d:83:25:d9:
5c:43:26:3d:22:d3:29:6d:2f:28:0e:98:a1:af:e9:39:bc:9d:
50:47:13:ae:22:64:da:84:bf:4f:ef:e7:bf:d4:fb:b8:fd:ea:
f5:93:8c:0c:db:6d:84:bb:56:fb:41:a0:01:81:9e:d4:a3:3e:
8c:a3:32:8b:fb:23:4b:bb:44:49:6b:d6:dd:f8:f6:64:dc:5e:
0f:70:fd:6f:3c:80:d1:e9:8b:c6:bb:87:61:74:1b:ff:68:49:
e0:b3:aa:95:49:37:2f:99:fd:4e:4a:15:fd:d3:8d:41:f4:b2:
3d:29:65:5b:c2:25:ce:78:c3:42:82:b6:1e:94:0b:66:00:d1:
da:73:29:09:74:2a:80:8a:d5:27:a6:e6:79:37:ee:c5:cb:b5:
33:dc:59:29:88:7c:6e:88:6c:76:98:f8:8d:17:c4:64:eb:a9:
1f:27:78:31:e3:9c:0a:10:a1:8e:6d:74:e6:fe:32:21:5e:1d:
36:40:c4:a0:50:25:33:41:91:13:b0:d8:cc:c6:1d:91:5b:c0:
72:b9:8a:0b:30:6a:55:00:7f:ae:b7:00:30:11:48:0f:e8:36:
0a:c4:32:51:d0:b5:98:ad:cf:2d:5d:e6:22:d8:9d:98:13:62:
ce:ff:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:35:38 2026 by rpki-client