
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
File: 06083035B4010CEC337EE26F5EA15A04DD209219.mft (raw, json)
Hash identifier: 3kyOyD8dSy8+suUsjx8K08XfnYW5nNwyXSRJ/p0Ab4o=
Subject key identifier: 3E:A2:80:6E:30:E8:E6:B7:9C:2C:6C:A5:14:0C:7F:BD:CD:B4:D7:19
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial: 6FE2C53CF9CB9D745FE12633F7E58B563225E181
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:35:46 +0000
Manifest this update: Tue 12 May 2026 19:30:46 +0000
Manifest next update: Wed 13 May 2026 21:20:46 +0000
Files and hashes: 1: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=)
2: 06083035B4010CEC337EE26F5EA15A04DD209219.crl (hash: r2QA+QHtRkycbTNy4PzMCD9poVNGMmXH4YBpO6hKCdA=)
3: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=)
4: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: PCIebsIX9snQ/16KTknT7n3JoWYoLSW34RbZ1h8yq10=)
5: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e2:c5:3c:f9:cb:9d:74:5f:e1:26:33:f7:e5:8b:56:32:25:e1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
Validity
Not Before: May 12 19:30:46 2026 GMT
Not After : May 13 21:20:46 2026 GMT
Subject: CN=3EA2806E30E8E6B79C2C6CA5140C7FBDCDB4D719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:9f:67:7d:47:7b:98:bf:b6:5d:c9:62:00:
df:e7:cd:fb:c7:3b:01:9f:3b:8f:e3:e5:7d:2e:4a:
d6:41:7e:4a:cb:3a:d2:49:e7:bd:d4:6d:e2:c2:62:
41:51:47:0c:c9:26:eb:2c:65:2d:af:34:cc:6a:d3:
2a:78:77:28:16:2b:34:f9:70:6e:ba:aa:5e:fe:3f:
03:42:01:19:01:ef:73:a1:ec:c5:be:09:59:cd:80:
5f:74:63:f3:69:5e:d6:0f:2b:60:e0:89:3e:11:01:
96:83:4f:05:56:30:8b:b0:8e:23:06:24:4f:94:6f:
fb:c7:ab:b0:b1:9d:04:17:14:54:6a:56:5c:51:19:
ce:fb:b6:3c:60:98:6e:ba:ce:5a:69:c5:36:41:ec:
31:94:b4:ab:f7:4e:53:b0:75:1e:c1:75:62:9b:48:
13:b1:1e:c8:4f:bc:c2:7d:db:f1:01:f1:e7:bf:54:
f7:4f:21:db:00:1f:28:df:98:72:e1:4d:19:db:e0:
3b:f7:e6:b1:c6:5c:85:45:4a:6c:4f:33:62:3b:56:
cc:18:8b:d5:8c:a7:e2:bd:9f:c6:e3:01:f0:29:3f:
ad:7e:df:bb:7e:82:8d:97:0c:ad:3b:51:74:d1:4b:
52:98:67:ed:9a:01:d1:38:24:47:ea:0e:2c:15:12:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:80:6E:30:E8:E6:B7:9C:2C:6C:A5:14:0C:7F:BD:CD:B4:D7:19
X509v3 Authority Key Identifier:
keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:40:e2:cb:a6:f8:8a:2c:52:d9:dd:0e:7d:75:a1:81:24:
ff:d5:dd:94:62:e9:e0:ba:b0:08:3a:00:09:9a:3d:fe:07:5d:
da:58:5c:38:da:67:4f:eb:98:fa:e4:30:ca:37:b4:1f:44:84:
e4:50:8c:6d:b7:ae:e8:5f:22:b8:c7:f3:89:5d:9f:d1:41:68:
3b:bd:96:2d:31:89:e9:a0:d2:33:da:6a:94:50:0c:a4:23:53:
a2:2e:7a:8a:ef:aa:91:29:ea:cc:15:3e:63:63:92:6a:e2:b0:
4c:8f:80:9b:72:7e:26:d7:45:dd:46:66:73:14:9e:c2:54:81:
da:21:44:11:25:7a:21:78:20:08:c2:c1:5f:d7:32:b6:ca:bf:
89:22:6a:0f:ac:32:44:3b:9b:55:c9:e8:6f:35:83:8e:ed:64:
48:b3:ff:9f:d2:6a:dd:a9:ec:18:d0:ac:e0:d2:42:0e:c4:f9:
27:da:90:38:59:1b:d4:37:53:ed:f6:d2:05:dd:42:ce:21:d1:
62:7e:b2:e1:ad:62:7b:3e:00:19:f5:96:af:d7:33:29:bd:f3:
22:7b:67:31:9d:1a:b6:a7:0a:83:b6:0c:d5:8b:cb:c2:78:da:
99:60:c5:93:c2:e7:6c:1a:b2:80:02:6b:ef:6c:91:f0:4d:d6:
2a:51:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:32 2026 by rpki-client