
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
File: 6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft (raw, json)
Hash identifier: ujBDjprfwhYPyr1GL2a7/YkPu+aP6waSoECH3kPiy5Q=
Subject key identifier: DB:35:C9:F8:82:FA:AF:82:B1:6C:0E:A4:CE:E0:16:26:30:6D:2E:D4
Authority key identifier: 6B:BA:CF:0D:AC:5B:15:BC:6C:F4:E5:BC:AD:44:67:6C:03:1B:A5:D3
Certificate issuer: /CN=6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3
Certificate serial: 60B5048DDA4245F1D8A895F5D8167C48242A0F39
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:45:57 +0000
Manifest this update: Tue 12 May 2026 19:40:57 +0000
Manifest next update: Wed 13 May 2026 20:04:57 +0000
Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: e88toI0gc+wSaORpU+rtaS/kGFnIHMmHOsK/AC+epi4=)
2: 6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl (hash: B6ETfHPqrm+6QjGUGqNsFMpn7p3xEJmbmVQptbvr8BM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl
rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b5:04:8d:da:42:45:f1:d8:a8:95:f5:d8:16:7c:48:24:2a:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3
Validity
Not Before: May 12 19:40:57 2026 GMT
Not After : May 13 20:04:57 2026 GMT
Subject: CN=DB35C9F882FAAF82B16C0EA4CEE01626306D2ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:a1:dc:89:f5:3b:4e:40:71:ac:83:d2:c3:
a0:43:0a:d7:b6:92:06:b4:f0:3e:c6:e3:68:ad:1f:
c6:6d:44:f5:9d:61:4f:38:6f:5d:34:7a:60:05:7b:
98:a0:62:70:c3:5d:c1:fe:5d:b9:a8:7d:bb:4c:3d:
b2:ac:f6:5c:a5:26:5a:da:9f:e4:6d:3f:26:95:4a:
28:85:5d:70:68:7d:5b:f9:3d:3e:e3:1c:87:fe:78:
83:78:9c:00:08:fd:30:88:a2:3a:f1:28:df:08:b8:
67:a9:2f:98:7f:0d:e3:a1:f0:e9:67:31:79:c1:26:
ad:3f:d0:f4:ac:39:04:31:25:ba:7f:d5:3b:c2:0a:
a6:04:ab:c4:71:7e:38:7a:e9:4c:c5:13:e6:ee:05:
e8:e0:b6:28:77:bb:67:68:49:8d:10:ca:85:ed:81:
8d:b2:d5:d8:b7:f4:70:b1:c3:90:ee:16:88:d2:ba:
61:e1:47:f9:7e:cd:3b:47:b9:30:ae:f4:0c:bf:bd:
b0:41:dd:66:b1:ff:18:af:47:7c:91:45:f7:ee:74:
a1:d2:52:25:42:84:5d:7f:26:14:2c:a8:84:82:f8:
44:c5:55:4f:64:4b:87:9f:42:10:c9:60:e6:5f:84:
86:0c:db:26:83:b0:29:f0:5b:7a:cb:f9:c4:e4:c1:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:C9:F8:82:FA:AF:82:B1:6C:0E:A4:CE:E0:16:26:30:6D:2E:D4
X509v3 Authority Key Identifier:
keyid:6B:BA:CF:0D:AC:5B:15:BC:6C:F4:E5:BC:AD:44:67:6C:03:1B:A5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d0:e4:36:fe:92:42:cc:97:cb:c2:4d:35:f6:a5:f2:8c:66:
13:95:2b:97:c6:cb:98:ab:39:7c:52:ed:82:59:91:22:8f:7a:
84:b6:b5:51:e9:33:6a:72:8d:6e:c4:8a:d5:5a:6d:19:e7:54:
38:2f:f9:6f:a3:1e:1f:f3:98:7c:e0:b1:84:76:d3:c9:3b:aa:
d6:3d:9b:a8:cc:a0:b0:50:da:5a:ec:dd:84:cd:0e:83:bf:3b:
93:7a:81:0b:37:3c:6e:a3:e3:21:98:13:eb:f9:5b:3f:11:c3:
4f:f2:bf:07:85:32:0a:a5:fc:03:b4:33:d7:f4:06:45:e7:e3:
dc:59:fc:71:1f:06:ff:2e:a3:9e:df:88:ee:7c:a9:89:12:c6:
c6:26:c5:2a:20:f5:68:98:db:9a:cb:cf:96:af:ff:f6:b3:a6:
8e:ff:45:e1:35:fd:4c:6b:83:af:e9:2c:95:03:71:8f:f8:c6:
0c:d5:61:68:f9:71:0c:71:15:78:bd:ca:01:25:5c:18:e2:74:
dd:c1:c3:bf:31:03:c0:f6:99:83:cc:26:d6:ef:d5:77:3b:53:
aa:7f:fd:b4:58:0b:62:67:22:a7:e9:39:c6:ef:ef:01:9b:9d:
c1:e7:cb:c1:b1:7a:b4:eb:f9:4b:db:3e:ca:91:61:05:3d:93:
53:54:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:43 2026 by rpki-client