
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json)
Hash identifier: 1K92j4l4bR1kmBX/GgikdLbgDCgFRu0HWCQ9158yK4Y=
Subject key identifier: 3B:1F:CB:43:D4:F9:C8:D6:27:4A:9D:BD:51:3D:F2:1B:FD:FB:CF:77
Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Certificate serial: 29A117BAD19CDF418C381C637A561B5E99DAE654
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 19:59:28 +0000
Manifest this update: Thu 23 Jul 2026 19:54:28 +0000
Manifest next update: Fri 24 Jul 2026 22:16:28 +0000
Files and hashes: 1: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: l41r/ctwX57RoYVJElBZSMpzac24ZA2QBujchpT1QKg=)
2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a1:17:ba:d1:9c:df:41:8c:38:1c:63:7a:56:1b:5e:99:da:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Validity
Not Before: Jul 23 19:54:28 2026 GMT
Not After : Jul 24 22:16:28 2026 GMT
Subject: CN=3B1FCB43D4F9C8D6274A9DBD513DF21BFDFBCF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:1c:01:fe:5f:fa:e7:fa:48:80:e9:a1:2e:
ef:e3:09:0c:e8:cf:8c:85:16:6d:86:33:13:0e:8f:
50:59:20:8b:b1:19:16:48:10:9d:a3:d0:73:50:57:
43:51:d8:86:1c:ff:be:8b:a3:96:9c:00:e3:ae:fe:
24:ff:90:d7:25:ca:95:92:ee:d3:98:0c:f7:5d:d1:
e9:24:3e:3e:83:15:65:49:f3:00:e5:e9:1d:b1:24:
d9:9c:6a:07:12:35:9f:00:58:57:85:1b:c8:d7:2c:
33:58:4c:0c:87:bb:8b:c5:17:49:12:0f:2e:af:ca:
bc:1b:03:87:f3:ec:20:b2:32:1b:01:14:4e:a9:87:
21:38:23:aa:da:50:98:c7:35:5f:3d:48:a9:18:e6:
06:23:06:97:b9:19:18:fa:96:de:21:b8:89:67:8c:
ec:83:5a:9b:df:cb:1e:20:c2:e2:71:89:36:d2:7f:
31:fc:00:93:99:16:50:96:5f:b0:1d:fa:85:1a:6c:
99:74:76:51:68:a6:75:0a:d1:19:2c:50:10:a2:f9:
77:49:f6:27:e1:66:b8:9a:37:3c:a8:8f:e3:06:59:
e9:61:e7:09:0e:9f:b9:64:59:aa:eb:16:3e:78:37:
f3:c9:68:1a:14:aa:11:d1:ef:75:c5:ae:4a:83:8c:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:CB:43:D4:F9:C8:D6:27:4A:9D:BD:51:3D:F2:1B:FD:FB:CF:77
X509v3 Authority Key Identifier:
keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:22:a5:d9:dc:f7:59:82:82:8f:9b:2f:e1:25:ee:a0:2f:
55:e2:12:9f:12:d6:10:d0:8a:de:6a:71:97:5c:4d:bb:bb:e0:
81:97:5e:51:ee:09:9c:e7:f9:05:48:c0:b4:10:b6:cc:6e:4a:
6e:cc:da:c4:9b:bf:97:45:08:59:ca:ad:3e:b2:e5:e5:87:30:
16:b3:4b:0d:22:20:8c:e9:3f:e6:52:27:05:f4:f2:eb:d1:3b:
9c:a5:f0:48:4a:b2:bf:30:b5:36:36:7d:17:ce:04:6f:1e:d1:
b4:80:d7:bc:1a:7a:cc:3b:dd:d2:ae:35:23:37:1f:98:85:7b:
ed:24:ac:24:e3:43:34:e4:20:73:fd:47:0c:ae:ee:84:e8:26:
cd:f5:b0:ee:8e:90:d8:23:93:c8:f1:3d:41:0a:e6:84:3d:e7:
56:44:82:bb:23:72:e9:da:be:a4:66:de:3e:5f:59:27:d5:e8:
6f:7e:ed:67:59:77:d9:93:b6:96:13:c7:ba:31:78:62:e7:49:
a1:74:97:69:f8:7e:4c:a4:d3:42:40:fc:0f:1a:ae:22:ff:87:
b1:43:75:01:88:ee:81:54:da:ef:4e:cd:5c:b9:c4:38:21:b5:
c1:e7:fe:3d:cd:e2:fd:49:84:86:60:3a:c1:a6:7b:a0:ee:40:
5e:61:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:35 2026 by rpki-client