
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json)
Hash identifier: /HBGxx9nuBYN9a5hnHBw73U3xFsjj4vbdyaWZwc1Shk=
Subject key identifier: 24:99:C7:E8:5F:69:88:2B:5D:A6:57:F7:0E:6C:CB:25:8C:72:98:11
Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
Certificate issuer: /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Certificate serial: 6D48ED55718A5A2E463333990E87E47A51744453
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:52:48 +0000
Manifest this update: Thu 23 Jul 2026 22:47:48 +0000
Manifest next update: Sat 25 Jul 2026 01:57:48 +0000
Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=)
2: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=)
3: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=)
4: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: e+1PoUAoeMoAF4fTTdG5Fa9Y0FQvS3zb5lUAisq+VJM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:48:ed:55:71:8a:5a:2e:46:33:33:99:0e:87:e4:7a:51:74:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783
Validity
Not Before: Jul 23 22:47:48 2026 GMT
Not After : Jul 25 01:57:48 2026 GMT
Subject: CN=2499C7E85F69882B5DA657F70E6CCB258C729811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:11:c4:a6:8f:52:7d:68:ce:27:1b:1c:78:
69:37:e8:95:b2:3e:fa:5d:d6:7b:11:9c:7f:38:bf:
5f:df:2e:38:f4:07:40:ee:a7:8c:d8:25:e7:0b:a5:
56:24:26:91:c5:01:82:5e:12:62:42:9f:f5:26:73:
be:d7:e2:e8:06:98:81:1f:8d:b1:f1:4c:21:2f:93:
70:69:62:a6:66:e2:f2:86:c5:81:d0:21:72:92:3d:
03:d1:a5:c5:4d:ca:2e:63:f2:84:58:f3:60:8d:2d:
88:30:57:2f:69:b3:ea:28:b4:04:58:34:7f:c6:c2:
c9:cb:04:61:17:94:5c:3d:6d:5d:f2:5b:57:90:f6:
b7:75:4a:c7:14:7d:fa:c4:6b:23:9e:83:72:03:7f:
43:4e:ce:f5:5b:aa:10:26:46:fc:2d:26:1e:1c:10:
71:00:06:f1:5c:cb:1d:4a:9d:b2:e6:e4:b0:12:6e:
21:98:7f:cb:23:28:13:82:56:b9:47:20:f0:b8:9d:
9f:74:c5:2e:b4:f2:38:af:7f:ea:26:ee:b8:7b:99:
ee:89:e6:9e:8d:91:14:88:0e:f0:f6:f2:35:37:c4:
d5:a3:78:5e:67:b1:18:a4:35:89:55:0b:f2:da:16:
08:64:ac:d5:89:de:b2:73:38:74:ee:4c:4e:41:01:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:C7:E8:5F:69:88:2B:5D:A6:57:F7:0E:6C:CB:25:8C:72:98:11
X509v3 Authority Key Identifier:
keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bf:2e:cc:57:f9:30:5f:39:0c:56:75:b6:95:72:6b:3d:e9:
c3:0b:ce:2e:79:5d:29:c6:f2:0b:77:9f:6e:45:ea:c1:3b:e0:
2e:90:95:18:8c:3f:0b:95:66:65:98:b0:78:30:32:54:de:7e:
c3:42:53:7d:b9:0d:08:3c:95:b4:15:e5:64:6a:82:d5:ff:aa:
68:ed:4b:fe:71:bd:62:c8:15:59:1f:ac:1d:17:e5:2e:11:8f:
53:2c:4a:c2:0c:89:37:96:45:a5:2b:06:8e:ca:f6:6e:74:96:
87:50:3d:e8:a1:24:e9:26:57:2d:21:cd:8c:d5:04:5b:f7:fa:
a8:14:f3:b8:c4:3a:3f:c1:36:a9:7a:d4:a3:8e:97:d0:3f:88:
b6:fd:fe:c3:45:83:e2:8e:e7:a4:e5:d8:bd:9a:86:c6:c4:5c:
70:72:43:a2:69:31:1d:fa:83:67:e5:9b:36:73:90:c7:86:5d:
f1:a0:89:8b:fc:dc:06:f6:63:14:f2:4d:72:5a:6a:6c:a2:a5:
a8:6b:1e:d9:d1:ed:6c:40:49:15:af:e0:c0:c8:ee:21:e5:76:
e6:c3:dc:bd:9b:a4:4d:aa:92:79:7c:0c:4c:cd:6f:5d:75:46:
c7:2e:35:69:8a:99:13:35:c6:82:70:6e:af:ef:7f:7f:f2:a2:
82:e0:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:08 2026 by rpki-client