
$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
File: 0BA4160695EA940C660FFE532DE277E48EEAA80C.mft (raw, json)
Hash identifier: cvi0AuiXtc8aWmFZX915EJnfyRenueWvosvBt3u0LbA=
Subject key identifier: F6:52:DE:18:09:70:2D:09:6F:96:F1:0D:A9:05:8E:96:2D:9E:05:14
Authority key identifier: 0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C
Certificate issuer: /CN=0BA4160695EA940C660FFE532DE277E48EEAA80C
Certificate serial: 0C1EABF9B1125FFC5E6D3C2C39542AD552F11878
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 09:30:59 +0000
Manifest this update: Fri 24 Jul 2026 09:25:59 +0000
Manifest next update: Sat 25 Jul 2026 13:20:59 +0000
Files and hashes: 1: 0BA4160695EA940C660FFE532DE277E48EEAA80C.crl (hash: NWEGZSltlrwAuI9L1LWamzH13+zxypd5F6PzCQq6fgM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl
rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1e:ab:f9:b1:12:5f:fc:5e:6d:3c:2c:39:54:2a:d5:52:f1:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BA4160695EA940C660FFE532DE277E48EEAA80C
Validity
Not Before: Jul 24 09:25:59 2026 GMT
Not After : Jul 25 13:20:59 2026 GMT
Subject: CN=F652DE1809702D096F96F10DA9058E962D9E0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:93:ce:4e:f1:45:96:5b:2a:78:fe:cc:60:
06:e0:71:11:33:9e:75:36:c4:6e:fa:54:6d:c8:d9:
0a:2e:3c:db:d0:6f:b9:bd:a3:28:e6:ab:77:50:56:
db:dc:0b:21:8c:51:12:d6:86:ca:a9:a6:b6:86:24:
93:63:8b:de:88:d2:72:44:10:50:aa:44:36:11:9f:
4b:81:98:22:44:b2:e0:5b:bf:59:8b:1e:a9:09:57:
13:0b:b8:76:75:a2:f3:87:3d:59:b1:29:53:32:d0:
23:53:99:ef:7e:f9:2d:c8:02:0c:01:fd:42:c4:e3:
81:81:be:d7:02:b5:13:e7:07:2e:61:17:f8:3e:1a:
28:af:61:1b:50:26:cd:94:94:c1:52:5a:c4:ac:0d:
78:70:f7:ca:02:dc:52:21:87:65:da:11:05:09:b4:
a9:50:c4:79:51:60:c6:4e:09:26:5c:0c:dd:c7:34:
79:da:0b:36:2b:bd:b9:8e:28:6b:f4:13:2f:dc:a6:
05:7b:40:bb:40:6a:3c:90:77:65:8c:43:8f:41:a0:
a9:84:ab:52:79:0e:4b:85:d0:7c:60:de:a1:76:0d:
20:ae:d2:81:16:d0:04:00:4f:65:7e:d1:10:99:bc:
13:88:50:33:54:56:a6:3e:68:c6:fe:33:cd:72:d8:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:52:DE:18:09:70:2D:09:6F:96:F1:0D:A9:05:8E:96:2D:9E:05:14
X509v3 Authority Key Identifier:
keyid:0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:37:c1:b0:57:f9:ca:23:44:d5:d9:15:28:ad:88:9d:38:93:
43:a6:f0:4e:17:cc:1e:c4:5a:6e:ed:0a:ee:fd:da:a4:7c:d5:
29:5b:6c:9c:fe:dd:b2:36:95:4b:4e:cc:d8:e2:0c:eb:97:bb:
2b:f8:6f:ab:2b:ef:54:3a:df:7c:8e:c9:04:4e:c5:77:7e:36:
d7:49:f0:5b:da:c4:9a:56:2c:7b:30:99:69:d9:f8:44:d7:58:
02:ca:b5:fe:e2:95:6b:b9:60:46:3e:a7:43:35:82:2c:6d:ae:
53:12:0a:ef:e8:6e:a5:8f:6f:de:6a:a2:7d:cf:ee:af:28:cc:
ab:63:1a:d3:03:56:b1:91:78:47:e0:fc:16:75:40:66:9d:9b:
3a:07:45:71:a4:46:d5:38:98:9a:37:a1:21:70:7f:ec:e6:dc:
71:b3:43:cd:a1:54:d9:cc:9c:28:b5:89:b7:47:0a:aa:8e:13:
d5:5b:c9:38:f6:34:f2:ca:73:73:90:f9:f6:c0:bb:9d:68:76:
40:be:a0:8f:7c:9a:ad:9d:85:a5:65:12:60:8b:76:3b:f5:f3:
9d:52:13:d6:9a:83:17:0e:55:9a:15:87:8b:47:24:70:80:64:
0d:1c:4c:20:77:29:14:14:b7:5e:11:84:70:e2:60:ce:7b:96:
83:e4:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:18 2026 by rpki-client