
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json)
Hash identifier: TfQuu5nYSI9PeKJ1ysct0PIU6lXgtae3usQmZea4l98=
Subject key identifier: 0F:F1:EF:35:7D:D8:B4:28:88:C9:C5:2C:B6:FC:5A:44:D4:1C:8E:A2
Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Certificate serial: 59ABD46AF3936BC45A7E66DC6CA5F5175188DCE7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 08:04:26 +0000
Manifest this update: Fri 24 Jul 2026 07:59:26 +0000
Manifest next update: Sat 25 Jul 2026 10:18:26 +0000
Files and hashes: 1: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: hcY6WK/wEpiBqQ3IIXxTXCmmscD79idknouQ7JBPzuc=)
2: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ab:d4:6a:f3:93:6b:c4:5a:7e:66:dc:6c:a5:f5:17:51:88:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Validity
Not Before: Jul 24 07:59:26 2026 GMT
Not After : Jul 25 10:18:26 2026 GMT
Subject: CN=0FF1EF357DD8B42888C9C52CB6FC5A44D41C8EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:18:2c:b3:23:1f:a9:db:1e:6e:ac:e9:f5:
41:a6:87:21:70:d2:97:3b:27:b5:4f:a4:7b:65:e5:
87:bf:98:1f:59:6f:9c:a9:96:9b:5f:cb:e0:f0:e2:
cf:09:91:68:28:64:b3:a4:7f:81:c5:12:0e:cf:19:
12:e9:c0:6d:1a:4a:6b:f3:30:01:e5:14:bc:28:4f:
04:34:34:78:65:b9:f6:c2:f7:fc:59:77:0a:e0:bd:
01:28:bd:fd:09:36:f9:12:7b:5a:7f:29:4d:df:27:
f2:4d:ff:0f:34:69:bf:b8:23:fb:90:4b:b5:4b:4c:
8f:f9:0d:b1:d1:32:17:3f:b7:52:da:e6:e3:d7:fb:
13:d6:eb:06:b2:ee:8c:ae:28:5d:df:26:7c:00:eb:
03:41:b4:83:f4:f5:f7:b7:58:ce:fa:57:89:e5:97:
bd:69:30:b3:43:d7:b0:cb:55:38:fa:08:db:49:67:
3b:3a:cd:f8:3d:70:74:60:34:3a:52:53:7d:37:b7:
fc:d7:bd:c2:2c:a2:a2:06:89:34:16:f8:44:29:f1:
34:34:ad:14:77:ee:d0:d2:2d:fa:d1:23:ed:50:21:
2b:c3:5c:c1:87:40:19:44:ba:92:e4:32:51:94:ce:
83:41:19:46:c7:7c:7d:7d:ae:ef:d5:13:e9:ed:31:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:EF:35:7D:D8:B4:28:88:C9:C5:2C:B6:FC:5A:44:D4:1C:8E:A2
X509v3 Authority Key Identifier:
keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e1:b3:bd:fb:54:b8:b4:e9:0e:4c:d1:53:15:1b:ab:1e:2f:
8c:78:36:50:d2:07:b3:e3:36:ff:db:7f:de:29:e9:5b:c4:e7:
0b:e4:e0:1f:57:43:e2:2a:99:cd:48:6e:0c:71:a3:69:67:17:
05:70:ab:09:0a:a4:61:58:16:87:1f:fe:64:95:5e:8f:e4:4b:
e3:bf:ea:b2:0c:03:ef:25:08:3b:1b:3d:60:01:60:0d:2d:a4:
69:dd:7b:60:c6:90:36:49:4c:f1:7f:93:1c:84:51:92:11:ef:
f1:e7:3b:59:b7:43:73:21:29:d1:36:67:6a:a7:33:5a:0f:a3:
ce:f2:c8:b8:03:11:62:66:44:d3:be:84:bb:1e:75:af:0f:0e:
f6:e6:13:52:19:f0:13:9e:04:94:65:d0:bd:c9:27:c1:b0:01:
6c:94:57:65:86:d4:b3:49:8e:9c:41:b2:84:b3:af:d6:5d:66:
55:6f:88:20:a7:63:f3:1e:7a:eb:8e:9f:3a:a7:63:f4:82:de:
5e:99:84:87:c4:88:84:19:e5:a8:71:21:ca:5b:e9:43:d9:5e:
54:c4:4d:9a:77:f0:97:d9:c0:02:39:74:30:f7:97:97:59:43:
a5:94:a6:e3:8d:7d:ce:34:82:ac:ad:44:6e:02:f1:78:cd:ee:
62:46:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:33 2026 by rpki-client