
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json)
Hash identifier: 0sSYwdmxSg52H1BbR0UHSzeWPSqA5V1wEXa269Txym4=
Subject key identifier: 4A:5D:F7:33:AB:9F:A7:CF:0E:E6:C1:18:9C:8C:91:29:89:9C:AC:1C
Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Certificate serial: 295A821AEDE56A831455B2BEF9614A1B33314826
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:58:19 +0000
Manifest this update: Tue 12 May 2026 20:53:19 +0000
Manifest next update: Thu 14 May 2026 00:34:19 +0000
Files and hashes: 1: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=)
2: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: 8f97uRhhgIf6E0i2K+QZAR8wfQXZQBtWUI6BlFuY99w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5a:82:1a:ed:e5:6a:83:14:55:b2:be:f9:61:4a:1b:33:31:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Validity
Not Before: May 12 20:53:19 2026 GMT
Not After : May 14 00:34:19 2026 GMT
Subject: CN=4A5DF733AB9FA7CF0EE6C1189C8C9129899CAC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:17:f7:d6:c9:28:d9:2a:8a:75:12:69:e0:
25:0c:75:44:39:b2:3e:fa:9a:bf:f1:de:60:fc:16:
7f:22:3a:57:0f:3e:c3:66:2e:05:81:f0:8a:1c:7a:
95:f8:5a:f7:19:6b:a7:25:c4:04:d5:96:b2:56:22:
71:28:16:7d:a0:66:45:c0:52:6b:11:1b:0b:8a:9e:
17:0b:ff:56:4d:e1:4e:00:1e:69:69:66:5e:68:55:
11:c8:8f:55:3d:ae:c2:cb:33:b0:82:b0:bf:80:1d:
ae:43:b2:0b:44:6c:99:32:58:13:a1:a7:27:05:4e:
3f:3f:ab:38:29:11:8d:52:7d:e6:41:92:a4:ae:2e:
46:60:cf:e4:40:44:63:d6:e5:7e:d6:ee:6e:34:7d:
d9:be:fd:fd:ee:76:6d:9a:1e:b3:1d:ea:54:44:01:
d1:99:74:74:5f:f0:92:bb:ba:43:8f:1f:cf:a7:73:
07:8e:02:44:50:62:44:cb:5b:02:78:96:37:42:dc:
a1:7b:7a:ea:5c:da:cb:94:3d:19:c9:d0:cc:6c:39:
22:1e:f8:40:21:d3:9c:05:ca:17:21:8b:4b:ab:bb:
53:3e:bf:b9:8a:a6:41:8e:2e:c8:d9:f3:d2:4a:fa:
46:02:58:3a:36:56:e2:95:ef:c7:b7:02:32:21:05:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:F7:33:AB:9F:A7:CF:0E:E6:C1:18:9C:8C:91:29:89:9C:AC:1C
X509v3 Authority Key Identifier:
keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:c0:51:2e:84:f4:42:6b:b1:5f:77:5f:53:9b:ae:d2:8e:
13:1f:f1:ef:5f:44:f5:c5:bc:e1:10:e9:5f:30:98:a4:7c:8a:
86:72:4e:d1:fb:05:4f:2a:a6:4e:6d:03:24:11:22:c6:77:8d:
3d:d6:71:c6:74:17:bd:f6:0c:1d:93:7f:9c:ae:d2:51:89:67:
18:be:39:5d:8a:a2:05:40:af:73:1b:8f:b9:c3:8b:d6:7a:49:
96:43:e9:fc:60:10:e5:3b:9e:0c:f6:30:ca:eb:f5:d4:e1:c7:
dd:01:62:1c:af:90:78:6e:40:f0:ae:79:1d:02:05:31:94:46:
5a:1a:88:be:8b:15:ce:d4:a1:aa:08:4c:0e:47:f1:a6:4a:52:
c9:1c:0b:e0:c1:71:cd:35:86:1c:f6:5f:65:f4:b4:50:c0:f9:
47:75:2d:6c:e5:ec:c2:9b:b5:17:c6:87:aa:44:e9:3d:13:08:
e4:bc:4b:92:b6:5d:8d:96:d9:71:51:d4:72:a6:5d:3c:ab:f6:
0d:d2:e9:95:98:98:55:bb:91:7e:c9:60:17:55:8b:37:e5:7b:
82:72:b3:67:bf:a6:e1:c6:b2:13:ba:29:bb:15:8a:ad:eb:3f:
70:73:12:34:e8:42:70:51:88:6e:d9:cf:8a:97:d2:9e:06:34:
af:bf:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:22 2026 by rpki-client