
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
File: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft (raw, json)
Hash identifier: Oaia71utY7uHLjc0MNysejT0w8h9H3UV1IWyYOiLe+0=
Subject key identifier: AC:32:66:8E:54:33:7A:89:50:E8:5B:40:2A:00:C2:EA:B3:E2:66:1B
Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Certificate issuer: /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Certificate serial: 08D4533CE70B973A05A8C31F7552A9B1A0762F65
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
Manifest number: 12A9
Signing time: Fri 24 Jul 2026 06:39:33 +0000
Manifest this update: Fri 24 Jul 2026 06:34:33 +0000
Manifest next update: Sat 25 Jul 2026 07:51:33 +0000
Files and hashes: 1: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl (hash: NhmRnL/CU9jiuX2Reb1T+v6bXGP9pZBvqFVQt23Ezp4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d4:53:3c:e7:0b:97:3a:05:a8:c3:1f:75:52:a9:b1:a0:76:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Validity
Not Before: Jul 24 06:34:33 2026 GMT
Not After : Jul 25 07:51:33 2026 GMT
Subject: CN=AC32668E54337A8950E85B402A00C2EAB3E2661B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:a1:23:46:28:25:f9:36:71:5d:76:6b:ae:
6f:68:50:59:28:58:6f:51:ea:85:ca:40:dd:24:03:
dc:47:86:4a:56:b9:07:d0:6b:18:b7:68:12:65:93:
6b:a7:29:cf:b2:24:40:79:e1:e6:98:bb:42:ff:80:
58:d2:8c:ed:15:2f:9e:71:c0:8d:a9:a8:95:65:66:
91:61:f7:33:fa:77:f0:b3:3d:31:a7:a7:a8:73:18:
4f:cf:75:cc:e8:c9:38:73:92:96:7f:18:02:b0:22:
83:59:42:4b:ed:8f:f6:b8:da:17:b9:59:4f:d6:32:
72:4d:32:61:78:fc:6e:2c:58:2e:26:8f:e6:ae:94:
5c:f2:e8:30:09:12:60:be:b2:fd:28:8e:e3:38:11:
ce:06:10:ca:c1:a3:bb:ad:61:43:52:81:03:a8:e3:
08:88:e6:d8:95:2a:e5:3b:88:1d:03:51:6c:29:80:
d0:c6:90:12:7c:4f:06:80:d6:a2:d0:9c:ac:db:ac:
59:23:d8:d9:63:61:66:a5:6a:e4:25:27:26:63:aa:
67:41:1b:67:da:3a:a4:aa:d8:d4:2b:6b:25:0e:37:
ef:c8:b0:43:1d:b0:8f:74:b5:e7:ff:04:70:f3:30:
43:2d:48:0a:86:28:28:70:f9:c4:f4:aa:02:d0:ac:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:66:8E:54:33:7A:89:50:E8:5B:40:2A:00:C2:EA:B3:E2:66:1B
X509v3 Authority Key Identifier:
keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:f3:88:42:79:97:f6:ca:55:a3:11:e1:e5:ce:09:20:db:
55:ad:10:f8:1e:fb:48:30:ea:a4:b9:e2:9d:c5:51:29:95:22:
9f:c5:2c:8a:10:a0:f2:32:72:a2:3a:9f:c5:ec:fa:c1:19:49:
fb:98:76:1d:86:b7:03:84:41:08:5f:56:2b:37:55:e3:37:68:
cb:e9:31:9b:22:47:d3:a2:b4:f0:99:ff:6b:f3:fc:84:5c:38:
ca:ed:56:48:c6:87:1e:d3:ac:3b:35:9d:a9:6f:63:4a:bf:d1:
d6:f0:36:1f:cf:5d:41:87:cb:2f:ca:4c:22:ec:28:25:5a:21:
e5:b5:1e:e5:d0:07:0f:5a:8a:9c:3f:f5:62:25:bd:78:4c:32:
44:40:92:61:24:78:f3:13:57:14:6a:66:43:b1:44:1a:69:3f:
3a:27:5f:ea:a9:26:21:69:a2:e2:99:c6:79:94:89:12:6b:ab:
a7:18:ad:81:98:b5:fe:5f:35:16:a0:40:77:cf:f0:67:b6:b0:
3a:11:5d:de:b2:27:04:93:5f:4b:ee:90:5d:c3:88:92:99:c7:
c9:86:c1:12:29:f1:7c:f4:e8:a0:6f:08:91:f0:79:ec:fe:46:
88:e1:d9:23:d9:53:4e:20:d3:27:e4:14:37:dd:b2:52:17:20:
f8:86:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:42:57 2026 by rpki-client