
$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json)
Hash identifier: 6dNZjpzGXqJuWHTBFJx2KD/jpSB4qYaN9vwkYqyJDXM=
Subject key identifier: DE:BC:E2:1E:03:7F:1A:75:95:9A:54:EB:3D:05:14:13:8C:CC:DF:0E
Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Certificate serial: 495439A8A9EFE639CBF6271BC70BA6907A12056B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
Manifest number: 0106
Signing time: Sun 01 Mar 2026 07:31:01 +0000
Manifest this update: Sun 01 Mar 2026 07:26:01 +0000
Manifest next update: Wed 04 Mar 2026 17:08:01 +0000
Files and hashes: 1: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: v3fEn+nPP2Z1MRnltGVcCRxN5N1UzakAH6spSiIs0lY=)
2: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=)
3: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 17:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:54:39:a8:a9:ef:e6:39:cb:f6:27:1b:c7:0b:a6:90:7a:12:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Validity
Not Before: Mar 1 07:26:01 2026 GMT
Not After : Mar 4 17:08:01 2026 GMT
Subject: CN=DEBCE21E037F1A75959A54EB3D0514138CCCDF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:ec:d0:79:17:a6:ee:87:f8:81:53:df:4a:
16:da:bf:7d:a2:91:27:aa:48:43:ea:a6:cb:5a:5e:
f6:2c:c6:1a:ca:60:0e:a6:9f:cc:8b:3c:19:31:0a:
19:39:3c:1f:80:e9:1c:89:e4:53:1d:85:9e:8c:c9:
cc:60:74:fa:2f:35:d5:5a:6a:c2:57:5d:78:54:91:
81:cc:bd:db:1a:79:22:ba:ef:d2:5f:3d:67:e4:f0:
ad:84:fb:c0:b2:95:bd:7b:00:83:29:dd:f8:62:44:
a9:1b:f4:48:02:71:67:95:e1:02:33:ea:ff:ee:b9:
ec:94:cc:d4:3d:75:56:6f:9c:8f:fe:4f:c0:0f:ac:
27:bd:c4:38:77:0b:ef:c7:af:e0:70:9e:18:c3:f0:
1b:51:a7:51:ad:24:9e:5c:65:a7:f6:02:2e:fb:55:
f6:62:52:5d:b9:87:6c:71:a7:be:8b:c0:68:3a:74:
5d:ce:0e:c9:bc:5c:b8:60:ea:db:13:5d:6a:b0:f2:
df:20:86:a5:48:1b:84:16:bc:ca:14:15:9b:90:90:
b0:a5:06:25:6b:be:36:41:f5:cb:86:a6:c9:a5:7d:
71:05:35:7a:1f:68:01:d6:96:9d:cb:16:c8:26:eb:
b9:11:0a:16:a1:f7:4c:e4:ad:3f:51:53:c6:9c:14:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:E2:1E:03:7F:1A:75:95:9A:54:EB:3D:05:14:13:8C:CC:DF:0E
X509v3 Authority Key Identifier:
keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:eb:c9:77:b5:fd:80:a3:f2:93:56:39:7e:e9:88:7f:e4:b4:
0f:0d:6a:57:80:f8:2a:4f:9d:d0:d3:6a:13:8b:4b:fb:5a:8e:
99:22:1a:7b:6d:f5:97:d8:3a:d5:0b:56:85:3e:2b:aa:9e:1a:
b9:44:fa:6b:4b:ab:7e:c0:0c:3f:6b:3a:1d:2a:db:91:69:e9:
2b:6b:d6:49:2c:6b:93:dc:ea:3d:f2:7b:0d:fc:e8:fc:86:1c:
bd:6d:8c:5d:14:9b:e9:22:55:59:b2:ae:d8:0b:9a:05:22:19:
fc:e8:e0:8d:e4:f6:22:93:4b:38:21:59:c2:77:1e:ca:87:cb:
ba:43:1f:e1:46:12:df:35:4b:4c:bd:a4:0b:8a:e6:63:3c:f3:
f5:28:d7:46:cf:32:05:65:ee:18:29:90:15:8f:b0:20:52:ed:
4c:29:c5:33:db:82:dd:18:0e:e0:10:32:be:5c:85:6a:0a:a7:
04:bd:c7:99:83:4a:17:c6:e3:4c:db:4a:e8:02:ad:69:41:58:
f2:d8:fe:95:b1:2b:9d:c2:a8:b1:8c:bf:e9:76:05:53:b6:1e:
32:e4:d5:70:b6:03:b5:cc:7c:a3:56:0d:28:f5:45:46:3d:dd:
df:63:61:59:70:47:ca:b0:d7:62:83:3c:47:e3:70:39:60:53:
da:a1:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:08 2026 by rpki-client