
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json)
Hash identifier: UX1fnzHccobo0tb+MNnhxsUDeV5AhdAoZOuO6iodY9U=
Subject key identifier: BB:54:65:4C:B0:8F:02:40:DB:CA:57:F9:94:67:27:4F:52:7C:4E:1A
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial: 562B66AA65A68E35FF7A4CD359156EDA7BE59C43
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
Manifest number: 046A
Signing time: Mon 03 Nov 2025 16:51:21 +0000
Manifest this update: Mon 03 Nov 2025 16:46:21 +0000
Manifest next update: Thu 06 Nov 2025 20:35:21 +0000
Files and hashes: 1: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8=)
2: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: EkANgkaL13bjaRF11H0zZE1hKYLJlJeMIfmupgq3iaU=)
3: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: m2OZ4XMcLl0P7HlEaALJYW+kWpR85aBYZcawB+LS50Q=)
4: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: I+1VVYj6jtqkdnEHUu+yoBW+N9Gr17EVEw+bCbgU0gI=)
5: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: 3ImzMH4SMi7RazgDE6NRiLc2az0RdhFPBIeaROSSFXU=)
6: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: Vb5cnFC6Wpj880gEVaQTtTKJLSX6B7dTQEwn1sKGOMQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 20:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2b:66:aa:65:a6:8e:35:ff:7a:4c:d3:59:15:6e:da:7b:e5:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Validity
Not Before: Nov 3 16:46:21 2025 GMT
Not After : Nov 6 20:35:21 2025 GMT
Subject: CN=BB54654CB08F0240DBCA57F99467274F527C4E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f5:96:f0:c6:fe:c6:82:2d:59:29:64:e5:7b:
30:1e:52:81:32:17:4e:b9:93:c8:3c:ed:15:88:fe:
bf:8d:f6:59:f2:44:f9:ae:74:f6:51:fd:5f:6e:f5:
77:ba:48:b0:01:e5:19:4b:02:16:ad:6e:dd:b0:fe:
23:9c:91:33:8d:8a:83:79:27:cd:f8:95:1b:d7:08:
4d:ff:40:9c:c0:98:c6:80:d9:8b:ee:c0:e9:83:e8:
65:61:9c:b7:b3:f7:ae:4b:ac:e9:7a:65:a0:9d:e9:
6e:45:06:1a:ab:0e:61:46:0b:b5:75:0c:df:24:ee:
ef:5c:10:58:df:d2:37:d6:58:e5:a8:fc:1c:e6:11:
8e:3a:41:87:f2:0f:36:5d:95:54:59:bc:67:27:f9:
ae:9d:5a:23:31:73:a9:1a:93:df:7a:1c:0a:1b:9f:
0d:6e:e8:b0:7e:d0:ee:95:3d:bb:c6:fe:e6:a5:70:
39:a4:65:a0:13:55:0f:9b:22:2c:84:2d:2e:fe:f4:
49:0c:55:35:e6:3d:44:98:e0:d4:bf:30:bb:36:7c:
1e:e7:81:a2:1b:fd:fe:de:d0:75:be:b5:a2:67:97:
fa:c1:ad:9a:36:02:8f:85:78:be:a0:a2:79:f2:5a:
e8:eb:c8:1a:3e:ce:9f:5d:9f:0a:79:35:6e:4e:75:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:54:65:4C:B0:8F:02:40:DB:CA:57:F9:94:67:27:4F:52:7C:4E:1A
X509v3 Authority Key Identifier:
keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b0:d7:2f:8a:9b:04:0d:39:03:1c:19:ba:80:d6:f0:8f:7f:
16:08:5e:fc:2a:fb:b6:e0:e9:e3:2f:2c:d6:f9:44:70:1a:e6:
2b:3f:5f:7c:c0:ce:19:6f:ba:61:7c:9b:82:1b:b9:8f:da:26:
aa:d9:83:bc:90:25:a6:2d:a2:2a:7f:cf:ee:dc:ce:48:cd:ca:
dd:75:92:9d:50:bd:4a:9e:0e:ac:a8:dc:b5:3f:69:a7:28:6a:
18:41:89:27:a4:84:83:1c:bd:0e:f4:75:44:af:f4:ad:ad:28:
70:9a:21:a9:25:62:c7:dd:45:90:fe:31:d4:a3:46:d1:69:78:
f3:b1:1b:b0:f6:78:15:64:98:c8:ba:45:84:ec:9e:12:e8:a6:
27:a6:1c:a2:bc:2d:53:f6:d7:9d:d4:a5:65:cd:85:11:23:45:
b1:11:43:95:2d:94:f1:19:d8:51:8b:d7:44:46:83:bd:ec:84:
b4:7a:a5:32:e5:d7:53:d4:63:c6:aa:b9:e4:52:24:24:33:20:
df:e8:22:15:c8:70:b9:1d:1c:b4:31:a4:fd:96:85:29:31:7f:
87:7c:c8:2c:d9:66:48:39:bb:b0:b6:7a:2b:30:35:9b:f8:81:
7a:6c:b7:14:86:f4:b4:60:1f:83:f9:46:d2:ea:00:3d:0d:2c:
1a:51:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:38:35 2025 by rpki-client