
$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json)
Hash identifier: 1nxjhcsx71JAFOnhOfSaG94Rq3/WJeR7sDFNAMqJ3hM=
Subject key identifier: D2:EB:F7:54:4A:28:5F:0A:CA:59:DB:D9:A6:82:B3:EE:2C:A3:12:4D
Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF
Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF
Certificate serial: 1AFFDD8DA3ACB4470A9082289BB00ADAA24BA77A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
Manifest number: FA
Signing time: Sat 28 Feb 2026 20:22:14 +0000
Manifest this update: Sat 28 Feb 2026 20:17:14 +0000
Manifest next update: Wed 04 Mar 2026 06:41:14 +0000
Files and hashes: 1: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: 3uhC5UNMXEpntvDdlwet0yJY/g5NwflRmewFjZjhUEA=)
2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=)
3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl
rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 06:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ff:dd:8d:a3:ac:b4:47:0a:90:82:28:9b:b0:0a:da:a2:4b:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF
Validity
Not Before: Feb 28 20:17:14 2026 GMT
Not After : Mar 4 06:41:14 2026 GMT
Subject: CN=D2EBF7544A285F0ACA59DBD9A682B3EE2CA3124D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:dd:0c:f4:85:6c:19:1c:95:dc:df:de:97:
fd:f5:be:8d:b6:b3:50:fa:91:61:d1:ed:b8:ea:70:
bf:b6:69:8a:b1:c6:e6:ac:e8:b5:b1:4d:2d:59:74:
6a:e6:01:3a:70:89:64:c4:93:2b:c1:a3:be:54:8b:
20:88:be:bc:04:91:6e:b0:d1:15:a8:3e:73:ad:a4:
b6:55:5a:b4:f2:9f:13:b5:0f:e0:cc:32:95:51:85:
19:73:c1:51:a1:95:9c:77:40:96:a1:11:4c:db:02:
02:67:04:bb:b1:f8:f0:44:51:90:02:bd:a5:a3:7a:
e8:17:1d:ea:26:98:1d:34:76:92:b3:f4:a5:4d:07:
e7:cd:c2:c4:02:38:19:22:85:9c:ee:48:0d:80:6d:
ca:c2:70:7e:03:25:f8:70:3d:e0:94:82:a6:45:10:
83:3e:c8:c3:cc:c2:fa:b1:5f:d7:ed:57:21:88:89:
75:89:fd:cb:57:85:a3:ee:e8:dd:de:00:93:54:37:
98:30:83:c2:53:6b:17:86:65:fd:0f:8a:c4:17:11:
ac:2a:cf:78:b3:ba:75:41:23:c4:75:8f:a9:2b:40:
70:72:84:24:ae:5d:05:08:7e:4f:5a:c8:9a:94:c0:
6f:57:e5:91:b0:35:9f:99:0e:36:0d:6e:a5:9e:06:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:F7:54:4A:28:5F:0A:CA:59:DB:D9:A6:82:B3:EE:2C:A3:12:4D
X509v3 Authority Key Identifier:
keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:3b:ee:32:91:fe:bd:f5:96:fe:77:92:55:35:b3:92:01:
44:ca:a6:79:57:6c:6b:da:67:79:4b:54:f9:80:3b:95:6e:0b:
14:6f:cd:7e:56:a7:3c:bf:8e:3e:5a:9f:2e:3c:d7:27:07:2d:
14:86:45:76:41:52:df:d3:a4:bc:b5:2d:7c:2f:b5:a1:46:1e:
c5:e4:91:7b:7f:74:5e:d7:d8:22:8e:41:c5:e0:b3:da:38:8a:
f6:f5:ba:11:ed:71:3b:8f:0c:6d:ea:9b:0e:21:17:6d:08:4b:
f8:5e:dd:60:71:f2:ed:b0:3e:55:fc:23:61:46:19:44:9f:90:
3d:e6:f5:a6:bd:28:17:8f:64:88:34:6d:49:c3:59:42:f7:c3:
6c:3d:57:19:ec:da:ab:a1:94:e1:36:a9:7c:e5:aa:22:b7:17:
48:7c:c3:f0:08:cd:8b:2d:20:b5:b5:7b:ed:af:35:a2:81:62:
08:e4:dc:45:2f:88:3a:f8:77:11:3b:13:56:fa:ab:ac:57:4f:
d8:00:84:22:d9:0b:33:a4:ac:38:01:b3:48:b7:b0:8e:4f:a8:
2e:cb:7d:c6:97:b2:e9:c5:c8:44:e2:fa:97:5d:eb:83:a3:70:
24:30:0d:0c:2e:b0:2e:4f:55:df:1a:72:0d:66:3a:60:5d:75:
0c:aa:af:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGv/djaOstEcKkIIom7AK2qJLp3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw
RkM3QzBERjAeFw0yNjAyMjgyMDE3MTRaFw0yNjAzMDQwNjQxMTRaMDMxMTAvBgNV
BAMTKEQyRUJGNzU0NEEyODVGMEFDQTU5REJEOUE2ODJCM0VFMkNBMzEyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBN0M9IVsGRyV3N/el/31vo22
s1D6kWHR7bjqcL+2aYqxxuas6LWxTS1ZdGrmATpwiWTEkyvBo75UiyCIvrwEkW6w
0RWoPnOtpLZVWrTynxO1D+DMMpVRhRlzwVGhlZx3QJahEUzbAgJnBLux+PBEUZAC
vaWjeugXHeommB00dpKz9KVNB+fNwsQCOBkihZzuSA2AbcrCcH4DJfhwPeCUgqZF
EIM+yMPMwvqxX9ftVyGIiXWJ/ctXhaPu6N3eAJNUN5gwg8JTaxeGZf0PisQXEawq
z3izunVBI8R1j6krQHByhCSuXQUIfk9ayJqUwG9X5ZGwNZ+ZDjYNbqWeBtTfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0uv3VEooXwrKWdvZpoKz7iyjEk0wHwYDVR0j
BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1
MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3
QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm
MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC
RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI/LO+4ykf699Zb+d5JVNbOSAUTKpnlXbGva
Z3lLVPmAO5VuCxRvzX5Wpzy/jj5any481ycHLRSGRXZBUt/TpLy1LXwvtaFGHsXk
kXt/dF7X2CKOQcXgs9o4ivb1uhHtcTuPDG3qmw4hF20IS/he3WBx8u2wPlX8I2FG
GUSfkD3m9aa9KBePZIg0bUnDWUL3w2w9Vxns2quhlOE2qXzlqiK3F0h8w/AIzYst
ILW1e+2vNaKBYgjk3EUviDr4dxE7E1b6q6xXT9gAhCLZCzOkrDgBs0i3sI5PqC7L
fcaXsunFyETi+pdd64OjcCQwDQwusC5PVd8acg1mOmBddQyqr9M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:22 2026 by rpki-client