
$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json)
Hash identifier: cYVusxGCVeDeQCrnJxuY8MNdaoZPi6DEy7GM6ST5fAg=
Subject key identifier: D6:16:98:2B:B0:E5:69:7D:FE:F3:8B:88:7D:CC:3B:00:29:E7:D7:01
Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF
Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF
Certificate serial: 61C2149CE0A00B1E38FFBC7311E369FC87767DCE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
Manifest number: 010F
Signing time: Thu 16 Apr 2026 10:52:12 +0000
Manifest this update: Thu 16 Apr 2026 10:47:12 +0000
Manifest next update: Sun 19 Apr 2026 19:16:12 +0000
Files and hashes: 1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=)
2: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=)
3: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: hxsHnkEa7mixCnfCFXzF5jPevaan8SvgOpIkkaNG8Lw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl
rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 19:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c2:14:9c:e0:a0:0b:1e:38:ff:bc:73:11:e3:69:fc:87:76:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF
Validity
Not Before: Apr 16 10:47:12 2026 GMT
Not After : Apr 19 19:16:12 2026 GMT
Subject: CN=D616982BB0E5697DFEF38B887DCC3B0029E7D701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:ac:95:94:75:73:b5:30:de:48:2b:12:e3:
7d:e7:ac:3b:25:1e:68:db:63:61:3a:b1:bc:ed:e7:
98:cf:29:5c:16:58:a9:f6:8a:e7:74:e0:16:31:49:
0a:ce:31:43:89:f2:0c:6a:36:f0:e5:72:9d:45:3c:
22:83:ff:b0:f1:cb:54:2f:7f:af:6e:4e:de:86:48:
7c:e2:6c:56:2a:b6:06:10:b8:56:9a:7e:c4:25:45:
86:c9:90:4c:c6:27:bd:5b:e2:6e:55:1e:9f:07:dc:
d9:68:03:29:c6:2d:07:f5:d2:91:1e:18:61:0b:28:
f9:d9:72:06:a5:e5:f6:d2:93:18:e3:0d:a2:3b:6c:
a9:95:28:89:b8:dd:f1:a2:12:a3:a1:6e:58:18:32:
78:b2:af:dc:f6:fb:da:c9:44:d0:14:e9:9b:05:1b:
1c:95:cb:89:95:f8:b0:6a:b7:87:26:10:dc:52:32:
4b:45:f8:9a:4d:3a:92:61:40:fa:af:fb:bd:07:bd:
2e:43:58:fe:eb:8c:de:c2:22:aa:81:62:53:43:a1:
90:61:a8:27:8a:47:41:ab:7a:aa:44:53:ec:a8:11:
34:ad:3e:fd:95:15:88:bb:36:91:1f:00:59:77:19:
82:bb:9d:36:f9:e1:34:8f:a1:f1:fb:7a:0d:dc:35:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:98:2B:B0:E5:69:7D:FE:F3:8B:88:7D:CC:3B:00:29:E7:D7:01
X509v3 Authority Key Identifier:
keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:19:ea:75:16:ec:c2:ec:27:8f:8a:17:c2:ed:da:52:dc:0a:
60:a8:e6:14:66:93:35:99:d3:ad:87:7d:62:79:fe:1e:55:ac:
44:32:45:38:16:bb:3c:f9:b4:ca:56:c3:0e:79:1b:8d:2f:0e:
90:b7:67:ad:6d:85:23:72:ee:73:4f:1f:4c:15:76:4e:a6:a0:
f7:7f:21:41:2d:a3:fd:47:97:d8:1c:8d:65:d1:af:17:bf:6e:
13:a5:b5:24:34:d3:a3:f8:de:8e:da:d5:ea:4b:b8:1b:6b:4e:
5b:86:f3:f9:6f:9f:85:07:4b:5a:ba:37:95:af:14:41:de:5e:
ce:c7:51:60:79:eb:ea:1d:2a:9f:75:b2:ea:f7:f6:8d:b0:2b:
9b:14:bd:e4:4f:49:e9:6a:e6:f6:55:ff:ef:3c:11:13:d6:06:
08:7e:eb:b6:80:d4:f7:bc:06:58:6f:79:24:5b:ce:0d:de:5f:
9b:4c:29:6e:b6:bf:e5:3c:8f:b1:0d:5e:a5:39:4c:24:d7:2d:
40:e2:f5:ec:eb:1c:28:5b:b1:a2:d6:cd:ed:73:f5:1c:5d:f3:
23:59:bf:6e:e5:97:c5:68:9a:41:b2:3a:d5:08:65:b6:1f:53:
ec:32:d7:38:32:46:e5:f3:02:8e:6a:71:43:76:37:c6:51:76:
80:28:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:43 2026 by rpki-client