
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json)
Hash identifier: ALPTy3p1f3NNakjpcKc1gctHRYGHRtQY/wJfFF0nwMg=
Subject key identifier: 08:25:00:EE:96:2C:9A:B3:F6:8D:B7:81:CD:F6:89:96:BF:9F:CE:02
Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506
Certificate serial: 41FD31A185DA111DB26F67043B6621AF0A23CE5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
Manifest number: CB
Signing time: Sun 01 Mar 2026 15:22:33 +0000
Manifest this update: Sun 01 Mar 2026 15:17:33 +0000
Manifest next update: Wed 04 Mar 2026 16:38:33 +0000
Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: ZiDCulAPWPttBHoXAoLjcdO3/dablBdbkW8P46xHHvQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 16:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fd:31:a1:85:da:11:1d:b2:6f:67:04:3b:66:21:af:0a:23:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506
Validity
Not Before: Mar 1 15:17:33 2026 GMT
Not After : Mar 4 16:38:33 2026 GMT
Subject: CN=082500EE962C9AB3F68DB781CDF68996BF9FCE02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:bb:fe:e4:a2:35:b8:f5:aa:d9:98:d2:9e:
82:62:e2:8c:58:4f:57:15:77:ca:e0:6e:8a:bf:ec:
8b:10:e1:42:c4:14:4f:a9:43:dd:1c:a0:44:58:c8:
8f:fc:31:2d:1c:72:a8:4b:70:2f:7a:f2:61:47:b2:
f3:73:eb:a5:fa:db:8b:1f:d6:c6:7e:dd:22:7c:20:
b7:eb:27:06:ed:3d:99:cb:3c:2f:15:d6:e1:ed:05:
9c:d5:12:90:60:b1:42:c3:04:f3:65:21:04:61:35:
fe:20:d9:d8:5c:65:c2:d5:63:45:01:43:6b:e4:44:
dc:da:8d:53:94:17:77:f0:be:4c:c1:4a:9a:3a:b5:
eb:62:4e:a5:bf:39:00:e2:8e:0c:57:bf:7d:e9:a6:
b5:e9:dd:83:18:56:5e:40:57:b4:60:d0:bb:60:63:
a0:c7:44:a0:0a:0e:b2:9a:6b:61:b8:93:6f:5a:4b:
a1:0b:fe:ca:17:95:03:19:98:14:df:f0:25:71:d2:
95:29:1b:7e:bd:09:56:da:3b:32:af:87:6a:5a:ae:
d1:7f:c4:28:ee:9d:6d:f7:7e:7d:b8:a5:5a:d8:13:
a1:fd:7e:69:ed:11:68:1b:31:cf:aa:5d:2c:80:88:
1d:ee:e6:7c:fd:09:74:8e:4a:26:04:5e:0c:54:26:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:25:00:EE:96:2C:9A:B3:F6:8D:B7:81:CD:F6:89:96:BF:9F:CE:02
X509v3 Authority Key Identifier:
keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:13:b0:47:c7:08:58:24:08:1d:7f:6a:93:1f:03:e0:2f:97:
68:76:c5:9f:00:cc:89:a2:34:26:a6:aa:09:98:53:0d:3d:ef:
07:27:01:04:c6:15:bc:9d:8a:5e:1a:c9:4e:c2:01:cc:cd:a0:
66:b5:2d:f3:08:6e:2a:44:3d:53:29:5f:16:58:a5:cf:18:cb:
51:6c:c0:49:38:d1:4d:f3:af:d7:53:79:96:1a:8b:13:81:ee:
f5:03:a6:d3:24:c1:a4:70:1f:c4:13:85:7d:de:6a:4c:7c:41:
b7:cc:e6:08:ec:86:04:63:c7:a0:c9:44:2d:16:d6:e3:34:79:
70:aa:50:64:83:fd:9c:e4:10:d2:3b:79:1c:69:3b:cb:71:94:
bc:67:18:45:db:ca:56:36:48:3c:4f:14:dc:9f:16:e9:a1:55:
94:9e:41:09:0a:b7:11:4f:0b:5d:30:ba:ee:a3:eb:16:d7:f2:
ca:41:dc:46:10:7b:f2:15:03:1e:d6:4e:e2:35:05:bc:da:59:
02:43:a6:b1:ff:28:2c:a4:d2:ac:20:ab:b2:df:79:4a:cc:f2:
6e:8f:7b:fd:08:79:38:86:3f:1f:7a:e5:2c:d7:1c:97:f8:19:
10:9f:9d:21:c3:2e:a8:03:a2:ef:5b:f1:5d:dd:12:03:54:5b:
fa:4d:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:20:25 2026 by rpki-client