
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json)
Hash identifier: 2cenNluh0WR4tsAg8BdfLg/5uyKNd7Kt64p8Qb1+Jtk=
Subject key identifier: 3B:C3:B5:E7:5F:74:26:38:F0:6D:66:3A:CC:35:5B:3B:B7:8B:C0:62
Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506
Certificate serial: 7D7B77929AB30802BAB3EDF3263B7A8C5AEA4628
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
Manifest number: 97
Signing time: Tue 04 Nov 2025 18:42:15 +0000
Manifest this update: Tue 04 Nov 2025 18:37:15 +0000
Manifest next update: Fri 07 Nov 2025 21:17:15 +0000
Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: GzGF8JP1wxoxEMe86DQB7mAHvtsyyqKJv0U6ViiQcao=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7b:77:92:9a:b3:08:02:ba:b3:ed:f3:26:3b:7a:8c:5a:ea:46:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506
Validity
Not Before: Nov 4 18:37:15 2025 GMT
Not After : Nov 7 21:17:15 2025 GMT
Subject: CN=3BC3B5E75F742638F06D663ACC355B3BB78BC062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c8:d1:2f:4d:74:92:e3:9a:e0:b6:5d:e5:7e:
f2:e8:6f:c3:5f:54:73:c0:12:3f:66:e2:6a:ef:fb:
8b:8e:b7:54:60:71:c7:12:e1:81:a9:83:09:4c:cb:
0e:a4:6c:aa:e4:05:91:31:17:86:25:c7:70:0a:48:
c2:ac:cc:2f:8b:20:d7:ca:67:3d:7e:1a:86:03:20:
04:5a:17:69:35:aa:f3:39:4d:c0:39:85:4d:67:92:
df:c6:e1:b5:1c:c7:15:85:c0:a3:2f:12:40:22:5b:
9f:6d:36:15:03:18:d4:d4:36:af:70:50:34:d4:7b:
3b:49:8f:98:f6:82:17:11:8e:d4:70:3b:fa:0f:75:
bc:d6:17:1e:db:b2:5c:b4:b8:d3:5f:86:46:59:d2:
73:c4:f2:40:b9:88:da:bd:e8:50:06:4b:54:d8:c7:
47:86:7c:45:7b:c8:57:ca:3a:1c:45:ea:e2:ca:cd:
7f:2f:a7:d6:3c:db:05:e2:d9:2a:43:47:52:6a:3c:
91:0e:0f:8d:ed:8a:1a:53:56:b6:ac:46:39:48:3c:
c5:8b:01:44:9b:6e:30:dd:0b:c3:9e:8c:89:c3:ed:
07:33:0e:83:03:5d:82:28:91:3f:e6:78:db:8f:35:
63:13:35:35:18:27:29:23:90:66:ed:66:a1:2d:9c:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C3:B5:E7:5F:74:26:38:F0:6D:66:3A:CC:35:5B:3B:B7:8B:C0:62
X509v3 Authority Key Identifier:
keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c5:09:14:65:38:d4:0c:a3:ee:11:d8:c4:da:e7:c9:b6:38:
ec:00:27:e4:f6:94:e8:ca:50:ab:68:83:9e:ad:b7:cc:a4:59:
c4:15:66:7c:54:0c:8c:7c:f2:dc:31:6c:68:d0:ff:23:73:c9:
40:90:60:af:a5:b4:32:a7:aa:75:88:b9:dd:3f:f9:81:ed:02:
c5:90:43:24:af:c3:05:c6:0a:60:98:da:8f:d1:e4:62:df:ac:
22:15:10:ff:c4:1d:44:62:99:e8:fc:5f:fd:79:69:f8:89:ac:
6a:65:92:67:74:6e:dd:b4:62:ac:9b:ad:10:9b:a8:13:f3:89:
c6:b3:56:7e:26:e0:f0:3c:7e:e8:e4:a8:41:5f:74:cd:7a:50:
b3:1a:f8:6e:1c:13:09:cd:16:37:39:3e:93:36:03:df:45:36:
0d:81:4b:15:2c:d4:1f:72:af:0a:1d:46:66:c6:87:0a:25:18:
ab:b5:21:be:1c:cb:27:29:06:6d:e0:72:2e:8e:54:6b:c8:23:
0b:16:1f:c3:5d:5a:7a:0d:f7:6e:5a:13:ec:d8:af:a7:4f:94:
58:0e:69:73:ed:23:63:fd:08:96:6a:4b:d7:20:dd:74:dd:e4:
12:fc:be:4f:51:be:0d:e6:ad:ed:ba:14:aa:aa:ad:57:20:c5:
9c:6c:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:38:29 2025 by rpki-client