
$ rpki-client -vvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json)
Hash identifier: xN/+Np2IGbSh1Nafznh1C0fBIuX3WXGyWoB1wQ2xobk=
Subject key identifier: 47:2F:4C:7B:ED:F4:A3:B0:EB:4E:97:3F:DF:17:FD:1C:95:91:10:E9
Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Certificate serial: 5D3E0FC629746772E69D83623A055D329BD3E4C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:10:24 +0000
Manifest this update: Wed 17 Jun 2026 02:05:24 +0000
Manifest next update: Thu 18 Jun 2026 05:18:24 +0000
Files and hashes: 1: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: Grw5RXqhYjJ0f5RAono5y4W5I4V4hK7wsFJVbefBI08=)
2: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=)
3: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=)
4: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=)
5: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=)
6: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:3e:0f:c6:29:74:67:72:e6:9d:83:62:3a:05:5d:32:9b:d3:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Validity
Not Before: Jun 17 02:05:24 2026 GMT
Not After : Jun 18 05:18:24 2026 GMT
Subject: CN=472F4C7BEDF4A3B0EB4E973FDF17FD1C959110E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:ce:6c:85:0e:1a:96:5f:1d:be:a3:d0:72:
3d:69:07:dd:d6:8f:fb:2c:9e:f3:cb:ac:2b:bd:15:
8e:c1:5c:dd:d7:d5:5d:4e:c6:85:16:b7:0b:a9:c3:
75:80:5e:da:45:78:ab:39:c3:23:e6:5c:a4:90:a9:
28:78:92:5c:f7:4f:ed:f2:01:32:fe:95:18:4a:c0:
05:a0:27:98:98:73:dd:cd:d7:97:2e:2e:2b:07:42:
d4:24:2a:24:73:bb:74:4c:15:33:73:ec:ce:7f:ee:
af:01:ba:c1:00:21:e2:b3:00:bf:2b:53:37:0b:d7:
15:f0:12:e8:69:de:29:9f:fc:38:32:2a:7c:6b:a6:
3d:ab:dd:e0:3e:93:36:7d:c6:29:6d:a7:f5:40:db:
03:ca:72:62:47:4c:4d:f4:0f:99:a8:29:4e:28:d2:
a7:a1:13:20:31:0b:83:dc:af:f5:92:32:b3:e1:45:
c6:0c:8d:e5:a7:ed:51:04:a1:68:de:2d:90:e7:6a:
99:f7:3b:3f:32:9e:4c:b8:b6:f5:af:3f:60:25:a9:
08:d1:23:1a:fb:c4:a1:89:dd:52:7e:ff:bc:a9:00:
35:b1:c9:fd:ee:23:63:1a:2a:b2:2f:22:99:d5:3b:
86:a8:95:6e:10:33:56:11:51:b7:4b:0c:42:e6:aa:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:4C:7B:ED:F4:A3:B0:EB:4E:97:3F:DF:17:FD:1C:95:91:10:E9
X509v3 Authority Key Identifier:
keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:44:ad:8b:5d:4b:8f:86:24:d1:5c:6b:64:3b:0a:10:06:38:
84:a6:ef:f1:7a:7c:01:c5:55:db:23:d9:b9:a8:44:23:49:a9:
e3:66:8a:e1:2d:bb:4d:cb:8f:8e:91:23:66:aa:53:ed:2a:c2:
7c:46:3e:9d:b9:e0:78:46:62:19:66:5b:1a:41:86:e2:c7:12:
f5:ac:38:4f:58:88:d9:e4:f8:7f:15:3d:71:62:92:a5:7b:88:
85:df:69:3e:26:d5:cc:48:de:d1:4e:00:16:6c:f1:00:1b:2f:
01:31:25:54:d3:40:b9:3e:f9:19:bc:75:f4:4b:d0:42:5f:0f:
2f:2d:8d:3a:f8:d3:f9:25:a3:6e:84:0a:c4:9e:26:68:0d:58:
92:c8:e4:00:88:18:06:ee:af:56:20:05:a9:15:13:9f:19:6b:
ec:38:b1:2c:50:b2:bd:6d:48:c5:94:27:74:25:46:63:94:18:
73:82:70:cd:d2:80:80:d9:b9:d4:39:79:3d:eb:c2:0d:a7:c6:
27:0b:5e:96:ef:50:99:f5:e9:0c:bd:0f:68:30:2d:7a:25:b2:
f4:6d:a8:c4:42:8e:5f:fb:aa:6f:be:82:f6:4e:52:bd:88:92:
5d:1d:fe:c1:96:a8:c7:d0:e5:50:b8:d7:c6:e3:fd:97:89:4d:
30:48:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:28 2026 by rpki-client