
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json)
Hash identifier: uDg8jTfdWBVxaWaA4kLZxJiPWS5wwLHbDrs1RMIu/2I=
Subject key identifier: 11:52:72:03:C4:1B:08:0C:D0:0E:33:31:6A:B1:BD:DB:0F:99:DD:D4
Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08
Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108
Certificate serial: 46ABA677B0BDA3779A1C27DE2C5E4E4B48CC730F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 08:10:33 +0000
Manifest this update: Wed 29 Jul 2026 08:05:33 +0000
Manifest next update: Thu 30 Jul 2026 11:52:33 +0000
Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=)
2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=)
3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=)
4: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: NEqRWk3VbaYp4Vq25rBS03WyqD0Dscsa91NZ/y6spjY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl
rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ab:a6:77:b0:bd:a3:77:9a:1c:27:de:2c:5e:4e:4b:48:cc:73:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108
Validity
Not Before: Jul 29 08:05:33 2026 GMT
Not After : Jul 30 11:52:33 2026 GMT
Subject: CN=11527203C41B080CD00E33316AB1BDDB0F99DDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:78:fd:3c:0d:aa:df:69:a8:d0:a3:6b:67:
e8:9b:63:78:c9:bc:1e:0b:5b:8b:09:6a:30:ff:98:
01:7d:1f:58:99:05:ba:28:73:42:f8:3d:d1:6f:28:
56:d9:1a:83:12:50:94:d1:ef:3f:81:e6:6c:fc:ea:
f8:ab:aa:c0:45:c0:16:19:08:65:a6:b2:31:fe:98:
2d:1f:81:f2:75:bb:b5:99:c2:2c:0b:7c:24:cf:99:
7c:04:85:31:17:6d:5f:63:ff:16:ac:bd:41:3e:53:
f3:2a:5d:13:c2:fa:cb:97:9e:ad:12:6b:86:52:75:
2d:cf:1d:c5:a6:92:24:83:e0:32:aa:a7:fc:96:24:
74:f2:3d:63:08:b8:2c:61:c6:ec:77:8b:22:08:c3:
0b:90:1f:73:8f:10:06:72:1c:1c:48:f1:02:71:e3:
92:62:fe:e8:05:2c:dd:ad:bc:e9:ef:bc:45:6f:12:
a2:c3:fe:d7:64:26:d3:78:42:0c:df:e6:74:5d:58:
65:eb:cb:e1:89:c3:5d:55:46:80:0f:14:3f:de:cf:
e1:cc:19:ca:9a:d6:33:3e:02:24:ef:bb:8c:bb:5e:
8b:41:38:1e:46:0e:03:77:3c:56:fc:20:86:56:7a:
dd:57:84:6d:a2:47:34:14:08:de:7a:e6:b7:b1:b4:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:72:03:C4:1B:08:0C:D0:0E:33:31:6A:B1:BD:DB:0F:99:DD:D4
X509v3 Authority Key Identifier:
keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:e7:a5:0e:e7:b0:dd:f6:50:6b:c5:5e:82:fd:69:e7:55:
7b:e5:5b:da:b2:39:d3:9b:6f:d5:9a:c2:22:51:86:4b:ee:15:
f2:01:63:30:aa:ca:c0:7c:60:8e:bb:c2:62:54:6c:ac:eb:54:
fe:82:44:b3:db:03:dd:68:8c:97:af:73:13:8c:8d:42:83:5d:
59:0e:cc:e2:fd:f0:1e:24:99:f3:bb:8b:f5:a1:a1:a1:7f:cb:
8d:61:73:e8:ce:fe:24:7c:1f:99:23:97:81:86:3b:ef:ec:ef:
62:a8:85:b9:2d:47:9e:aa:d4:63:76:7c:4e:9b:7d:19:3f:43:
c6:d2:52:25:08:b5:30:52:16:6b:45:e2:55:4d:a8:26:3c:d0:
3f:0b:e2:8b:9c:34:99:f4:a1:61:ff:bd:ff:1b:c9:ce:7a:db:
6f:b0:8e:83:5d:b4:62:d0:3a:f8:25:1e:b2:37:1e:00:09:40:
ba:ee:b5:6b:10:e6:d3:5b:7c:da:67:97:81:49:6b:e3:6c:5d:
26:e7:18:9b:79:be:06:92:95:3a:32:f8:11:4e:8c:09:04:3b:
0c:cf:c7:78:67:59:c9:09:c2:b6:7a:82:36:17:fa:31:42:14:
b9:36:d8:84:a9:36:ea:84:ca:f9:d8:5e:b5:e8:9c:b3:20:87:
61:60:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:53 2026 by rpki-client