
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json)
Hash identifier: Ht07JM4seG0CySFyCe5oe8SaqXPuqLRtLLrP7UKGvtU=
Subject key identifier: A3:49:34:1E:BA:00:CD:F1:0A:22:1A:FA:36:78:0A:50:B1:EF:ED:54
Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Certificate serial: 2D1458FB998A353B108AE6AEAF566318AD7E761A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 05:12:36 +0000
Manifest this update: Mon 15 Jun 2026 05:07:36 +0000
Manifest next update: Tue 16 Jun 2026 07:08:36 +0000
Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=)
2: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: hjHPnkQElGHmCWCbwpPe7iRXj842DuPTGjM1KTqKVZM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:14:58:fb:99:8a:35:3b:10:8a:e6:ae:af:56:63:18:ad:7e:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Validity
Not Before: Jun 15 05:07:36 2026 GMT
Not After : Jun 16 07:08:36 2026 GMT
Subject: CN=A349341EBA00CDF10A221AFA36780A50B1EFED54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:45:0b:4b:10:c4:95:6a:a4:ef:bb:65:31:
77:55:33:ed:d3:b9:45:c3:41:67:c1:51:ac:f4:63:
3d:a3:dc:4c:bc:df:6c:7f:b8:78:8f:fc:d2:5b:72:
38:ae:f4:aa:e8:96:f5:f9:28:81:7c:02:91:25:7d:
9a:b9:e9:00:b6:ab:43:b4:9e:53:93:25:e5:2e:7f:
1f:54:0b:e6:7b:89:38:f7:32:d4:7c:cb:14:07:9f:
ab:ad:82:ac:3b:4f:22:33:0d:b7:dc:9c:51:44:6c:
a5:8a:bc:55:45:fe:0e:12:9d:85:2a:e7:52:40:70:
69:bb:a1:15:f3:55:f9:3e:6a:21:f5:1e:04:0d:53:
c3:72:8a:a8:d6:02:6f:a8:20:6e:de:9a:37:5a:87:
94:d1:ec:39:f4:92:6e:b8:9c:d3:77:ff:2d:82:2c:
ff:04:eb:8e:61:61:38:02:4d:51:66:db:9f:80:d0:
ab:da:53:35:c3:40:3b:27:0f:02:a4:2b:02:45:ea:
0d:61:73:f5:6c:be:10:c1:70:44:dc:9a:62:43:88:
c7:c7:10:3e:0d:2c:cd:1b:7b:2a:2d:95:39:91:51:
ad:e7:fd:0e:32:87:5a:d8:87:4a:05:7f:a3:79:82:
bd:8c:b0:7c:30:ce:25:40:82:8c:d5:bc:33:45:56:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:34:1E:BA:00:CD:F1:0A:22:1A:FA:36:78:0A:50:B1:EF:ED:54
X509v3 Authority Key Identifier:
keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6e:7c:2a:0b:73:19:09:7a:e4:11:49:7b:05:c1:4f:13:7c:
71:13:5a:03:81:88:60:77:72:8c:77:ae:41:56:26:ce:0a:e3:
ed:0d:48:fd:b5:f2:56:8b:0f:88:66:61:9d:6e:a2:eb:d2:d8:
5c:ae:1f:52:c9:0e:5d:cf:de:cf:2e:97:1b:1e:d6:74:86:a6:
74:fd:d3:c8:46:75:65:27:ab:03:4c:54:e7:c8:06:c7:2f:bf:
1f:98:47:21:d4:59:96:eb:42:aa:f1:9c:33:16:da:52:c9:62:
20:a1:b7:a1:f7:af:fb:c3:1e:e0:96:5b:1d:6c:74:fe:bb:76:
b9:19:52:2c:f7:8c:32:0c:2e:0e:a5:25:72:6e:23:09:e1:1c:
1b:89:ee:7d:a7:c5:93:09:29:a1:aa:ba:97:c3:3d:5e:f8:62:
3b:06:6c:60:2f:25:37:59:b0:4e:92:a8:c8:24:e2:84:cc:80:
73:17:ae:03:f9:9f:be:2b:ce:26:54:ed:ba:4a:82:2b:9f:1a:
45:8c:a8:58:5e:b7:59:c4:46:7d:b3:c4:9e:1a:8c:ef:7f:c5:
ce:24:00:6d:ea:60:24:fe:f2:94:55:85:27:f7:9b:fb:26:fe:
7c:48:2d:3e:ee:db:d9:65:7b:c5:9a:ef:be:df:72:c9:a3:d8:
00:74:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 20:08:00 2026 by rpki-client