
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json)
Hash identifier: YemEHPjnUJhMRz1v55tUzl4/GXw6FijrPD4oJRS8WCQ=
Subject key identifier: 7E:E6:74:E7:15:F9:4D:75:0C:97:27:FA:92:3C:89:D3:8B:9A:A8:15
Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Certificate serial: 65EEC829659A5AB718E3D2E278A729C160A3895E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 05:07:50 +0000
Manifest this update: Tue 22 Sep 2026 05:02:50 +0000
Manifest next update: Wed 23 Sep 2026 08:09:50 +0000
Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=)
2: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: YvmUHbdq02lIF+hnLm5VRcltN/yjj0ymrikS7QjR4yA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 08:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ee:c8:29:65:9a:5a:b7:18:e3:d2:e2:78:a7:29:c1:60:a3:89:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Validity
Not Before: Sep 22 05:02:50 2026 GMT
Not After : Sep 23 08:09:50 2026 GMT
Subject: CN=7EE674E715F94D750C9727FA923C89D38B9AA815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:aa:c9:72:d9:73:9b:8d:b5:37:e1:a5:36:
98:0d:f0:e6:9b:61:4d:a5:dd:2e:51:22:7d:b4:9c:
e0:78:9d:9e:f3:b5:9a:70:f9:54:7a:71:ef:c3:4b:
38:74:ff:8e:ad:72:7d:a0:ed:e6:2d:89:df:ec:d8:
bf:ce:23:de:24:83:13:e8:bf:45:07:ba:50:5e:fd:
c0:72:eb:7a:67:83:4d:5a:05:64:f9:40:8c:2e:be:
fb:a6:3a:8a:27:89:9c:73:c5:19:a1:aa:f9:22:22:
28:0e:86:dd:c3:be:df:4c:a1:a7:3a:2c:70:59:d2:
01:39:53:f0:29:61:aa:79:bc:0d:96:7c:bf:2d:ef:
fc:c4:c4:54:87:6b:cb:f2:d4:57:6a:cb:a9:ba:3d:
2d:a5:4b:5e:b0:2c:c6:40:21:3f:fd:30:f6:9d:e6:
8d:40:dc:96:c9:be:a4:69:2b:c4:7f:8a:01:ab:96:
31:6b:77:24:71:7c:53:6a:b5:ff:54:30:64:de:2c:
ac:bf:15:07:41:fe:ae:fa:b1:dd:21:c0:d4:53:2b:
28:90:2d:b9:16:9b:97:21:10:0f:59:7e:f2:78:68:
45:ee:34:00:b1:bf:7b:1f:d4:9b:20:7c:af:a4:9d:
6d:08:a7:ac:52:fe:15:3b:3c:15:97:f5:2d:08:fd:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:74:E7:15:F9:4D:75:0C:97:27:FA:92:3C:89:D3:8B:9A:A8:15
X509v3 Authority Key Identifier:
keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5b:14:1a:15:c5:85:5e:e3:a9:d1:7d:39:54:ec:e3:b2:7a:
fb:7d:00:16:5a:0b:41:00:f1:74:09:db:22:55:d3:4d:61:be:
9a:71:25:50:37:b0:1f:e8:38:34:c0:89:ec:1a:4c:e4:e4:1b:
99:05:30:a1:75:34:4c:7a:e4:25:a2:5d:52:2b:25:f3:2c:3a:
59:20:65:b3:a9:09:01:fd:14:47:d0:c3:24:6a:60:80:63:da:
6b:10:1d:92:f7:dd:95:d0:76:19:f9:dc:50:23:e5:9b:20:4b:
cb:cc:8e:a8:5d:a7:46:b8:59:9d:ca:fa:77:f2:87:02:06:4b:
c8:a3:ad:46:4c:d9:fa:b7:bf:fd:e0:0f:6a:ee:a8:eb:15:49:
fb:83:2a:ea:a9:35:3c:80:80:5b:d9:06:51:7a:72:84:47:af:
aa:57:82:4e:79:d9:ed:f7:84:48:9d:83:26:5b:a2:42:24:07:
55:9c:57:e0:a3:08:61:c9:16:70:3e:9c:bd:5e:f2:67:8a:fe:
2a:33:d4:96:22:a8:c5:f8:cc:fb:c1:b4:b7:35:cc:4a:dc:39:
da:04:0f:d2:66:15:2f:1c:81:0b:2c:17:7b:f7:2a:f3:8e:17:
00:49:03:d1:c0:f9:95:53:7a:56:7c:4f:ba:88:1a:e1:ba:d6:
03:7f:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:28 2026 by rpki-client