
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json)
Hash identifier: q2VOmdFfH0X5mePrH/UsGeT15X+v/nix50mejopxlF0=
Subject key identifier: 41:36:3A:53:10:28:EF:8B:42:34:8D:E8:85:BF:14:4A:4D:15:6E:E2
Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Certificate serial: 30F276A6ACE9805ADB3E301DE6A0A5416CD92E9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
Manifest number: 3F
Signing time: Tue 16 Jun 2026 17:20:06 +0000
Manifest this update: Tue 16 Jun 2026 17:15:06 +0000
Manifest next update: Wed 17 Jun 2026 19:32:06 +0000
Files and hashes: 1: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: 0R5xUZMZBNxwCprKf4HAAibK9L1o0na+mFl5J67BXsE=)
2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f2:76:a6:ac:e9:80:5a:db:3e:30:1d:e6:a0:a5:41:6c:d9:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Validity
Not Before: Jun 16 17:15:06 2026 GMT
Not After : Jun 17 19:32:06 2026 GMT
Subject: CN=41363A531028EF8B42348DE885BF144A4D156EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:8d:c2:66:b5:9d:9a:e5:af:9d:cf:0f:79:
fd:34:51:ce:27:be:10:94:ad:54:34:1b:cc:d9:3f:
72:78:de:c1:ed:d3:f3:c4:2f:87:0c:fe:a8:a9:64:
c9:6a:7c:14:9f:05:93:d9:44:ed:8e:18:2f:7d:8c:
af:3b:bb:85:3e:a1:02:72:c6:85:c3:59:8b:46:af:
b7:d4:f1:c9:3c:ef:d5:08:4a:59:f1:91:ec:bb:53:
1c:e1:19:05:0f:32:ac:88:1e:58:ad:b4:e7:2f:77:
19:2d:7d:6c:9c:3e:9d:44:06:c2:d6:a6:4c:10:67:
c6:a5:8a:d6:3e:e3:36:1a:3b:f3:87:a9:15:50:15:
cb:9a:ad:5c:9d:4c:ae:6b:8e:8b:31:2b:3c:ce:5a:
da:78:35:27:14:e9:d2:6a:c3:e7:fa:2b:e9:e8:a6:
c3:35:73:b6:c0:69:53:a6:5e:33:b4:57:1b:69:ba:
7e:70:02:e2:ba:5e:5d:3e:4e:77:8b:74:81:07:d2:
9c:00:a8:be:06:ef:06:11:c5:f2:dd:3d:a8:ac:49:
2f:63:59:82:82:a1:57:a2:e1:b3:e7:93:0c:0f:b8:
cc:2c:07:01:de:ee:99:17:21:2f:b9:e4:c9:74:e7:
ed:44:4a:8b:54:87:ef:cb:b1:42:97:3d:c4:f1:fe:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:36:3A:53:10:28:EF:8B:42:34:8D:E8:85:BF:14:4A:4D:15:6E:E2
X509v3 Authority Key Identifier:
keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d1:c4:cb:7b:f2:f5:83:81:dd:ea:69:f5:c3:89:3c:60:1f:
bf:9d:d0:60:d3:e4:dc:73:88:ad:eb:52:7a:74:10:58:50:67:
50:1d:10:2a:be:ec:0c:ab:20:83:94:f2:95:78:1c:57:93:b2:
86:77:84:8c:8a:be:2f:51:27:1b:df:3f:10:16:38:d7:d9:26:
de:e8:11:12:1d:fc:13:80:b9:d3:42:53:66:a2:c5:7e:27:6b:
b3:ca:e7:64:82:83:9b:ac:48:3d:15:8b:14:dd:a7:63:27:70:
73:c5:26:43:70:80:65:32:d3:94:77:43:47:05:43:6d:d2:4d:
e7:6d:c2:25:3e:eb:7f:ff:26:14:09:45:28:0c:3a:11:85:67:
c0:ec:be:07:9b:51:da:26:68:0f:2d:a5:ad:4e:f3:a1:82:85:
53:e2:a6:b3:b6:7b:c3:4a:14:23:9c:eb:c7:78:80:dd:08:df:
34:00:c1:d5:b7:df:d0:31:f1:16:86:0c:aa:cd:15:6e:c8:a6:
ee:26:22:fb:e8:8d:2c:82:e0:03:a7:9f:ab:cb:1e:33:2a:59:
ed:06:e1:f2:a2:48:a2:3f:22:53:7c:42:60:b9:44:0a:71:85:
02:8b:0e:ca:55:eb:96:22:6a:f7:d7:2e:51:b1:b1:43:ea:d4:
1e:62:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:50:20 2026 by rpki-client