
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json)
Hash identifier: 46SqPpsX7cnZ6UGxNDp635P0BouBbJw/bAg1MmHrInA=
Subject key identifier: 04:79:FE:A4:10:D8:3B:58:05:9B:17:38:7E:95:F1:10:6F:55:93:E1
Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Certificate serial: 45BAD7BD5AF95DCE0B92AD5346AFDB9528432E1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:04:18 +0000
Manifest this update: Wed 17 Jun 2026 00:59:18 +0000
Manifest next update: Thu 18 Jun 2026 04:17:18 +0000
Files and hashes: 1: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: iE9CRwpkRhR9HqgFMSB08eZptG63xX6+Y5JWCxNIXP0=)
2: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ba:d7:bd:5a:f9:5d:ce:0b:92:ad:53:46:af:db:95:28:43:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Validity
Not Before: Jun 17 00:59:18 2026 GMT
Not After : Jun 18 04:17:18 2026 GMT
Subject: CN=0479FEA410D83B58059B17387E95F1106F5593E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:4c:75:37:c8:50:f6:fa:6b:2f:93:43:ac:
dd:b9:ca:76:5d:92:56:97:c6:65:2a:53:16:40:ab:
89:0e:6b:1d:9a:eb:86:e8:27:37:e6:ed:16:0b:4c:
57:a2:3d:39:69:21:16:91:70:c7:03:30:ba:b7:c2:
d8:27:9f:1c:6f:47:de:a2:f8:0f:f7:e4:7d:e3:23:
9a:e5:6f:eb:2d:91:8d:2d:93:78:44:5b:5c:61:c0:
98:75:e2:f8:0f:35:11:34:da:67:a1:cf:9a:5e:8b:
6a:9e:13:23:fa:8e:4f:be:cc:ae:9d:d9:ac:1c:2d:
c2:bc:e0:5a:73:d5:46:4a:06:bb:20:78:29:66:0d:
2a:6d:22:43:2e:8f:06:46:61:e9:f2:5e:31:df:5a:
02:83:f8:c1:e0:6c:5e:bd:79:fe:3f:2d:ae:17:15:
eb:26:56:3a:21:28:28:1f:36:8e:d1:f7:85:dc:b1:
0c:38:ec:fb:08:88:57:d3:30:d2:65:4e:5a:df:20:
88:8b:89:90:c5:c4:e7:0a:a4:6b:70:52:63:2c:70:
19:f5:0a:b6:15:48:e5:f6:50:73:4c:43:cc:c6:75:
ca:30:61:c4:e2:9c:d7:c3:4e:51:1d:16:bb:ea:e1:
bc:fe:84:76:12:0e:44:c0:a8:c6:a2:c0:73:e0:73:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:FE:A4:10:D8:3B:58:05:9B:17:38:7E:95:F1:10:6F:55:93:E1
X509v3 Authority Key Identifier:
keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:67:54:ff:e7:25:90:62:22:d9:93:b8:e1:7e:37:23:3e:a6:
a2:62:f6:76:13:e0:36:e8:83:19:c1:71:b8:9d:77:4c:e7:ce:
8c:c2:0b:ee:f2:da:80:82:04:42:e9:e3:63:c6:af:6b:bd:07:
a8:f7:25:8f:c7:ce:af:c3:c0:1c:1b:cd:fa:70:89:0b:02:ea:
99:4f:d1:94:13:e3:7a:64:0b:b3:cf:f4:38:c1:e7:9e:c2:5e:
34:20:09:47:73:e3:73:16:cc:44:b0:db:ef:c8:ad:0f:d3:a4:
d7:9f:2c:69:14:93:ae:ca:9c:f7:41:3a:61:59:e8:5f:ef:1e:
3b:ab:60:dc:7f:df:07:6e:af:9a:ba:da:5a:04:8b:f9:a2:6f:
32:c3:d2:a9:c7:c4:5a:fe:31:e3:0c:14:40:45:3b:82:29:9a:
09:74:f6:37:78:89:9f:33:51:23:6a:f3:c7:36:22:21:ea:69:
90:fa:7e:69:bc:b1:db:44:e3:55:3c:5a:6c:16:14:13:d1:e8:
9a:63:af:a2:8b:13:b7:48:52:02:d8:f3:93:45:25:11:a4:35:
ee:72:9f:cc:0c:e2:b4:9b:da:84:5e:d8:d7:a0:6a:8a:bf:38:
11:c2:c0:22:89:f6:29:da:9f:41:62:b7:6c:c5:3e:b6:b9:7e:
50:05:36:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURbrXvVr5Xc4Lkq1TRq/blShDLhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVF
OTZCOEJDNjAeFw0yNjA2MTcwMDU5MThaFw0yNjA2MTgwNDE3MThaMDMxMTAvBgNV
BAMTKDA0NzlGRUE0MTBEODNCNTgwNTlCMTczODdFOTVGMTEwNkY1NTkzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tUx1N8hQ9vprL5NDrN25ynZd
klaXxmUqUxZAq4kOax2a64boJzfm7RYLTFeiPTlpIRaRcMcDMLq3wtgnnxxvR96i
+A/35H3jI5rlb+stkY0tk3hEW1xhwJh14vgPNRE02mehz5pei2qeEyP6jk++zK6d
2awcLcK84Fpz1UZKBrsgeClmDSptIkMujwZGYenyXjHfWgKD+MHgbF69ef4/La4X
FesmVjohKCgfNo7R94XcsQw47PsIiFfTMNJlTlrfIIiLiZDFxOcKpGtwUmMscBn1
CrYVSOX2UHNMQ8zGdcowYcTinNfDTlEdFrvq4bz+hHYSDkTAqMaiwHPgc4QjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBHn+pBDYO1gFmxc4fpXxEG9Vk+EwHwYDVR0j
BBgwFoAU32I5sQC7X4t1ctvtzarwhelri8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWZiZTEwZDEtZmU2NC00MzNmLWI1ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEw
MEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVFOTZCOEJDNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERjYyMzlCMTAwQkI1RjhCNzU3MkRCRURDREFBRjA4NUU5NkI4
QkM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1
ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYw
ODVFOTZCOEJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJdnVP/nJZBiItmTuOF+NyM+pqJi9nYT4Dbo
gxnBcbidd0znzozCC+7y2oCCBELp42PGr2u9B6j3JY/Hzq/DwBwbzfpwiQsC6plP
0ZQT43pkC7PP9DjB557CXjQgCUdz43MWzESw2+/IrQ/TpNefLGkUk67KnPdBOmFZ
6F/vHjurYNx/3wdur5q62loEi/mibzLD0qnHxFr+MeMMFEBFO4Ipmgl09jd4iZ8z
USNq88c2IiHqaZD6fmm8sdtE41U8WmwWFBPR6Jpjr6KLE7dIUgLY85NFJRGkNe5y
n8wM4rSb2oRe2Negaoq/OBHCwCKJ9inan0Fit2zFPra5flAFNrs=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:24 2026 by rpki-client