
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
File: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft (raw, json)
Hash identifier: mc6CiJk1yVXiZ9dVwHDO2c6R58msHfsRotx+zLfNkVA=
Subject key identifier: 09:EF:E0:81:C6:7B:5D:FC:7B:8E:3C:6D:9B:75:59:70:11:09:E8:6D
Authority key identifier: 06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
Certificate issuer: /CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Certificate serial: 65A4F821A543148AB463202C12451DD09E1B22A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 06:44:51 +0000
Manifest this update: Mon 21 Sep 2026 06:39:51 +0000
Manifest next update: Tue 22 Sep 2026 08:25:51 +0000
Files and hashes: 1: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: WAD2+w/CJq7TKnjfHAKkYTukDrVBX6bUYx0hl9v//LE=)
2: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: 4qEfAhcwD7rfPzD19j4fQcoIdGMpA7OvU8syRxtutsI=)
3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: c1IaaPvES86C/ZZ1qO/4DafLyFYnH2TdFMWKivpkZPQ=)
4: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl (hash: NaUOIQTtNalyTIuVkSTQ+sJxWvt/K5ne+01d3DVUFQ0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a4:f8:21:a5:43:14:8a:b4:63:20:2c:12:45:1d:d0:9e:1b:22:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Validity
Not Before: Sep 21 06:39:51 2026 GMT
Not After : Sep 22 08:25:51 2026 GMT
Subject: CN=09EFE081C67B5DFC7B8E3C6D9B7559701109E86D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:3e:a7:1f:e1:4e:f4:c0:22:4d:f7:6c:ed:
d0:21:ac:e0:7d:38:3a:68:44:11:c3:5f:98:4d:68:
97:1c:8c:13:43:5e:fe:79:62:39:ad:27:6d:e7:eb:
5c:86:dd:36:8c:4a:66:f5:a3:ae:33:13:d5:a0:17:
79:67:46:d5:9a:aa:f6:7c:2b:6b:3b:f7:64:31:ca:
a9:41:85:30:aa:35:4c:0d:bc:4b:84:de:ac:9b:ca:
b8:99:fa:8a:ba:bc:3a:88:f0:61:50:76:0f:c3:f0:
91:e2:e7:b1:bf:2f:f4:9b:34:e0:a0:e9:96:0c:15:
26:c2:cd:f4:57:18:9b:e2:1b:1f:c9:63:90:52:01:
0d:97:36:29:45:9c:67:1f:72:31:14:0a:1a:7a:ad:
24:98:08:31:7d:dd:4c:54:23:c6:15:61:d2:aa:4b:
30:e8:10:19:c1:3a:e7:e3:ac:76:0b:d9:08:ab:4d:
bb:ec:d1:c0:cc:27:b2:ca:d7:fe:af:01:ed:73:81:
5f:ac:af:aa:9c:fc:74:39:6a:87:18:03:64:40:d8:
92:74:65:52:6a:a8:34:59:c8:b0:fc:59:d1:cb:3b:
ed:9a:5b:f9:12:95:54:4a:da:49:eb:0c:34:7a:3a:
04:5a:13:de:b5:75:e8:59:74:35:a9:43:13:e6:5a:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:E0:81:C6:7B:5D:FC:7B:8E:3C:6D:9B:75:59:70:11:09:E8:6D
X509v3 Authority Key Identifier:
keyid:06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:8a:45:6f:28:14:c3:99:bb:83:ee:05:07:f9:37:bf:b3:
49:1e:20:77:7e:39:c8:c3:3e:46:4b:56:12:1b:16:33:e1:93:
02:f3:07:af:2a:07:8f:d3:93:b4:4a:cb:bc:01:8d:8e:22:ad:
33:b4:d2:81:56:ed:9a:29:25:88:17:84:15:21:a7:d1:9a:93:
77:15:eb:de:ca:ad:4f:8f:ce:ee:bb:2c:bf:ab:8c:68:6a:3c:
70:f2:07:21:19:ce:81:97:07:80:1d:53:63:c6:c5:18:49:84:
ea:26:c2:8b:09:a8:21:3f:57:5f:69:5a:95:ae:3a:53:10:14:
96:cf:30:20:d9:0f:5d:bc:42:f2:91:4f:37:6c:ba:b8:3c:c6:
d2:fb:00:e2:7a:15:15:e4:cd:8e:bd:04:0a:0a:01:2e:df:15:
82:38:da:f5:de:22:66:96:c6:d8:26:3f:ec:bc:27:24:43:de:
5a:05:db:54:45:53:2f:0e:d5:94:04:d8:93:9b:39:92:37:89:
51:2d:6b:f8:6d:07:e9:33:cc:06:e2:46:ae:ed:c6:92:6f:37:
11:a8:38:70:a9:0a:7f:d4:4d:5d:08:42:4a:d2:26:78:50:74:
15:31:f5:68:42:ee:b8:42:09:59:c8:81:b4:d6:f3:bf:3a:65:
bd:b2:78:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZaT4IaVDFIq0YyAsEkUd0J4bIqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZENkI4MDc3RjNEMDI4REJEMkRGQ0QzRDU0NTc3Q0Iz
NTFFNEIzNjAeFw0yNjA5MjEwNjM5NTFaFw0yNjA5MjIwODI1NTFaMDMxMTAvBgNV
BAMTKDA5RUZFMDgxQzY3QjVERkM3QjhFM0M2RDlCNzU1OTcwMTEwOUU4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHT6nH+FO9MAiTfds7dAhrOB9
ODpoRBHDX5hNaJccjBNDXv55YjmtJ23n61yG3TaMSmb1o64zE9WgF3lnRtWaqvZ8
K2s792QxyqlBhTCqNUwNvEuE3qybyriZ+oq6vDqI8GFQdg/D8JHi57G/L/SbNOCg
6ZYMFSbCzfRXGJviGx/JY5BSAQ2XNilFnGcfcjEUChp6rSSYCDF93UxUI8YVYdKq
SzDoEBnBOufjrHYL2QirTbvs0cDMJ7LK1/6vAe1zgV+sr6qc/HQ5aocYA2RA2JJ0
ZVJqqDRZyLD8WdHLO+2aW/kSlVRK2knrDDR6OgRaE961dehZdDWpQxPmWtP/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCe/ggcZ7Xfx7jjxtm3VZcBEJ6G0wHwYDVR0j
BBgwFoAUBta4B389Ao29LfzT1UV3yzUeSzYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTFjNDg3NTYtYjY2Mi00NjhhLTkwNmQtNmNkNDYxY2I2ZTQyLzAvMDZENkI4MDc3
RjNEMDI4REJEMkRGQ0QzRDU0NTc3Q0IzNTFFNEIzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNkQ2QjgwNzdGM0QwMjhEQkQyREZDRDNENTQ1NzdDQjM1MUU0
QjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw
NmQtNmNkNDYxY2I2ZTQyLzAvMDZENkI4MDc3RjNEMDI4REJEMkRGQ0QzRDU0NTc3
Q0IzNTFFNEIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADjNikVvKBTDmbuD7gUH+Te/s0keIHd+OcjD
PkZLVhIbFjPhkwLzB68qB4/Tk7RKy7wBjY4irTO00oFW7ZopJYgXhBUhp9Gak3cV
697KrU+Pzu67LL+rjGhqPHDyByEZzoGXB4AdU2PGxRhJhOomwosJqCE/V19pWpWu
OlMQFJbPMCDZD128QvKRTzdsurg8xtL7AOJ6FRXkzY69BAoKAS7fFYI42vXeImaW
xtgmP+y8JyRD3loF21RFUy8O1ZQE2JObOZI3iVEta/htB+kzzAbiRq7txpJvNxGo
OHCpCn/UTV0IQkrSJnhQdBUx9WhC7rhCCVnIgbTW8786Zb2yeAs=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:33:37 2026 by rpki-client