
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
File: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft (raw, json)
Hash identifier: zwlXMwyqfrNVv0R9weZuDyxnp784X6lkqXGvMzfU3/U=
Subject key identifier: DB:16:A0:81:8D:AD:F5:6A:AC:45:0D:49:E4:A9:7D:D2:CB:D2:8B:92
Authority key identifier: 06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
Certificate issuer: /CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Certificate serial: 46F1AAD163EB145EB372C72DF33EF5C9DB054F5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 18:41:39 +0000
Manifest this update: Tue 16 Jun 2026 18:36:39 +0000
Manifest next update: Wed 17 Jun 2026 22:23:39 +0000
Files and hashes: 1: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: 4qEfAhcwD7rfPzD19j4fQcoIdGMpA7OvU8syRxtutsI=)
2: 06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl (hash: vB0jbS3V65ndyiulba8Cmkcx39dAHgEYkZFBWoX6z/4=)
3: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: WAD2+w/CJq7TKnjfHAKkYTukDrVBX6bUYx0hl9v//LE=)
4: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: c1IaaPvES86C/ZZ1qO/4DafLyFYnH2TdFMWKivpkZPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f1:aa:d1:63:eb:14:5e:b3:72:c7:2d:f3:3e:f5:c9:db:05:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Validity
Not Before: Jun 16 18:36:39 2026 GMT
Not After : Jun 17 22:23:39 2026 GMT
Subject: CN=DB16A0818DADF56AAC450D49E4A97DD2CBD28B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:46:1e:87:60:06:87:10:57:c8:90:09:88:
2d:63:7d:ae:4b:c6:14:cc:77:0e:79:b0:55:4c:cd:
e1:d8:4a:26:fa:75:9a:19:4f:98:e4:10:41:86:e5:
5c:76:a4:2e:91:d5:51:57:bf:ef:51:8e:2f:4c:6e:
94:ef:2a:64:f2:ec:6c:1e:85:ab:4f:3c:21:c3:09:
49:f9:7a:6f:de:e5:4f:3d:48:8a:1a:7e:ac:db:44:
bb:95:03:1b:ec:cd:4f:36:01:4d:01:bf:8c:e1:aa:
d4:e8:be:f9:c1:30:8f:85:62:df:f9:38:29:7d:1d:
78:81:1e:15:08:45:fc:fe:c2:ab:19:c5:79:1b:1f:
f4:c0:df:01:75:79:ca:cb:6f:20:51:08:7b:51:4f:
5b:50:32:55:64:c8:93:5b:36:74:7a:28:ac:b3:85:
54:4c:fb:58:bf:2b:29:cb:18:08:aa:cb:c2:b8:58:
87:24:e1:06:c3:ee:ee:c3:e8:87:4d:15:f2:a6:15:
06:9b:cb:46:81:f2:a9:8c:88:d1:f0:3f:cc:ef:35:
6d:87:3b:f3:2a:4e:28:07:df:02:1e:8c:96:bd:0b:
3a:79:81:aa:aa:08:91:0d:09:89:f4:f3:d9:d0:1d:
a1:87:39:ee:32:5c:c0:0b:36:d4:c9:be:e0:6d:40:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:16:A0:81:8D:AD:F5:6A:AC:45:0D:49:E4:A9:7D:D2:CB:D2:8B:92
X509v3 Authority Key Identifier:
keyid:06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:a1:17:47:f4:7c:00:d2:5f:0a:7b:5d:14:bd:1c:8b:20:
44:a8:39:67:f8:ad:b2:19:3e:48:76:44:54:06:38:3b:6d:58:
5e:46:00:43:1c:ff:e6:05:a3:8b:de:b1:0e:74:aa:5c:74:87:
ec:75:01:de:dd:dc:a7:64:9a:f8:a0:a6:25:07:ca:d0:ff:56:
e7:1e:3f:c0:7b:26:f5:3c:95:99:76:8f:d7:39:f7:f2:3c:b5:
65:53:c0:3f:1c:ee:45:51:61:85:52:0b:85:34:ce:77:40:63:
52:f7:25:d1:ce:ca:a1:27:18:70:88:d6:36:bc:a4:4c:29:39:
bb:1e:2f:89:13:02:6e:67:ba:c2:b2:25:e0:7b:ef:4e:2c:65:
4f:1a:6e:02:60:fb:33:59:cc:74:c4:f4:b7:00:65:7d:4e:e7:
9d:4d:96:23:76:bb:06:59:ae:a9:4d:02:8a:6f:f3:31:ef:3c:
a4:da:20:66:94:ae:23:7f:cc:e7:ce:db:0e:ff:4f:d8:2d:2a:
d9:a4:57:b7:3d:27:d7:95:ab:14:3f:14:67:04:fc:c9:c6:1c:
b5:43:eb:5f:e8:0b:85:81:c0:ed:33:57:a5:44:1d:c3:f6:c2:
4c:6e:39:ba:90:aa:00:40:d8:9c:36:e1:c2:a6:f8:38:64:6f:
c9:be:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:54 2026 by rpki-client