
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json)
Hash identifier: k1E3n+LXniOq57bAFnuB+6EJobnQzOBEodrIKX+CxbU=
Subject key identifier: 47:A4:0D:DD:3F:42:98:A8:6E:88:F7:6C:C6:AF:8D:41:53:D1:7A:EE
Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA
Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA
Certificate serial: 557C94A6476FA2695F0635A70E7A1C1A8F6E966F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
Manifest number: F6
Signing time: Tue 03 Nov 2026 06:46:33 +0000
Manifest this update: Tue 03 Nov 2026 06:41:33 +0000
Manifest next update: Wed 04 Nov 2026 08:47:33 +0000
Files and hashes: 1: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: +uQp8EbmU2rfIrxD8u0OnT/+fBY0L1Z7uGSoK5435jA=)
2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=)
3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl
rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 07:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7c:94:a6:47:6f:a2:69:5f:06:35:a7:0e:7a:1c:1a:8f:6e:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA
Validity
Not Before: Nov 3 06:41:33 2026 GMT
Not After : Nov 4 08:47:33 2026 GMT
Subject: CN=47A40DDD3F4298A86E88F76CC6AF8D4153D17AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:97:28:dc:a9:6e:dc:d5:ce:54:33:94:f6:
54:cf:67:aa:65:eb:1e:47:2f:3e:5a:47:12:a4:08:
d0:4a:f7:32:be:eb:24:9a:e7:b4:49:98:8b:67:f4:
85:0d:76:e8:93:b5:11:75:66:4f:b0:62:b7:2a:8c:
60:c8:8d:cd:f1:4f:dd:6c:c1:7a:2a:9d:c6:a3:81:
3b:d2:07:fd:4e:af:1c:69:41:6a:8c:c4:3a:37:a1:
88:42:44:89:bf:69:2e:73:82:8a:18:55:74:1c:d1:
36:fa:96:6b:e3:1b:dd:a7:66:d7:cc:7d:c1:b0:15:
eb:ae:eb:52:b2:84:e5:7f:a6:93:13:6f:b2:8c:55:
45:b8:b9:7f:8f:78:12:9a:cd:c7:ac:37:95:86:75:
89:32:5d:e5:2a:17:38:3c:32:95:52:19:01:32:62:
32:09:a8:15:5e:61:fa:c7:d3:6f:6e:9d:41:af:76:
47:4b:f2:6a:f0:a5:11:9a:09:2a:e1:37:d4:f9:77:
a8:aa:b6:c6:fc:b5:f4:54:13:9d:c8:a4:59:3f:99:
c6:cd:f6:fa:95:3f:b3:bb:7c:d8:43:58:ae:d8:29:
2b:02:34:05:78:9e:5c:9a:a8:de:68:49:9c:47:7e:
ca:f5:12:e4:05:f2:ca:88:42:eb:ee:59:7e:a1:24:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A4:0D:DD:3F:42:98:A8:6E:88:F7:6C:C6:AF:8D:41:53:D1:7A:EE
X509v3 Authority Key Identifier:
keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8f:9b:52:8a:4c:c9:38:e6:9a:1b:a6:bb:45:6c:e0:e3:a9:
ef:e9:01:e1:7f:81:a9:25:e4:24:d0:34:a1:eb:15:67:9f:3d:
cd:28:5e:8d:2e:4c:14:9a:75:a3:af:40:97:5f:8d:a1:b6:f0:
f0:dc:c8:74:32:0f:6f:61:93:8c:d1:53:2a:df:da:80:46:cf:
20:df:54:14:68:5c:3f:58:f7:00:2c:ce:87:d1:3e:0f:45:61:
81:d2:23:05:08:3f:4e:70:20:fb:ae:54:02:ba:d5:26:f8:24:
f3:cd:84:62:52:93:da:88:ff:f1:fb:ac:5e:28:47:b4:2a:b4:
06:4e:2f:33:fb:10:1d:89:d4:5a:fc:77:e3:a7:dd:86:71:de:
bc:87:71:bc:00:89:c9:78:a6:47:80:d2:52:aa:79:13:f2:fb:
f6:9c:f1:f6:7d:95:24:05:74:51:87:0f:10:82:2e:4e:0e:99:
af:8a:bb:12:0b:3a:f9:d7:a9:a3:bc:65:6d:c3:31:ca:7d:a6:
0f:20:1b:36:44:78:10:20:ff:ac:2b:6a:82:f7:4e:c7:23:31:
6a:f9:cf:d1:03:f7:da:5a:db:75:82:ad:c2:6c:38:64:ed:53:
74:15:a1:3b:15:ac:b6:e4:59:20:a8:0b:e0:56:47:20:3a:db:
2c:3a:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 10:28:07 2026 by rpki-client