
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
File: B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft (raw, json)
Hash identifier: oM7ODg7o1VgUpKESUnIg71/Wb8KrS7GlDuVuifC5YBI=
Subject key identifier: E6:4A:28:64:04:F4:A0:E4:F1:CC:37:77:9A:D3:CF:DD:76:8B:E7:FF
Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
Certificate issuer: /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Certificate serial: 038F6C80C3CE83C2D7D2AFE2914D1B1EDDCD57EE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 00:13:19 +0000
Manifest this update: Thu 03 Sep 2026 00:08:19 +0000
Manifest next update: Fri 04 Sep 2026 03:00:19 +0000
Files and hashes: 1: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: TiDTdLFtscLo1gjWjoWEhnPEKlKIibkgXZac0KwabKk=)
2: B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl (hash: BjG/uwc9yV0jGhdXrNaoA9GmVJexxRQs8lRQtN/QsF0=)
3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: hhoCmD2A3Hrpt2QLVgfRu8FAamoEY4vI2CK2lYPT4Mg=)
4: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: Cl+3Yo+bu8lAW/IU+MoES7T3F7PhgakZcVRu4FSP59E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8f:6c:80:c3:ce:83:c2:d7:d2:af:e2:91:4d:1b:1e:dd:cd:57:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Validity
Not Before: Sep 3 00:08:19 2026 GMT
Not After : Sep 4 03:00:19 2026 GMT
Subject: CN=E64A286404F4A0E4F1CC37779AD3CFDD768BE7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:fe:b9:14:b8:79:8d:fd:34:6d:99:a0:9f:
d7:4f:aa:b6:3c:ea:99:3b:be:ac:aa:6e:d5:55:6a:
19:80:6e:99:01:93:9a:bb:0b:58:84:24:f3:63:d7:
7f:83:c9:9a:a8:7d:30:27:2f:6b:a2:ef:3d:5c:53:
80:90:b6:9f:fe:3b:e2:b5:18:b2:09:25:d0:f7:68:
f5:bb:45:e5:5a:f2:e4:af:77:18:6f:ce:7b:ce:e8:
b2:bc:89:f8:7a:cb:e1:d5:94:e7:19:eb:0f:7f:cd:
db:24:ad:83:bb:8b:dd:be:1d:20:6c:56:50:a8:19:
49:89:b5:60:88:b6:6c:c5:2e:e9:9d:e6:c5:dc:3d:
62:f1:05:40:6e:ac:ad:5e:63:14:28:90:1e:0c:10:
45:49:e3:56:f5:f6:55:12:70:5b:19:a2:e8:a7:94:
d4:59:9c:c4:78:f4:26:75:8f:f8:c2:92:f9:61:06:
5d:bb:56:64:ad:a3:39:f1:1d:9a:c1:0f:fe:29:0e:
48:4a:c8:a8:d8:ea:f0:62:41:46:85:89:68:24:82:
29:fe:bd:10:eb:1e:36:c5:c3:bf:a4:2d:0d:b2:7b:
94:07:c0:e7:e8:2d:d8:c2:b5:10:74:17:00:7a:e1:
81:00:41:73:4b:f1:bf:ce:fc:44:eb:3b:73:7c:94:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:28:64:04:F4:A0:E4:F1:CC:37:77:9A:D3:CF:DD:76:8B:E7:FF
X509v3 Authority Key Identifier:
keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:75:7e:94:26:93:2c:58:36:04:82:6f:43:8b:8d:ba:8b:6d:
10:a1:68:5b:8d:14:3c:a4:de:92:8d:71:24:98:92:09:36:52:
40:6d:ef:a0:65:63:f7:08:0a:cb:dc:cf:20:50:4b:56:f9:9d:
4c:45:57:b0:6b:c6:19:40:b6:3e:84:c3:f7:ca:b7:6c:34:34:
d9:61:0f:ea:3c:46:a1:81:3b:5b:aa:10:cb:f9:48:58:bf:e7:
24:1b:8f:25:7d:29:8b:21:cf:6e:1c:65:95:7c:ff:a6:4e:29:
9c:15:c6:42:fb:ed:44:61:ae:93:41:14:27:28:5e:c4:f0:0d:
bb:de:a3:e5:00:bb:ec:03:b4:75:78:f3:9b:71:55:12:c4:30:
ed:01:ff:15:e0:77:9b:2d:74:9e:f0:d7:bc:b3:01:43:9a:95:
f2:ee:97:dc:f2:25:37:10:d0:c9:53:8b:ac:bd:8c:9d:fa:63:
b0:e1:b5:01:df:62:36:32:88:95:cc:32:35:85:5e:e7:6e:e8:
85:63:30:9c:8d:5a:79:69:1a:b3:41:2b:e3:c6:8e:fc:7b:3c:
10:d5:91:83:87:25:4c:9f:a6:1b:01:84:03:bb:a5:62:60:df:
0f:29:12:30:a9:9f:de:1d:ab:2e:91:94:9e:a8:0e:05:c7:50:
10:f4:3f:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA49sgMPOg8LX0q/ikU0bHt3NV+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEQTY4NEU0NDgwOTM1QTk1RTZGMzM3M0NDREFDQUE5
OUI4ODgzQzAeFw0yNjA5MDMwMDA4MTlaFw0yNjA5MDQwMzAwMTlaMDMxMTAvBgNV
BAMTKEU2NEEyODY0MDRGNEEwRTRGMUNDMzc3NzlBRDNDRkRENzY4QkU3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSv65FLh5jf00bZmgn9dPqrY8
6pk7vqyqbtVVahmAbpkBk5q7C1iEJPNj13+DyZqofTAnL2ui7z1cU4CQtp/+O+K1
GLIJJdD3aPW7ReVa8uSvdxhvznvO6LK8ifh6y+HVlOcZ6w9/zdskrYO7i92+HSBs
VlCoGUmJtWCItmzFLumd5sXcPWLxBUBurK1eYxQokB4MEEVJ41b19lUScFsZouin
lNRZnMR49CZ1j/jCkvlhBl27VmStoznxHZrBD/4pDkhKyKjY6vBiQUaFiWgkgin+
vRDrHjbFw7+kLQ2ye5QHwOfoLdjCtRB0FwB64YEAQXNL8b/O/ETrO3N8lEQLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5kooZAT0oOTxzDd3mtPP3XaL5/8wHwYDVR0j
BBgwFoAUttpoTkSAk1qV5vM3PM2sqpm4iDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDQ1NWNiMjktNTI3Ni00YTc5LWIzM2EtY2M1MTUxN2JkZDE4LzAvQjZEQTY4NEU0
NDgwOTM1QTk1RTZGMzM3M0NDREFDQUE5OUI4ODgzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNkRBNjg0RTQ0ODA5MzVBOTVFNkYzMzczQ0NEQUNBQTk5Qjg4
ODNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz
M2EtY2M1MTUxN2JkZDE4LzAvQjZEQTY4NEU0NDgwOTM1QTk1RTZGMzM3M0NDREFD
QUE5OUI4ODgzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI51fpQmkyxYNgSCb0OLjbqLbRChaFuNFDyk
3pKNcSSYkgk2UkBt76BlY/cICsvczyBQS1b5nUxFV7BrxhlAtj6Ew/fKt2w0NNlh
D+o8RqGBO1uqEMv5SFi/5yQbjyV9KYshz24cZZV8/6ZOKZwVxkL77URhrpNBFCco
XsTwDbveo+UAu+wDtHV485txVRLEMO0B/xXgd5stdJ7w17yzAUOalfLul9zyJTcQ
0MlTi6y9jJ36Y7DhtQHfYjYyiJXMMjWFXudu6IVjMJyNWnlpGrNBK+PGjvx7PBDV
kYOHJUyfphsBhAO7pWJg3w8pEjCpn94dqy6RlJ6oDgXHUBD0P+8=
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:41:04 2026 by rpki-client