
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
File: B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft (raw, json)
Hash identifier: I1ZsdKiknfA998x9mp3wXptGZNUbTd0+3bIPMdjSkWk=
Subject key identifier: FB:82:FC:EE:C1:3E:32:A0:FD:82:8D:E5:C9:12:C2:7E:71:E2:32:7D
Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
Certificate issuer: /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Certificate serial: 447D01798E7D85D5C18C364B7A344133B8037810
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:22:35 +0000
Manifest this update: Tue 02 Jun 2026 14:17:35 +0000
Manifest next update: Wed 03 Jun 2026 14:29:35 +0000
Files and hashes: 1: B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl (hash: 7nrwSzy5bJ2X0AOhqm3vakn2jNsuvlD4fW8o1lwwRZg=)
2: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: hhoCmD2A3Hrpt2QLVgfRu8FAamoEY4vI2CK2lYPT4Mg=)
3: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: Cl+3Yo+bu8lAW/IU+MoES7T3F7PhgakZcVRu4FSP59E=)
4: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: TiDTdLFtscLo1gjWjoWEhnPEKlKIibkgXZac0KwabKk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7d:01:79:8e:7d:85:d5:c1:8c:36:4b:7a:34:41:33:b8:03:78:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Validity
Not Before: Jun 2 14:17:35 2026 GMT
Not After : Jun 3 14:29:35 2026 GMT
Subject: CN=FB82FCEEC13E32A0FD828DE5C912C27E71E2327D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:ec:d2:3e:32:41:85:c0:27:cd:72:9d:ab:
1a:84:13:61:9d:df:a2:5a:ac:28:6b:47:20:4a:2d:
61:60:c7:3e:b3:70:93:4d:0e:67:2a:13:d0:a9:24:
fb:4e:f3:bc:ab:86:e4:c1:03:e3:e4:5b:3b:58:f1:
db:61:86:d6:6b:fe:3d:47:16:b1:d0:b6:6b:14:f2:
d1:0c:c6:88:97:9a:91:49:a8:82:77:78:48:da:6d:
70:e3:41:9b:29:b8:de:a9:f6:99:72:24:ff:fb:a3:
4c:5b:6a:5f:eb:6f:78:ad:0c:cd:0c:27:22:7c:82:
d3:e4:c4:09:54:7c:a9:21:6c:35:21:03:bc:39:4f:
ab:d2:8d:c3:ec:cd:8e:7d:fc:00:16:dd:1d:71:72:
12:89:76:43:a2:86:16:96:e9:ba:50:6b:8f:02:d7:
9a:5c:43:b7:21:c2:e9:aa:65:ba:59:1a:92:15:b1:
a9:ed:80:e2:71:7b:85:15:d6:fb:21:52:55:24:76:
38:d2:5e:64:0f:5e:c1:51:a1:56:38:33:34:70:b2:
81:20:0e:0f:00:49:1a:3c:fb:54:64:c2:91:aa:e6:
60:c3:23:b2:69:de:c8:5c:cb:9c:41:73:94:45:44:
c1:b0:fa:93:08:fd:18:56:4d:91:50:63:f1:2c:5c:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:FC:EE:C1:3E:32:A0:FD:82:8D:E5:C9:12:C2:7E:71:E2:32:7D
X509v3 Authority Key Identifier:
keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:1e:37:2e:73:19:49:13:58:f0:f4:e9:8e:b9:60:ae:52:
cf:58:9a:eb:a7:51:67:69:1a:9a:3d:6e:e4:60:0e:fe:23:21:
3a:e5:6c:77:76:52:b0:94:52:e6:24:84:7d:57:4a:b2:5c:c4:
68:cb:b6:24:2a:ee:fa:4c:62:91:1b:d6:aa:56:4c:eb:5b:48:
16:d8:b6:59:82:4f:dc:d3:10:f8:5d:c3:d4:4e:b2:d3:46:9a:
0a:d5:81:ca:3c:3d:d4:3e:ce:30:80:76:80:91:6a:3e:13:9d:
8a:2a:d3:4c:db:3c:da:b8:73:72:45:b4:d4:ba:07:e8:6d:7a:
0b:51:fe:d2:95:5a:fa:e8:a2:ef:c7:e7:2d:39:0f:7a:8e:28:
b0:5e:dc:48:2b:63:3e:db:f6:96:0d:c6:0e:c1:f2:5d:0e:28:
d0:01:ea:98:f0:b3:ed:47:3d:b9:fb:32:8f:e3:40:f9:54:86:
b3:f8:1f:15:90:70:5a:ad:d4:d3:cd:a7:fe:4d:6b:33:e7:6d:
47:d9:7d:15:25:d3:f5:0e:13:2e:79:bd:e8:1e:11:50:e8:9a:
bd:e2:19:0b:5a:17:99:bb:54:f5:0e:2b:ee:fb:4c:ec:50:5d:
63:00:3b:ec:a6:9f:ba:bd:a6:b0:73:35:d7:06:31:43:fa:e8:
04:dc:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:57 2026 by rpki-client