
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft
File: 6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft (raw, json)
Hash identifier: Jt+XUku4rYkqmiBEFFdt4SDVsxM1l2IAEwMHHxYlYis=
Subject key identifier: 21:E4:5F:93:F5:19:67:DC:5C:07:C2:0B:9C:8A:EE:A2:A0:C8:32:D2
Authority key identifier: 6E:24:FC:B2:60:84:F4:51:86:83:10:7B:CD:2B:BF:81:AB:6A:C6:8B
Certificate issuer: /CN=6E24FCB26084F4518683107BCD2BBF81AB6AC68B
Certificate serial: 6F275BBF28B84FA0F828DEE07D1FE748D02E0967
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft
Manifest number: F9
Signing time: Wed 04 Nov 2026 14:51:44 +0000
Manifest this update: Wed 04 Nov 2026 14:46:44 +0000
Manifest next update: Thu 05 Nov 2026 18:24:44 +0000
Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: 305J/hvDOtqebHoQeRrN4WMPfeTRNXW47+DjNs90tTM=)
2: 6E24FCB26084F4518683107BCD2BBF81AB6AC68B.crl (hash: 8eI7KRHni8iqTEREKdw53xtrABXmMGL8EQ+PNw2pz9I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.crl
rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 12:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:27:5b:bf:28:b8:4f:a0:f8:28:de:e0:7d:1f:e7:48:d0:2e:09:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E24FCB26084F4518683107BCD2BBF81AB6AC68B
Validity
Not Before: Nov 4 14:46:44 2026 GMT
Not After : Nov 5 18:24:44 2026 GMT
Subject: CN=21E45F93F51967DC5C07C20B9C8AEEA2A0C832D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:5d:7e:7f:a6:18:a7:cc:1f:9a:bb:57:3a:
87:c3:9f:d0:3a:77:32:9e:a7:0f:1f:0e:42:ac:9d:
de:dd:37:18:82:d5:10:c6:b2:13:04:e7:47:5d:37:
d2:d6:dc:5f:58:91:b6:b0:94:24:2e:ed:2f:5a:db:
53:01:96:d3:9d:7d:a4:21:a9:a9:23:c3:92:a4:a9:
ec:1a:1f:36:3e:08:b1:5f:15:81:48:f9:a1:0a:76:
5c:99:69:4d:51:eb:23:e4:25:82:19:77:81:61:c6:
8f:f4:6a:12:e0:33:39:e0:62:f6:e8:70:5d:84:3f:
ec:f9:a5:12:45:ae:08:42:e8:5a:f8:92:b0:de:11:
e1:36:3a:d3:29:50:bf:38:f1:4f:2f:c5:25:8f:f5:
d5:02:92:55:1b:bb:5c:81:6a:1a:52:ee:1f:34:9e:
6c:f1:6d:d0:b5:4f:41:30:fc:94:0f:66:60:7a:f3:
eb:92:11:11:c5:0c:78:d3:13:d7:d3:22:34:e3:1f:
00:75:52:d3:cd:00:5f:9b:68:c1:3a:44:4b:64:a0:
44:56:11:93:9e:d0:fd:f0:3a:84:d3:98:26:39:a3:
bf:d5:e2:60:80:e8:cf:43:c8:4a:72:82:c1:d9:a9:
ec:b9:27:06:bc:2b:fe:00:dd:22:88:a0:3a:40:b1:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:5F:93:F5:19:67:DC:5C:07:C2:0B:9C:8A:EE:A2:A0:C8:32:D2
X509v3 Authority Key Identifier:
keyid:6E:24:FC:B2:60:84:F4:51:86:83:10:7B:CD:2B:BF:81:AB:6A:C6:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9b:73:ca:d8:d8:0a:ec:95:46:92:3b:55:51:18:b0:ff:03:
48:88:c4:38:6b:b0:ca:58:6a:45:2b:95:f0:3e:dc:6c:08:f2:
7b:a8:9b:3a:4f:87:48:4e:6a:52:4e:d9:c2:a9:c0:b4:05:ef:
ce:d8:68:f1:d2:0a:3e:07:64:de:55:6e:f3:3c:f8:e6:49:40:
53:30:c7:36:02:d0:85:1e:77:eb:f9:fd:2e:92:4b:cf:59:dd:
eb:aa:6d:98:67:48:5d:fb:46:3d:82:45:eb:ff:66:38:80:63:
7e:41:e2:18:45:bd:f9:a5:b0:89:95:e4:0a:f9:dd:ab:7c:93:
27:a3:74:60:13:4f:2c:fa:79:82:86:a2:49:a2:15:fd:b9:b6:
f9:df:fc:71:a6:76:98:f6:8e:a2:19:07:7c:98:2b:0f:46:ad:
93:83:bf:9c:ca:2e:e6:72:2e:c8:3b:d3:de:54:27:02:36:20:
1d:38:7f:6d:87:d2:bf:2e:cc:dc:14:93:8d:d2:d5:b4:6e:20:
12:29:de:7a:0f:42:28:45:26:70:4f:7b:7c:d0:d1:96:94:28:
08:06:24:3d:37:75:14:60:f5:2b:d3:0d:70:ba:35:cd:ca:04:
a0:f6:0a:8c:00:cb:87:79:61:b3:ec:2b:b5:2a:eb:1a:c7:a3:
b8:5e:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:12:27 2026 by rpki-client