
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
File: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft (raw, json)
Hash identifier: rigmJxawp/FGwLzsf4MJp1VwsL5vSdzpf4VB8ojxXvg=
Subject key identifier: 79:16:36:E6:2D:C6:BE:93:B5:6F:0E:D5:A4:BC:D5:75:BB:A2:29:52
Authority key identifier: 63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC
Certificate issuer: /CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC
Certificate serial: 3C0459B871F295428C8AB390D2DDB3F51B18BB70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
Manifest number: 09
Signing time: Fri 08 May 2026 01:22:26 +0000
Manifest this update: Fri 08 May 2026 01:17:26 +0000
Manifest next update: Sat 09 May 2026 03:56:26 +0000
Files and hashes: 1: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl (hash: 2UjengLd27Ku+SRzzorbUPhTnVk+nzRZ0O28sEqmE4w=)
2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: C1l+SKZdvmsGoFL66tN6deMpQsnd5mLdq6lfMgLgcng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl
rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 03:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:04:59:b8:71:f2:95:42:8c:8a:b3:90:d2:dd:b3:f5:1b:18:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC
Validity
Not Before: May 8 01:17:26 2026 GMT
Not After : May 9 03:56:26 2026 GMT
Subject: CN=791636E62DC6BE93B56F0ED5A4BCD575BBA22952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:be:f5:c4:ad:02:68:c9:4f:aa:76:df:18:
0f:a4:17:c6:4b:68:ff:83:98:5e:b3:8f:6d:78:e7:
ae:8c:cd:22:24:8f:34:17:d9:fb:de:a8:0e:77:61:
e3:82:c4:91:23:bc:ab:50:30:25:8d:51:64:9d:01:
c4:62:c7:a6:54:c3:94:14:12:d7:39:84:ec:62:0b:
a0:c5:54:37:f7:db:4d:90:e8:b2:82:f4:bb:86:71:
bd:34:6a:28:2e:77:06:af:ad:ed:45:66:b1:7e:3e:
7f:7d:b9:42:8b:44:66:33:4e:d2:cb:8a:53:15:67:
a6:63:d9:4d:48:8d:80:62:52:da:99:08:03:b7:76:
96:38:93:e4:57:21:31:da:b1:c4:03:8f:de:7a:14:
14:23:7a:02:a3:28:07:d6:a7:45:e5:4f:d1:a3:db:
7d:a4:ac:52:96:bc:8c:31:fb:2e:38:97:c1:ff:e4:
0a:75:c3:9a:32:84:78:59:48:0c:e8:01:87:ec:96:
aa:f6:64:21:99:3f:bd:81:32:30:84:57:a7:d6:ca:
b4:f4:6f:91:b0:6e:0a:1a:ac:65:f9:1d:80:39:37:
b6:0f:1e:4f:69:7c:51:8f:11:0e:34:93:18:a4:33:
62:01:18:7b:b3:bf:e1:11:b3:a5:4d:54:62:22:d2:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:36:E6:2D:C6:BE:93:B5:6F:0E:D5:A4:BC:D5:75:BB:A2:29:52
X509v3 Authority Key Identifier:
keyid:63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:73:2e:50:be:44:f5:4c:50:14:d6:24:a1:4c:2c:f2:eb:
98:01:19:20:6f:4e:fb:86:f3:5d:fe:70:f8:9f:10:a8:87:ce:
73:60:f2:1c:4f:1c:d2:35:45:73:4b:ed:5f:6d:8f:6b:83:bb:
8e:59:53:cc:28:61:e3:3c:d3:3a:eb:22:9d:9a:f1:76:a7:0c:
c4:7f:91:b7:42:97:a9:3d:41:5c:b9:7c:8c:d7:b3:d3:4a:e6:
15:91:88:a5:6a:79:4f:59:ba:e5:b4:9d:ff:dd:cb:37:1b:69:
5f:c8:92:4d:06:52:8c:36:ed:8b:55:4a:24:3d:4b:41:2e:21:
6a:eb:c3:74:b2:d3:71:6d:0e:90:17:fa:5f:70:f7:19:25:8e:
25:c6:09:d6:0e:44:b6:93:33:fb:46:6c:de:b1:31:cb:a3:d8:
66:dd:4e:5b:c1:a7:36:8a:ac:cb:37:93:4c:4e:97:15:c5:fe:
49:7c:f1:94:28:fc:5e:37:9e:e8:60:33:f2:6e:c9:ad:55:33:
2c:fe:81:7c:6d:dc:6c:df:99:83:7f:67:84:73:9f:3f:9a:ad:
6e:7f:34:37:da:27:66:0f:4d:de:a1:06:5c:87:e8:cc:fc:31:
fa:47:bd:29:86:e8:3d:e0:dc:8f:5a:86:f4:99:a1:c4:1d:f0:
49:81:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:27:53 2026 by rpki-client