
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json)
Hash identifier: REw0tcW/ZctECGW0lYKmX867zVHf34+34UvoOX1Xl7w=
Subject key identifier: D4:25:67:37:32:88:19:59:2C:E1:2F:ED:12:79:8F:72:A5:CD:AF:AD
Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC
Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
Certificate serial: 0C90F21C6E03DAB0F1104A564F8147E04E9EE6AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 00:33:41 +0000
Manifest this update: Thu 03 Sep 2026 00:28:41 +0000
Manifest next update: Fri 04 Sep 2026 00:33:41 +0000
Files and hashes: 1: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: qjANe9W6jXuF7fLpGYoOfz2sr9Lt6oBbNOyodN2xPDE=)
2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=)
3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=)
4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl
rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 00:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:90:f2:1c:6e:03:da:b0:f1:10:4a:56:4f:81:47:e0:4e:9e:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
Validity
Not Before: Sep 3 00:28:41 2026 GMT
Not After : Sep 4 00:33:41 2026 GMT
Subject: CN=D4256737328819592CE12FED12798F72A5CDAFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:6a:23:ba:b6:7e:45:45:ae:45:65:bb:8f:
85:4f:82:27:20:13:6c:76:cc:2c:49:68:15:19:c1:
ba:56:0e:e3:e5:d1:4e:98:51:ff:71:27:4f:c5:41:
16:6d:d3:43:f8:39:e1:7e:ed:c8:46:92:8c:c1:76:
fa:76:5f:22:66:a1:cd:7c:9c:95:d5:69:95:69:4c:
f1:9b:ab:d5:fa:38:00:52:e9:c6:1f:ea:db:64:98:
3b:95:77:aa:a1:d1:8b:ef:32:46:c2:0c:01:91:9d:
36:08:21:0d:69:b5:d4:2d:4d:74:e8:aa:47:5b:33:
37:b5:b2:08:c4:a6:84:27:b6:b7:da:3c:95:19:12:
e9:7d:3a:91:96:22:bc:b6:03:ee:38:01:18:a3:33:
52:aa:26:54:87:22:e0:36:31:8a:da:f2:35:de:bc:
29:81:24:a4:37:09:80:fc:8a:32:04:45:43:ca:b6:
5c:e9:9c:a6:45:79:2f:8e:78:53:f1:ed:ed:92:82:
70:0d:7b:7b:f3:68:25:27:cc:2d:6a:27:54:b4:70:
1e:19:25:ee:2d:24:00:44:7d:ed:c9:16:e5:ad:a4:
5e:33:5d:c6:7a:11:cf:55:91:cb:a3:34:12:c8:c9:
fe:c9:2d:d1:de:c9:56:ad:29:67:8b:df:4f:1e:bd:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:67:37:32:88:19:59:2C:E1:2F:ED:12:79:8F:72:A5:CD:AF:AD
X509v3 Authority Key Identifier:
keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:3e:bf:52:4f:3a:ab:7a:4c:14:ac:13:ab:0c:86:c3:ed:
45:fe:ad:84:04:ba:b5:c0:f3:3c:ce:a9:ef:36:7a:3f:c0:e1:
7c:cc:35:8b:4d:26:4a:86:6f:24:12:d7:3f:fb:c9:22:c3:31:
63:ad:79:cd:52:05:06:1e:97:ca:9d:cd:15:f5:0a:f6:a9:9b:
47:0a:7a:03:e0:51:fb:2d:9d:a4:05:d7:04:2a:ca:8b:bb:de:
bd:ae:4e:45:b7:a0:92:87:ed:4f:e9:2a:78:ff:e8:de:a8:de:
ec:30:6e:be:49:81:ff:92:de:ab:2c:94:88:8c:f5:c5:05:19:
26:d6:a2:5e:db:4b:68:30:19:22:44:e3:14:e7:49:84:19:ca:
29:64:8b:68:c5:b3:11:01:27:be:ef:87:2a:a8:82:e7:56:1d:
d4:02:e9:65:d1:a4:12:37:7d:00:dd:7a:8b:cc:ef:fd:18:28:
a1:a5:22:47:0d:ae:62:1c:ea:c7:5a:48:a6:01:d2:77:0b:fb:
62:61:18:e5:7f:1e:73:dc:9d:93:6e:e7:4e:e2:58:7d:1f:d6:
ec:8d:a0:3c:e2:67:dd:59:76:17:ce:c4:41:75:6f:95:8a:f9:
91:e2:48:bc:c4:e6:98:f9:67:30:d3:e1:60:cd:7a:46:fa:bf:
ab:b7:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:16:58 2026 by rpki-client