
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
File: 6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft (raw, json)
Hash identifier: LYyBH2T+R4YiaREZSeFeoqVdqg/weKTwezmu4X62/W4=
Subject key identifier: E7:71:71:AF:45:DB:7A:AA:FB:2D:4F:4A:03:A5:EF:AE:28:9F:52:26
Authority key identifier: 6B:BA:CF:0D:AC:5B:15:BC:6C:F4:E5:BC:AD:44:67:6C:03:1B:A5:D3
Certificate issuer: /CN=6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3
Certificate serial: 551625566F0C4F7E31EA1A23C719F1486F5CEA3B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 11:10:09 +0000
Manifest this update: Mon 20 Jul 2026 11:05:09 +0000
Manifest next update: Tue 21 Jul 2026 14:22:09 +0000
Files and hashes: 1: 6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl (hash: rXBGHEGF1FbLbYXXeshQUFWS746FpyrhSZNno5uf4ns=)
2: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: e88toI0gc+wSaORpU+rtaS/kGFnIHMmHOsK/AC+epi4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl
rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 14:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:16:25:56:6f:0c:4f:7e:31:ea:1a:23:c7:19:f1:48:6f:5c:ea:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3
Validity
Not Before: Jul 20 11:05:09 2026 GMT
Not After : Jul 21 14:22:09 2026 GMT
Subject: CN=E77171AF45DB7AAAFB2D4F4A03A5EFAE289F5226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:35:3e:a7:ac:20:57:37:dd:93:84:7f:d9:
ca:cb:be:c3:ff:85:f3:f1:5d:74:62:9c:13:90:67:
65:01:8d:23:4d:64:ed:8a:fe:30:20:4f:fe:a2:e0:
51:1c:eb:fb:f0:e5:20:43:a6:fc:03:56:36:61:79:
18:87:19:d8:b8:49:85:5e:64:23:a8:f1:bd:7b:f3:
51:c0:3d:15:d7:16:1c:45:50:33:61:6c:ab:f5:15:
cf:65:17:7b:a8:50:2e:e5:35:ea:80:19:74:3f:70:
a9:bc:16:7a:67:a4:21:01:eb:a7:60:63:b6:04:16:
06:cf:eb:ed:ac:95:14:2b:97:6f:36:05:de:ab:87:
72:1b:12:98:77:53:67:9b:cc:21:25:db:a1:f9:c4:
5f:b4:e9:ba:c8:9e:a6:95:2e:42:c5:4f:e5:c9:98:
93:5c:2d:c6:d1:5e:e2:ac:17:12:0d:09:30:41:3e:
64:75:b4:9c:87:42:2e:87:80:95:fb:e4:63:1e:ab:
8b:fd:75:92:d5:74:a8:d3:da:26:34:ed:1d:cc:db:
91:69:95:c3:ab:84:60:6a:d2:36:c6:5a:e1:43:60:
e6:a6:8f:b2:84:3b:a9:c0:0f:e7:ec:fd:6d:bc:32:
26:c0:4f:56:d3:83:34:64:56:b9:e2:40:29:42:2c:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:71:AF:45:DB:7A:AA:FB:2D:4F:4A:03:A5:EF:AE:28:9F:52:26
X509v3 Authority Key Identifier:
keyid:6B:BA:CF:0D:AC:5B:15:BC:6C:F4:E5:BC:AD:44:67:6C:03:1B:A5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8c:69:ef:c9:a0:42:3e:63:86:0d:71:e4:5c:98:40:7a:40:
0a:3d:fa:21:f8:b7:a8:da:03:d1:a5:fd:57:48:35:12:04:ed:
06:39:37:61:80:ab:c0:6c:fb:12:40:87:e9:0c:fa:7a:72:34:
6c:7c:f4:b7:cd:a3:63:64:5f:fa:be:19:36:cc:f8:0b:27:1c:
39:2c:8e:ed:68:ec:c8:af:5c:f1:59:22:db:a6:bb:0b:4d:60:
0b:82:93:f3:87:79:61:2b:79:ce:82:28:59:28:41:47:e7:c4:
4a:b4:73:e9:b5:00:09:66:b5:c7:8e:fa:89:91:cb:9f:25:93:
16:74:dd:f7:88:3b:9e:33:d7:6d:50:c4:fd:9e:c4:58:94:f3:
e4:91:0c:33:8f:38:ef:37:a5:e5:6e:1d:7d:41:cd:f2:0a:1f:
6b:43:10:35:cc:74:e1:b0:7f:17:dd:75:62:57:68:5f:8d:1d:
de:1d:29:ab:4a:a8:a9:1d:55:b9:83:6a:88:65:d9:53:79:0c:
b3:7b:be:8c:68:ef:8c:fb:e4:74:1f:37:f1:d1:18:51:18:78:
c7:78:81:f5:8f:b6:9f:6b:e6:e2:44:11:6b:ea:5f:8f:ff:98:
76:ab:bb:dd:6c:d4:2a:fb:d4:cd:65:28:41:a0:a7:62:85:ee:
9d:ed:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:40 2026 by rpki-client