
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
File: 6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft (raw, json)
Hash identifier: tPRrnLxwivxflRDN1WV5VkV0s39GLV1i9AYNmHFd2tk=
Subject key identifier: B8:21:39:C7:B1:CD:F2:A2:33:54:55:9C:5F:16:C2:67:FF:92:9A:7D
Authority key identifier: 6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
Certificate issuer: /CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Certificate serial: 5C20DA3E98CEAA850C16BF552F0BBD6A39FC344C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 11:20:28 +0000
Manifest this update: Mon 20 Jul 2026 11:15:28 +0000
Manifest next update: Tue 21 Jul 2026 15:13:28 +0000
Files and hashes: 1: 6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl (hash: HTnAo0ITc5lXQ/xNb+GesFBGJxqXzDNkeRuMB7n9X6E=)
2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: 5L8OxoDBph/9fu+4CbtRAtlIzGmHICxIfDadaISFa44=)
3: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: WQ6DOIdSKVAA4byBsNGYK5xMdMyH4CwRYtpJ87YdQ9E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 15:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:20:da:3e:98:ce:aa:85:0c:16:bf:55:2f:0b:bd:6a:39:fc:34:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Validity
Not Before: Jul 20 11:15:28 2026 GMT
Not After : Jul 21 15:13:28 2026 GMT
Subject: CN=B82139C7B1CDF2A23354559C5F16C267FF929A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:a8:43:00:e6:6f:1c:3a:68:4d:58:7e:6a:
cd:d2:da:f1:64:4d:15:71:70:fb:30:b1:0b:7a:84:
1b:18:9b:10:52:91:49:80:02:ce:af:54:3c:40:f1:
17:60:23:43:b6:07:e6:b9:09:44:2b:fb:6c:a1:0d:
ee:c2:c3:77:c6:40:32:44:d2:fe:30:f5:c4:58:ed:
0b:29:2b:67:bc:53:dc:a4:bf:14:d9:45:6a:d9:ee:
1c:65:6e:38:4f:ac:9d:f4:3d:32:b7:2f:58:65:9e:
0e:07:27:be:ac:4b:41:fe:d7:c3:26:53:9d:c4:24:
35:16:cd:08:41:79:d7:58:6e:a3:e1:11:e3:c3:5a:
8c:22:d4:41:91:40:7e:1a:28:73:e0:9c:b2:77:8c:
8e:e0:9c:9c:27:bd:e0:ad:19:e1:e7:01:03:f2:bf:
de:a8:b7:3f:d6:d0:4b:a9:ec:8b:ff:08:12:b3:16:
53:eb:1d:f2:b9:26:06:81:99:0a:96:e9:af:73:4f:
84:5c:c4:d6:7a:f7:c1:a7:cd:f1:bc:ab:ab:53:ae:
8d:ee:72:2d:c3:1f:02:a9:ba:21:07:26:cf:0b:ed:
07:3f:54:19:03:d0:1f:ba:d7:49:70:7c:02:4a:f3:
df:68:75:7b:97:35:81:ec:9f:43:62:25:d0:3f:a5:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:39:C7:B1:CD:F2:A2:33:54:55:9C:5F:16:C2:67:FF:92:9A:7D
X509v3 Authority Key Identifier:
keyid:6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:ab:d3:fb:d0:72:d7:f1:d5:d5:57:b7:61:98:97:6a:33:
20:4b:ad:e8:60:3a:7f:d0:1e:cd:ba:24:ff:70:c1:cf:62:4b:
34:58:95:1f:aa:4d:02:ac:18:c0:c4:c8:09:a7:55:e9:13:59:
86:d7:85:38:0e:ac:0b:94:b6:f6:e9:6f:f4:88:3b:a4:60:5e:
a3:e0:8a:bc:8f:b7:b1:21:ee:86:5d:df:d4:01:9b:e9:6f:3e:
26:0d:d7:c8:3f:21:dc:b4:96:92:fa:85:6c:d5:6b:b5:8f:cc:
ac:6d:d9:b7:c9:6c:fd:26:6a:56:d8:2e:85:e6:ea:30:f5:ac:
ba:09:2e:03:ad:c6:5f:94:5a:f1:67:da:3c:13:4c:4a:75:2f:
6e:b7:a8:bc:a2:bc:7b:50:b1:34:6c:c3:1e:93:17:ea:b2:6a:
a1:33:f9:66:89:9f:39:ec:58:30:e5:1e:d1:a4:dc:2f:4c:6b:
11:d4:30:a0:fa:fa:16:4c:00:d2:69:2e:3b:7c:5c:3c:63:61:
8a:36:15:4e:54:18:e7:42:fa:53:9b:cf:20:81:cd:de:0f:63:
6a:f6:b0:52:2d:00:e9:7f:6f:f7:13:f6:fe:c1:41:3f:16:a4:
4d:de:02:f5:e6:31:b6:17:5b:71:d6:2f:c0:7c:a7:58:1b:9e:
e9:2c:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:33:05 2026 by rpki-client