
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
File: 6E337B5444B52C51F604D54444178A988904A1E8.mft (raw, json)
Hash identifier: sgQC+ffWiWLgx0fbCbdgMcPBwIKBo0MIhUcpKdT10Yc=
Subject key identifier: 5A:C5:E0:F8:4F:AF:E2:BD:C9:59:5D:29:BB:B7:54:70:4E:EB:C6:B4
Authority key identifier: 6E:33:7B:54:44:B5:2C:51:F6:04:D5:44:44:17:8A:98:89:04:A1:E8
Certificate issuer: /CN=6E337B5444B52C51F604D54444178A988904A1E8
Certificate serial: 708EBE5BB7C6A94FABE49AAE7A1B4CECFBF9FC3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:39:03 +0000
Manifest this update: Tue 21 Jul 2026 02:34:03 +0000
Manifest next update: Wed 22 Jul 2026 02:54:03 +0000
Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: OnKbLbqaCOoe9pX82WNBd90kbAA8fqzfZioSItTfPoE=)
2: 6E337B5444B52C51F604D54444178A988904A1E8.crl (hash: BrtPn3aU4+FpFEgK4yZ2XT7slrJfYEv6onPdtkGpiJ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.crl
rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8e:be:5b:b7:c6:a9:4f:ab:e4:9a:ae:7a:1b:4c:ec:fb:f9:fc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E337B5444B52C51F604D54444178A988904A1E8
Validity
Not Before: Jul 21 02:34:03 2026 GMT
Not After : Jul 22 02:54:03 2026 GMT
Subject: CN=5AC5E0F84FAFE2BDC9595D29BBB754704EEBC6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:0d:23:f4:0c:c3:89:6d:f1:42:52:00:f8:
46:8e:12:ee:1d:17:9d:9b:a4:47:42:54:4f:f9:f7:
ab:d1:95:fd:07:53:dd:a4:9d:c5:95:8b:20:c3:45:
82:3a:f1:79:d8:ee:15:e4:54:63:d9:a5:03:40:eb:
26:43:3b:90:08:74:75:72:e4:78:69:f5:fd:ee:f9:
fc:c2:50:a0:7d:59:c0:d4:e9:1d:72:07:80:9e:79:
4d:26:10:82:87:88:f6:2a:7e:15:c3:9f:56:85:af:
87:ce:09:9c:71:6c:fd:98:bc:e2:77:26:08:16:e8:
cc:56:b7:a9:e8:23:52:61:2e:e8:6c:96:b9:aa:2f:
83:ae:32:c2:4d:a7:8f:cb:d6:44:bd:44:9a:0b:9d:
94:e3:e3:bd:6d:e6:2d:cd:fe:88:f6:a9:00:7a:6a:
fe:6f:53:fa:78:06:01:cb:85:78:60:98:44:3d:42:
7c:d3:15:52:bb:97:76:7a:ba:2d:5f:a3:23:88:b4:
85:16:3b:4e:61:51:66:af:a8:40:14:7b:4d:78:14:
bf:d9:6a:ba:ce:9d:5d:c3:f9:90:78:02:48:59:8b:
d0:de:28:33:44:ee:4e:36:30:c3:d6:5d:1c:10:37:
02:34:4f:0e:b6:35:5a:de:9d:ca:ae:3c:0a:9a:23:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:E0:F8:4F:AF:E2:BD:C9:59:5D:29:BB:B7:54:70:4E:EB:C6:B4
X509v3 Authority Key Identifier:
keyid:6E:33:7B:54:44:B5:2C:51:F6:04:D5:44:44:17:8A:98:89:04:A1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:df:b6:03:15:f1:86:5b:85:ee:e7:85:3a:b3:b8:f8:1a:
73:36:08:82:13:7d:fd:07:21:37:6a:74:fa:d5:1e:8b:a4:1c:
a2:a6:97:6c:6d:05:e6:5e:0c:ab:5d:6c:c0:6c:97:b1:95:3f:
08:ba:33:35:6d:c9:7e:79:e5:92:e8:6d:47:ac:9f:8e:55:28:
7d:5d:07:02:e9:d6:25:6a:63:c7:7a:14:39:d9:8a:00:77:44:
cc:76:8f:f3:04:dc:e4:6f:09:71:6f:cd:66:bc:76:4f:10:60:
f4:f0:4f:f0:ab:45:5b:74:2c:3f:01:c0:91:79:f4:4c:20:23:
89:76:b0:20:92:f5:31:3c:b0:47:7d:65:87:78:cd:64:6a:e0:
04:58:6a:b8:21:d3:29:61:24:75:30:bb:b6:cb:85:85:75:9e:
bf:6f:be:7c:84:0e:cd:94:00:cf:61:e4:92:0b:b8:a6:3e:0c:
93:0b:8e:ac:d2:95:b0:28:82:81:68:89:7c:fe:ea:d4:e0:fd:
5b:bf:8d:f9:dc:01:47:ef:96:0c:ab:58:2d:ec:e7:7e:35:7f:
d7:0c:e9:d7:1a:d1:e7:d1:27:80:ae:09:24:7d:21:69:e2:44:
ab:58:27:34:7a:eb:c0:fc:f0:04:d3:d6:7e:89:b6:d1:57:25:
3c:de:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:33:40 2026 by rpki-client