
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json)
Hash identifier: 0eu+RynquQgKrRpGt4zVmDrVnIvHf9KMFI/O7r1W2j4=
Subject key identifier: B1:C6:8A:01:72:91:C8:C8:62:CE:E6:32:74:38:36:50:2C:9C:99:D3
Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
Certificate issuer: /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Certificate serial: 7FF1BD63797FB332F85B2B0F2FFB59472DF7905D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 02:05:34 +0000
Manifest this update: Thu 03 Sep 2026 02:00:34 +0000
Manifest next update: Fri 04 Sep 2026 04:59:34 +0000
Files and hashes: 1: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: NJuUas0HmSisX+OjTJVUTJukzD3aZXev5S/SZz117LU=)
2: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=)
3: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 04:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f1:bd:63:79:7f:b3:32:f8:5b:2b:0f:2f:fb:59:47:2d:f7:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Validity
Not Before: Sep 3 02:00:34 2026 GMT
Not After : Sep 4 04:59:34 2026 GMT
Subject: CN=B1C68A017291C8C862CEE632743836502C9C99D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:4f:a3:eb:6a:5c:1b:27:d2:18:d4:25:79:
c8:61:40:4e:ce:2f:29:55:77:df:65:16:ea:4a:6b:
e7:c6:46:89:c1:69:49:ff:a0:ba:b1:a3:29:40:ec:
5f:ba:20:ce:32:e6:eb:bc:5b:6e:56:57:46:ef:e4:
db:01:ba:57:77:70:53:75:a0:dc:18:52:8a:02:2b:
4b:a0:27:9a:dc:43:85:2e:24:9f:37:84:0a:bc:ef:
56:0a:95:b5:22:22:6d:fe:24:a5:65:8e:ed:ab:d1:
9d:2e:17:1a:fd:da:7a:bb:9a:f4:4b:cd:75:a1:8a:
bb:89:a0:59:a7:08:89:bd:c7:92:55:19:45:14:7c:
f3:7a:9a:a1:c5:1f:9e:e0:44:3f:c3:f2:87:f0:74:
9e:85:c3:c4:7c:7b:97:5a:b0:cc:f0:85:53:04:e0:
ed:08:62:10:eb:5f:2f:bd:47:c0:54:0c:ea:82:b2:
cf:bd:cb:e6:d1:0c:c9:28:7b:56:b8:8c:32:a4:38:
c5:a0:a4:37:2b:5a:d3:d4:5b:47:9a:b5:4e:72:cc:
a4:eb:30:2a:9a:96:df:cd:60:03:35:f3:24:41:37:
4d:af:7e:3d:bd:0b:b6:dc:7c:5e:81:67:65:b9:f4:
61:f8:90:bb:4e:ec:ac:13:bf:57:d3:60:6a:4d:85:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:8A:01:72:91:C8:C8:62:CE:E6:32:74:38:36:50:2C:9C:99:D3
X509v3 Authority Key Identifier:
keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:f8:5a:f5:f2:c9:7d:72:a2:7f:7b:18:c1:c9:86:56:eb:
09:3e:d6:5d:93:04:f6:8d:75:75:01:f6:a4:7e:54:24:d8:a6:
45:e7:77:8e:1a:15:31:86:4d:9d:f7:38:78:78:02:cc:12:37:
8e:9c:a9:00:47:5f:b3:c3:ee:d8:98:91:fe:b4:45:2d:e0:4c:
a4:05:26:4c:52:fa:9d:f9:29:e5:83:94:35:2f:cc:9c:a0:77:
f8:e4:3e:08:4c:7d:43:c7:60:f7:6f:2d:64:2f:a2:4a:3b:60:
2f:4c:27:4a:3e:cb:80:5e:77:90:39:d0:a5:e7:f1:a4:e1:5c:
d5:9d:85:93:b9:bd:27:ac:52:54:77:7b:04:a1:63:67:67:e4:
cb:ea:7b:8a:74:8b:72:6b:5b:9e:c0:9f:c0:18:9e:d7:ab:1d:
bd:5b:32:87:97:22:66:7f:b6:31:e0:e3:46:ee:bc:21:96:f2:
aa:67:54:a5:5e:6a:80:bf:a7:90:fe:a0:ea:77:9a:6f:49:56:
c4:95:ce:7a:65:4d:f2:a9:4c:7e:a2:ac:d6:16:4f:db:53:b9:
f7:31:ac:5f:b1:72:26:c0:73:ce:61:ec:5e:a5:62:75:31:ef:
75:c0:6b:8d:4f:f2:7b:0b:ef:c4:99:7b:4f:f7:24:06:84:0d:
e3:ad:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:00:57 2026 by rpki-client