
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json)
Hash identifier: qOiz4anKhh2u6pNe6IGD3JfaaGJBiVjFJCTsEAl5gWQ=
Subject key identifier: CA:92:A8:3A:DC:A5:CB:37:27:05:E5:2D:AA:B0:8E:86:72:8D:B4:AF
Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Certificate serial: 4917E9FE139B9A16D1C81D239AC5DF61B73D4D1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 09:18:21 +0000
Manifest this update: Sun 19 Jul 2026 09:13:21 +0000
Manifest next update: Mon 20 Jul 2026 10:05:21 +0000
Files and hashes: 1: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: AxnHW9Ze+8nyR2QnhEJbzk5xrlYPgg2N44Rho6CNvqM=)
2: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=)
3: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=)
4: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:17:e9:fe:13:9b:9a:16:d1:c8:1d:23:9a:c5:df:61:b7:3d:4d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Validity
Not Before: Jul 19 09:13:21 2026 GMT
Not After : Jul 20 10:05:21 2026 GMT
Subject: CN=CA92A83ADCA5CB372705E52DAAB08E86728DB4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:c7:08:fb:62:c8:ff:69:f3:cf:ab:7e:36:
0b:af:f6:6b:cb:e9:fc:38:3e:62:81:ab:bd:d1:e5:
54:0a:0f:d4:0a:a9:57:5f:f1:26:65:30:95:9a:1b:
c2:07:ff:eb:d8:bd:3c:a5:0f:ba:c4:d6:3b:f6:c3:
96:4b:ae:73:4e:99:78:6a:bb:a7:1c:37:a4:42:5a:
91:a9:7a:3a:05:c1:da:f1:2f:3c:62:87:3e:07:16:
da:aa:9e:0e:6b:26:05:22:3e:da:55:b2:bd:af:b0:
c7:7a:6d:34:78:1a:5b:56:8c:70:74:6d:cc:27:e1:
37:81:ae:1a:7d:96:ee:e7:24:97:9b:e4:35:3a:17:
34:9d:37:9d:3f:c1:2c:2f:71:10:96:b8:9c:54:05:
9c:78:b4:6c:1d:b4:02:04:0d:c9:1a:b8:dd:75:4e:
7f:20:18:90:0e:2a:ba:64:39:80:c8:40:9b:4e:e6:
46:dc:2a:8c:55:8b:f0:78:7b:b7:5f:ce:73:ce:de:
c5:a7:f4:e9:0e:bd:90:7e:e6:0f:5f:17:8b:d4:0a:
3a:08:3f:27:e5:10:21:53:20:9b:81:fe:40:21:ec:
b2:a1:13:aa:4e:b4:e7:17:4e:e5:06:ce:ee:24:f8:
68:46:a9:42:0a:c0:be:65:0b:c1:84:67:13:2f:da:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:A8:3A:DC:A5:CB:37:27:05:E5:2D:AA:B0:8E:86:72:8D:B4:AF
X509v3 Authority Key Identifier:
keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:eb:50:71:21:d6:15:a1:e8:2c:d4:4c:75:54:32:48:4a:
fb:6b:a9:1b:5f:94:61:b4:78:98:c7:c1:ce:83:11:b6:6b:a5:
98:72:f3:df:54:9c:5e:b8:c3:3b:a8:20:aa:c2:f0:ab:09:fa:
a3:12:aa:84:76:8b:0a:c0:b9:bd:64:18:0b:16:82:ab:32:e4:
a9:6f:e1:8b:b4:88:7a:97:9b:45:f9:41:94:72:36:d3:2c:47:
4e:f0:b4:4e:41:2b:64:ae:56:47:d3:5b:a1:6e:39:00:57:27:
9e:51:a9:d7:65:2e:0c:dc:1d:38:fd:83:61:c1:da:f5:7e:f4:
75:40:e8:fe:28:a0:99:b4:a7:29:42:7b:88:94:d6:eb:6d:9c:
86:8b:90:9c:3c:bf:67:e4:a1:03:16:68:71:66:ba:9c:42:9a:
0a:8b:79:03:55:1f:8a:86:e5:29:59:b1:b6:48:99:10:d6:86:
35:7d:ce:4e:b9:66:d4:bc:fd:e9:24:24:be:12:32:5a:40:1e:
15:01:26:d8:56:65:af:25:5c:e6:ef:1e:41:80:ab:c1:8f:4b:
7a:14:8c:3c:9c:47:e4:a8:bf:4b:d3:93:9e:fd:d6:48:fd:cb:
6d:56:bb:ec:ea:6e:76:61:2c:a6:9e:5a:1c:ee:a2:ec:44:a5:
a6:07:a0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:30:47 2026 by rpki-client