
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
File: 6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json)
Hash identifier: sPhZPqiCwhoxeY38o3o739iiQthA1GoR7TSn2Y9sGus=
Subject key identifier: 86:9D:EF:E2:11:AE:28:77:A7:A1:B4:E7:2C:F4:ED:7E:EA:7E:60:BA
Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Certificate serial: 28932934B732A0C6849706081212F5F9C13C0066
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:55:19 +0000
Manifest this update: Tue 02 Jun 2026 16:50:19 +0000
Manifest next update: Wed 03 Jun 2026 17:41:19 +0000
Files and hashes: 1: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: YMIrm5kkBBg/9TRNuACYvrgrB694Tj1EiQ0l0WssGU8=)
2: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=)
3: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=)
4: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:93:29:34:b7:32:a0:c6:84:97:06:08:12:12:f5:f9:c1:3c:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Validity
Not Before: Jun 2 16:50:19 2026 GMT
Not After : Jun 3 17:41:19 2026 GMT
Subject: CN=869DEFE211AE2877A7A1B4E72CF4ED7EEA7E60BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:7b:db:8a:cb:a1:0b:7b:a0:20:a1:a1:83:
7d:e4:bd:e1:a2:62:62:d0:69:46:a5:da:7b:ee:c3:
e1:8d:18:70:ff:64:b2:1e:6f:5e:81:19:48:a5:dd:
a1:e7:5a:ee:16:81:a6:94:cd:95:63:6e:3f:e0:47:
0d:1d:a5:68:7d:d3:1c:6a:31:59:8f:3a:9b:6d:25:
15:a4:08:62:e0:fd:7c:6f:bf:78:ff:5b:93:e0:4d:
fb:5b:1d:dd:4f:fb:fa:43:b8:03:f5:1d:15:7d:c7:
e9:77:e6:b1:e5:bb:a7:20:cc:f3:cb:eb:3e:db:c5:
80:7d:95:70:4e:9b:60:33:22:8e:d0:2a:d1:62:97:
10:fd:25:32:3f:86:60:b9:d4:12:d9:b0:26:26:03:
37:12:e6:56:20:4a:07:b2:92:b1:3f:62:f9:ec:c8:
ac:de:6f:0c:44:34:a4:10:a6:f9:01:6b:a5:d3:04:
61:75:1c:d3:59:15:2b:bf:33:1a:3b:b1:72:17:6d:
5e:a4:fc:ad:3e:af:b6:c3:f2:97:ee:29:12:e9:50:
13:25:a4:05:14:56:99:75:d9:68:f8:29:18:2a:98:
64:76:23:23:36:ab:05:c1:4f:5d:36:fa:1c:ed:3f:
35:4a:c4:b4:73:72:53:33:69:09:f8:c6:8f:8a:2f:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:EF:E2:11:AE:28:77:A7:A1:B4:E7:2C:F4:ED:7E:EA:7E:60:BA
X509v3 Authority Key Identifier:
keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:20:47:81:2e:85:6a:b4:1d:d8:63:49:b5:a5:9c:52:42:b0:
77:0c:43:4a:73:ba:c1:43:38:6f:91:80:70:a8:2f:b6:6c:e9:
a7:5f:13:d5:a7:f3:ab:06:ce:77:57:62:2e:2c:49:2e:25:8b:
14:db:b4:69:ad:18:e3:2b:f6:68:8b:9a:62:65:70:1c:ad:ab:
fb:6d:6d:1a:56:6d:50:74:13:69:82:bc:a5:79:6d:47:e6:e0:
01:c7:1f:ff:bc:f9:56:b4:4c:ab:26:0d:1e:45:ad:65:47:62:
eb:11:2b:1b:f6:98:4d:78:95:b9:76:99:79:7f:6d:ce:48:3f:
90:92:f6:6d:f2:9c:0d:f2:38:60:42:ff:f3:73:ff:9d:79:3c:
48:ca:e9:74:af:50:4a:2e:31:b2:a2:47:71:9a:22:23:2f:50:
4b:45:21:99:a6:be:16:e3:a3:f4:73:fe:d5:89:c6:af:ad:0b:
45:37:a8:7c:42:0b:fe:84:e5:f3:d4:b6:89:c6:8e:63:34:9d:
da:38:4c:94:2a:2e:62:83:7d:80:e3:02:b7:2f:83:8c:77:15:
7d:b9:dd:56:a2:b2:43:69:29:04:50:d8:76:31:1a:3b:76:dd:
c0:97:e0:a0:24:0e:34:40:17:dd:92:b8:9a:01:51:c4:29:99:
87:ac:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:11:58 2026 by rpki-client