
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
File: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft (raw, json)
Hash identifier: BigrqSkVcMqOqrgbN3jWOD21JajMm598E5YvQAjrlp4=
Subject key identifier: E2:1A:CD:49:11:CD:10:C5:06:1E:CB:84:34:7A:A4:56:1F:4C:59:5E
Authority key identifier: 6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97
Certificate issuer: /CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497
Certificate serial: 5662F4CB84E033CD721DD600B86CF21000A5CF3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:50:15 +0000
Manifest this update: Tue 02 Jun 2026 16:45:15 +0000
Manifest next update: Wed 03 Jun 2026 18:46:15 +0000
Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: /9mhE8hilLMkdKj/KGoukj1sKVJz3HgKOnytnAx8zSY=)
2: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl (hash: /PbD+zDDUnzPDSEBhS+LEyjHcRihy4+aPwhOs4X7oQI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl
rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:62:f4:cb:84:e0:33:cd:72:1d:d6:00:b8:6c:f2:10:00:a5:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497
Validity
Not Before: Jun 2 16:45:15 2026 GMT
Not After : Jun 3 18:46:15 2026 GMT
Subject: CN=E21ACD4911CD10C5061ECB84347AA4561F4C595E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:9f:53:e1:82:3f:d9:84:f1:8f:ae:93:32:
d8:8b:27:ca:82:e1:eb:f4:12:49:8d:2c:c1:b4:80:
4c:9b:4b:43:e9:31:b3:b9:96:76:0d:2a:6a:e5:49:
61:a2:a0:01:89:dc:ed:97:a6:67:7a:d3:82:c2:6b:
6a:86:32:86:b4:f5:13:c0:6a:54:c7:c2:ad:33:f9:
95:38:b1:d1:d1:15:55:92:ce:d0:58:4c:78:79:64:
64:5e:70:b5:73:89:99:1d:45:8c:a3:ce:55:7e:04:
bb:de:a3:01:68:cb:85:49:f8:2a:13:16:23:ad:2a:
ed:7a:5e:4c:a4:d8:a1:fd:6d:7c:4e:a5:f5:aa:77:
19:6e:d3:cb:16:21:87:9c:8e:7c:e2:97:88:fc:a0:
12:14:ac:a2:d0:7f:08:9c:b3:bf:68:ed:46:41:b4:
92:62:51:cd:b2:55:50:85:a9:71:4b:20:8e:29:09:
04:2b:06:3c:aa:65:23:20:11:f7:82:c9:47:bd:13:
bb:1b:17:52:1b:83:5e:6a:dd:19:4c:d8:01:98:b1:
10:47:f0:6e:5f:e2:9b:50:04:b1:e4:71:05:9b:47:
6c:ab:42:80:a6:90:3b:56:a0:91:07:d0:14:ce:b3:
89:bd:e7:50:a2:43:21:c7:95:fa:a1:ff:bb:b2:62:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:CD:49:11:CD:10:C5:06:1E:CB:84:34:7A:A4:56:1F:4C:59:5E
X509v3 Authority Key Identifier:
keyid:6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:36:fd:48:a5:4e:d0:d9:15:ab:37:2b:0a:d6:f5:69:37:d7:
21:a4:df:25:eb:d4:03:14:9b:25:88:a8:03:f3:6e:a7:49:67:
00:9b:eb:81:47:aa:7a:dd:bb:c6:34:8e:ee:5f:14:d9:19:50:
be:69:23:8a:13:fd:10:d1:74:04:ee:ce:3a:e0:26:33:6c:c3:
cb:02:da:b6:34:dc:a8:fb:49:f9:16:00:40:b0:7b:89:6b:45:
c0:c0:1a:ed:d4:4d:7f:f0:69:c7:90:f3:07:f3:58:0f:0c:79:
78:51:9b:da:84:76:d4:49:12:32:b4:31:b6:d2:f8:4d:74:d5:
8b:2f:20:f9:9f:06:49:0f:3b:3c:ee:13:f3:de:85:af:9a:af:
07:c9:95:9d:87:b8:07:c7:63:af:71:75:44:97:2d:d3:26:b2:
23:2d:78:7e:38:2c:85:f4:14:bc:20:4d:41:80:c3:4f:6d:b2:
73:fc:ea:a2:ae:6f:5e:b4:92:33:18:db:34:91:51:77:2f:c7:
07:52:ac:ce:de:ab:59:0e:4b:5f:5d:34:5c:d9:9b:82:73:b2:
b9:ea:b1:10:aa:6e:01:45:c7:a0:36:87:d4:ab:62:de:1b:e8:
9a:73:64:25:97:ec:6d:3c:3b:04:0d:f5:b3:20:c1:cb:c3:70:
c5:e4:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:54 2026 by rpki-client