
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft
File: 6D157C9F12B387F14489E16709B7918837CC6D0D.mft (raw, json)
Hash identifier: fh9mnXbrda4//X5IMzw1sseNJjUtyPLQxvWGFOK4v/g=
Subject key identifier: A1:6D:DF:DF:0A:A3:C3:B1:C1:33:2E:8C:38:73:CA:E5:21:A0:DD:35
Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D
Certificate issuer: /CN=6D157C9F12B387F14489E16709B7918837CC6D0D
Certificate serial: 64ECBB905C1925785EE11820E54233E52B2DCDF0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 14:46:40 +0000
Manifest this update: Wed 04 Nov 2026 14:41:40 +0000
Manifest next update: Thu 05 Nov 2026 16:58:40 +0000
Files and hashes: 1: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: NlPuBH9s19urTN9l/ySJyKm6WWO9NdJomGBorLJ9CcM=)
2: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: Q1+ewmleGWvKt5GVutrjmiB3bltbmXv4+SV22bkfQSA=)
3: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: VkyPTF+RY+z/p6xoTjLQ0ZWN42gQ1j6IA9bwlr+r6r8=)
4: 6D157C9F12B387F14489E16709B7918837CC6D0D.crl (hash: kCZ97oWageqmlq8+/wxGXR8aVjLFp6bKK0N98aFLapc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl
rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 11:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ec:bb:90:5c:19:25:78:5e:e1:18:20:e5:42:33:e5:2b:2d:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D
Validity
Not Before: Nov 4 14:41:40 2026 GMT
Not After : Nov 5 16:58:40 2026 GMT
Subject: CN=A16DDFDF0AA3C3B1C1332E8C3873CAE521A0DD35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ed:d3:9e:72:f2:d3:7f:cc:49:af:5f:ce:52:
12:61:10:0c:bd:ed:c6:3f:51:c5:60:25:7d:df:69:
c5:be:6f:c5:0e:e0:c5:97:0c:0a:50:36:4e:b5:4c:
76:25:3f:88:90:bb:df:c0:41:a8:51:9f:1b:85:0c:
b4:8e:bc:62:dc:0f:21:33:26:33:a6:92:fe:8f:e3:
22:68:f3:56:b1:98:4c:15:05:07:a4:61:f3:ef:8d:
34:f0:37:ea:65:1b:07:3f:ba:4f:cd:59:f1:9f:06:
51:b8:37:2e:d3:38:41:25:2e:e3:9f:17:f5:6d:5b:
3c:5d:7d:03:71:46:e5:73:87:b0:92:80:68:bc:32:
26:46:a1:1e:cd:4a:e3:72:c7:0f:c0:4d:af:6d:b3:
9f:5d:e7:82:b2:3b:62:b2:5f:6d:e7:aa:57:c3:58:
82:9f:e2:41:56:a2:4d:cb:4c:05:91:1b:b4:ea:40:
17:fb:d3:a2:02:95:79:2b:7d:d2:78:b4:22:42:bd:
17:72:de:ab:4b:55:dc:0f:bf:14:67:f1:83:10:58:
cc:3d:9d:41:92:25:f1:83:17:67:b8:c3:15:95:56:
cf:11:ce:74:3e:c1:f7:17:f4:39:30:c4:b6:cf:a5:
c5:35:1e:76:5a:e2:58:87:06:9a:f0:25:d2:45:cd:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:DF:DF:0A:A3:C3:B1:C1:33:2E:8C:38:73:CA:E5:21:A0:DD:35
X509v3 Authority Key Identifier:
keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:22:75:06:7b:79:47:dc:ee:ce:98:80:b8:51:10:7d:46:82:
e8:3c:a2:4d:fc:ef:97:76:31:17:1c:3a:8e:07:c9:8f:35:9f:
5d:08:a3:2f:1b:5b:3d:78:63:6b:33:07:9e:5e:03:c1:b2:87:
fa:5a:18:fa:27:b6:f0:30:4c:1f:e8:bb:54:95:f3:1c:b5:2d:
f9:cc:06:23:eb:ce:00:bb:a1:be:1d:00:66:6e:95:d9:92:43:
40:aa:68:a9:a5:3f:1f:61:98:45:0a:dd:46:55:30:e5:32:2e:
37:d6:74:d0:b9:6e:3c:53:f5:e8:0a:46:a5:b2:f7:f1:f0:b4:
e6:1c:ed:3c:d8:69:ab:bf:a6:60:23:f8:8c:2c:6a:de:73:16:
f5:f5:1e:40:a6:5e:d7:d4:69:ea:b0:fa:eb:11:30:b9:67:17:
63:60:a9:f2:3b:b2:de:18:dc:60:f5:6b:62:e2:80:e0:24:3b:
45:a9:e4:77:99:37:33:1a:cd:6e:8c:7a:90:19:61:bb:85:82:
03:38:30:54:30:65:ba:d7:c3:ed:94:bc:7c:45:d1:82:bf:5b:
4d:cc:69:e3:0b:fd:04:30:f5:c5:37:43:81:25:4f:58:ed:f0:
b5:53:12:da:e7:29:90:02:2b:a4:77:ae:b0:11:cd:bf:a6:48:
99:3b:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:08:44 2026 by rpki-client