
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json)
Hash identifier: iPpo3PTFSOa6rUq2h/hpcxDOndOYI0PlD9wbUW/NEIU=
Subject key identifier: 6A:60:9E:65:E0:A8:45:36:C1:AF:0F:C6:B8:27:52:56:59:12:8C:CA
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial: 3F746AC39FFFA4F4DA0B6FF61C53C82D7D653843
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 13:55:22 +0000
Manifest this update: Wed 02 Sep 2026 13:50:22 +0000
Manifest next update: Thu 03 Sep 2026 17:19:22 +0000
Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=)
2: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=)
3: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: kajNOxO3/ay7c3s2SeyJ3sqsdGDaxVRtbnGI/8xzj44=)
4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 17:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:74:6a:c3:9f:ff:a4:f4:da:0b:6f:f6:1c:53:c8:2d:7d:65:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
Validity
Not Before: Sep 2 13:50:22 2026 GMT
Not After : Sep 3 17:19:22 2026 GMT
Subject: CN=6A609E65E0A84536C1AF0FC6B827525659128CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:ae:f0:68:aa:3d:ad:ac:a6:c7:01:95:aa:
11:c9:37:8e:a5:fd:3e:21:a7:20:c4:0d:d2:27:9b:
3d:e0:55:21:ce:b5:84:87:49:55:05:6b:d8:8b:93:
f6:84:0d:17:ad:f9:39:5a:e4:5a:ea:d9:0e:c6:9d:
01:83:10:9e:37:de:6e:e0:8a:ed:7a:d0:7e:ce:bf:
ee:ef:40:ee:81:cb:76:20:97:96:43:d0:7c:d5:17:
ba:11:d1:11:76:ac:11:9a:59:1d:42:2b:b0:23:5e:
66:d3:8d:f3:17:a2:35:e2:29:05:44:b5:93:e3:4a:
2c:b5:bf:62:d7:62:c0:78:00:02:40:96:7b:a0:c0:
c7:29:3d:6b:1f:5e:91:ee:91:2e:2f:7d:df:a2:b1:
d5:34:77:c0:a7:2d:7e:b5:86:d8:b2:de:4a:1a:43:
f0:a1:d9:fb:41:35:3a:eb:6e:4e:22:29:ac:68:69:
b6:9e:36:17:97:28:eb:1e:8b:26:54:a7:d9:55:61:
29:56:b8:9e:f3:80:f6:49:b7:2e:34:e8:f9:c2:07:
9b:a9:01:9a:58:dd:46:92:97:96:15:2b:6c:91:72:
4b:9c:1b:41:00:65:4b:2f:8c:c1:85:6a:3f:e9:e4:
a5:ea:ae:2b:ad:19:b0:2e:d1:53:58:a3:61:ec:b2:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:9E:65:E0:A8:45:36:C1:AF:0F:C6:B8:27:52:56:59:12:8C:CA
X509v3 Authority Key Identifier:
keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9a:15:e7:6c:06:d3:24:91:75:b2:b8:60:64:8f:cc:98:38:
4d:3a:bd:b5:30:11:9b:e3:e6:8f:06:0d:1c:ed:09:e6:87:69:
7e:a8:f5:e1:c4:45:ff:07:f3:b1:39:a8:9f:33:5b:08:c2:30:
26:33:11:51:d3:31:44:95:93:9b:00:4f:56:3f:52:2c:7e:57:
a2:59:f7:d6:a5:a9:cb:db:8a:94:fc:65:92:a7:73:26:0f:fb:
31:9b:30:6f:0b:dd:02:d6:ca:36:ad:7d:fd:c0:e8:87:06:73:
26:d3:31:17:65:18:c6:43:30:98:2c:f9:96:41:a5:7e:24:9d:
69:50:c2:b2:2e:d1:70:0d:ef:b1:91:00:c4:47:a4:f9:a1:f8:
06:22:9a:f2:4a:65:79:14:bd:ca:30:57:cd:5f:50:e2:3b:76:
a6:4b:b2:6c:14:96:f9:ce:45:95:6b:37:34:1e:f0:60:c8:8c:
65:4c:9e:57:6a:56:a9:0a:35:e9:d6:4f:15:5e:1e:77:18:dc:
1d:21:20:dd:f8:40:f0:d3:8d:1f:dc:e4:72:e7:c7:f7:79:b1:
99:7d:ff:c8:d8:7d:e7:23:41:5a:e8:b1:c6:56:c1:f6:53:54:
9f:d2:1a:43:e9:da:24:97:0b:8f:d8:8b:4b:06:96:20:0d:0a:
2e:15:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:57:00 2026 by rpki-client