
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json)
Hash identifier: pPytZNKoLfnoK1yAG15cIkedCbZQOWCSqWHWecK6jLk=
Subject key identifier: 8D:B1:D1:01:02:27:64:27:36:AC:25:3A:47:69:CD:00:A0:C1:35:4C
Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Certificate serial: 4E2CC84959EC8EFD5946029AFF68C7EFA557B409
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 00:58:55 +0000
Manifest this update: Mon 02 Nov 2026 00:53:55 +0000
Manifest next update: Tue 03 Nov 2026 02:36:55 +0000
Files and hashes: 1: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=)
2: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: BRiQ0JqMhtZJXeyznekOp+vkIpdkiZ8BqNuiIRk2cUQ=)
3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2c:c8:49:59:ec:8e:fd:59:46:02:9a:ff:68:c7:ef:a5:57:b4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Validity
Not Before: Nov 2 00:53:55 2026 GMT
Not After : Nov 3 02:36:55 2026 GMT
Subject: CN=8DB1D1010227642736AC253A4769CD00A0C1354C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:3f:e6:a6:e2:01:c9:a6:ec:e8:c8:d2:f4:
5e:10:e7:cd:41:dc:23:fd:f3:74:46:9e:be:29:86:
32:a8:16:e5:bf:72:d9:5a:c4:ee:77:e4:56:7c:d0:
de:8b:a6:c5:72:3b:cc:04:0f:d9:81:e7:39:4d:11:
f2:d0:a1:39:df:d0:77:b2:de:05:51:a6:8e:e2:be:
38:fd:9c:3a:6c:50:2f:94:2f:3d:8d:e7:b1:b2:21:
1c:39:e8:fb:d4:e4:db:f4:d9:fb:69:96:89:e8:82:
ea:19:0b:c3:a4:e0:0a:04:35:8f:55:30:f6:51:29:
48:a9:88:56:5e:86:41:96:b9:32:1f:0a:bf:ba:c6:
37:a6:02:42:80:52:bf:0e:38:5a:9b:86:30:f8:91:
ff:f2:97:e8:d9:71:b6:17:4c:f4:cf:61:4f:68:42:
80:84:18:12:24:a8:a4:e2:93:53:08:ea:e9:0a:1d:
20:92:e5:3e:45:f6:83:10:70:12:22:63:b7:1b:65:
62:18:26:35:c4:69:19:de:81:c1:ab:73:73:56:6f:
d0:98:71:91:18:89:04:e5:bf:26:25:32:0d:08:20:
d7:25:a5:18:d0:0d:84:7d:f7:cb:1a:e6:cf:8d:c8:
7c:7e:eb:1f:67:e3:a9:65:b0:31:63:8c:3a:ae:5a:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B1:D1:01:02:27:64:27:36:AC:25:3A:47:69:CD:00:A0:C1:35:4C
X509v3 Authority Key Identifier:
keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:04:8e:35:72:81:a0:72:b6:fd:9a:82:75:6f:9d:42:b6:3c:
18:f7:61:d7:61:1a:c1:d1:56:b0:21:90:87:dc:8f:e1:47:56:
5f:ac:00:07:a0:4e:e1:e8:29:52:5e:2d:1c:2f:94:e8:04:c4:
16:9a:35:c8:53:d0:15:79:34:43:71:8e:ea:ee:aa:1f:22:59:
43:b4:c6:65:4c:77:74:8a:00:c4:0f:63:64:6f:2d:5d:90:ee:
d3:70:0e:7b:54:e2:6e:38:c5:f7:18:da:ec:42:c8:d2:4d:bc:
6f:d6:18:07:f3:99:49:b1:a2:30:ed:78:ae:cc:03:a8:5e:16:
c3:45:cd:2b:e2:ea:59:c2:b8:f4:bc:fb:78:17:00:ae:fe:1d:
86:5e:f9:ee:82:2f:07:ab:c0:fc:05:e4:d3:94:7a:72:91:b9:
ae:56:88:9f:22:c1:0a:44:8c:ad:f2:40:d5:16:63:11:32:67:
be:22:97:31:c9:d5:7d:b3:00:de:8e:f2:7a:1d:26:67:6d:16:
64:61:64:8b:88:10:a1:9d:b2:32:24:e3:39:bb:ba:c6:9f:3e:
64:90:73:f3:8b:79:f2:2e:76:36:20:07:f3:2d:1e:74:96:d1:
48:96:58:4c:39:20:97:14:01:c9:39:86:6a:09:b8:90:4e:d7:
7f:20:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:17:01 2026 by rpki-client