
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier: ylYQlEKZuAbvR3FOMWiQ882TVpY4d2xbcLLzu8tLspo=
Subject key identifier: 76:E4:F6:E7:CC:2D:73:67:E4:BF:6D:4F:D9:48:36:07:FD:5E:4E:BA
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer: /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial: 720E0653EAC788A67551034936014D231E403025
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:38:54 +0000
Manifest this update: Tue 02 Jun 2026 19:33:54 +0000
Manifest next update: Wed 03 Jun 2026 23:00:54 +0000
Files and hashes: 1: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
2: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
3: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
4: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
5: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: 2ieqikoa+lfZZYh6r60D57GGQs8m8yYwOOpd2c9iTiw=)
6: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
7: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
8: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
9: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0e:06:53:ea:c7:88:a6:75:51:03:49:36:01:4d:23:1e:40:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Validity
Not Before: Jun 2 19:33:54 2026 GMT
Not After : Jun 3 23:00:54 2026 GMT
Subject: CN=76E4F6E7CC2D7367E4BF6D4FD9483607FD5E4EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:07:f6:71:a6:d1:77:e8:a3:2b:8a:2c:e8:
8b:e3:16:42:63:24:d3:e3:1a:78:14:de:08:4a:b1:
61:34:11:d3:a7:0c:98:0d:91:38:94:e1:d7:af:4b:
4e:6e:df:4e:7e:7d:35:c5:4b:fb:aa:c6:3d:0d:2a:
8d:1d:16:9b:7a:1c:b1:11:2f:ef:38:17:79:3e:6d:
34:97:68:2c:f5:6f:24:f5:69:ad:79:99:ca:47:d0:
c0:27:cb:07:1a:97:4c:a1:2a:62:f9:73:65:71:1f:
6e:b1:81:bc:12:f9:b4:7d:57:29:48:50:e6:a5:32:
4d:3c:5c:56:93:45:93:77:19:a3:1e:e0:b8:5d:26:
bd:55:9e:c1:58:04:49:9d:d7:b9:06:c1:1f:73:0f:
e5:1f:ee:2d:f6:a2:44:97:d8:96:01:84:0b:92:f4:
9a:89:fd:3a:c4:68:89:e1:ac:28:2a:51:5e:c1:fb:
80:8a:91:e9:cc:d4:d0:82:3b:8f:27:c2:82:be:32:
0f:30:19:46:90:2d:1f:f4:21:98:2d:e7:3d:d1:7b:
14:86:f8:26:08:dc:74:06:b5:db:76:c9:5b:37:3d:
82:35:e6:37:3c:d0:cf:c2:07:c0:c0:74:4f:6f:93:
fa:f2:02:95:fb:2f:5d:dd:1f:51:07:87:e9:26:46:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:F6:E7:CC:2D:73:67:E4:BF:6D:4F:D9:48:36:07:FD:5E:4E:BA
X509v3 Authority Key Identifier:
keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f9:3e:54:ed:24:a0:79:ae:f1:64:f6:dc:83:e8:e8:ab:05:
dd:2f:b0:91:3e:a4:a3:2b:94:6b:6c:c3:c1:cf:a4:ad:ed:ee:
a9:99:e0:aa:fa:8a:5b:84:9a:78:d4:15:7c:61:03:8a:31:b1:
e6:9c:74:77:4f:c1:1b:55:86:7e:0b:a1:ef:90:37:05:b2:92:
43:98:6c:d9:ce:d9:3f:f4:2e:97:7d:ba:ef:0f:0d:2c:87:5c:
75:0d:a5:2c:3c:f4:a0:2f:44:80:18:60:e5:58:e3:0f:48:73:
31:52:85:61:5c:a8:f6:dd:4b:74:ea:57:6f:48:f4:e5:31:27:
48:55:bc:12:71:a5:f5:e5:e4:1c:5f:a9:bb:19:08:f5:5a:e7:
1e:16:51:8d:e8:48:be:c9:3f:81:af:d5:c2:55:36:91:b4:aa:
db:75:82:92:69:28:2c:e4:a2:17:1c:41:a1:dc:c8:d2:26:3a:
19:ce:ea:92:30:26:03:99:a3:4f:ad:cb:6a:b5:98:5a:88:d2:
0e:59:71:75:89:06:62:3d:b7:7a:be:fa:ef:f1:9b:3b:f8:11:
27:b3:b1:b4:04:61:93:ca:b9:e7:be:30:33:1e:df:5a:7f:20:
57:cb:8d:52:a4:dd:d9:2e:a5:97:80:e1:32:12:a2:03:a7:94:
a7:07:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:48:52 2026 by rpki-client