
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft
File: 6FBD1F05CFD81D40960E84596F61608A5408054A.mft (raw, json)
Hash identifier: IpTtVv3CJUfMg7fGlNhOG8QqwEY8EPG3QVNKsAeU85U=
Subject key identifier: E2:DC:30:7B:0E:02:5C:CF:A7:D6:AC:D8:6A:71:B4:43:F3:91:8F:DC
Authority key identifier: 6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A
Certificate issuer: /CN=6FBD1F05CFD81D40960E84596F61608A5408054A
Certificate serial: 2BA12CC5BEF50FEE84F6395269353BEE5A599B19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 21:34:22 +0000
Manifest this update: Wed 02 Sep 2026 21:29:22 +0000
Manifest next update: Thu 03 Sep 2026 22:27:22 +0000
Files and hashes: 1: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ceR7+4PbLSFwnkdZjst5pMwZoHsoUwM163fNIT0NuZA=)
2: 6FBD1F05CFD81D40960E84596F61608A5408054A.crl (hash: p445u51v+/F1uNdGqGhhoScdAJ1k9/wdS5rFcoAqIbk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.crl
rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 22:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a1:2c:c5:be:f5:0f:ee:84:f6:39:52:69:35:3b:ee:5a:59:9b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FBD1F05CFD81D40960E84596F61608A5408054A
Validity
Not Before: Sep 2 21:29:22 2026 GMT
Not After : Sep 3 22:27:22 2026 GMT
Subject: CN=E2DC307B0E025CCFA7D6ACD86A71B443F3918FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:aa:ee:52:28:df:9c:0c:8b:f1:5a:f7:3c:
7a:77:5d:08:48:a9:a8:b0:c5:b3:8f:e9:5d:bc:60:
db:66:50:a1:e0:57:93:7b:2b:35:96:c1:6d:c5:2b:
04:ce:9b:a7:f5:ea:e3:8e:fe:0b:0e:c2:6a:d9:b0:
4d:5f:99:89:3d:a2:47:6f:ea:2f:22:46:63:7b:3a:
70:f1:81:e4:20:d6:3c:af:37:64:a7:ab:66:e9:59:
17:67:e2:32:24:57:5c:60:f1:95:04:8c:de:a7:76:
02:97:4b:d3:44:10:ec:d0:82:e1:1d:cc:26:82:6b:
35:74:44:39:19:ef:c9:4a:94:d6:ee:20:9d:de:70:
de:ad:76:01:66:70:85:bd:79:97:54:2c:42:cc:9b:
de:08:e7:c7:ba:e6:ad:b6:93:ee:3a:33:f5:48:a5:
4c:ab:35:da:ca:58:a4:a0:b0:17:19:c1:0a:d1:39:
b4:ab:58:da:51:cf:2a:47:5e:ee:39:d6:3b:53:e8:
8d:5d:a2:f7:d2:1e:39:8d:1e:5a:74:09:91:e2:44:
95:1a:88:5b:ad:db:db:f6:b0:7f:2f:fc:0d:50:7e:
6f:81:78:ce:ea:65:3f:32:4f:0b:c4:eb:b6:be:87:
59:35:e4:f4:3b:51:0f:ea:68:1c:d5:61:ea:dc:04:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:30:7B:0E:02:5C:CF:A7:D6:AC:D8:6A:71:B4:43:F3:91:8F:DC
X509v3 Authority Key Identifier:
keyid:6F:BD:1F:05:CF:D8:1D:40:96:0E:84:59:6F:61:60:8A:54:08:05:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FBD1F05CFD81D40960E84596F61608A5408054A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/6FBD1F05CFD81D40960E84596F61608A5408054A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:72:7a:0e:c7:48:9c:77:1f:37:ba:31:86:4e:8c:ce:71:a6:
e6:3c:0b:70:e0:7c:76:65:c0:ab:10:33:04:8b:cd:36:cc:f3:
0d:69:b7:e0:b6:b1:d4:53:65:42:c4:af:9c:61:2f:05:c2:35:
2c:74:70:c6:2a:b8:d3:9f:57:f1:b2:b7:e3:45:02:b6:f2:d9:
74:ce:7b:63:cf:da:a8:95:b1:d0:34:07:28:9f:ca:ca:99:66:
b1:e4:6d:80:29:fc:ba:f6:bd:2a:1c:a1:f9:99:9c:cb:03:83:
2b:63:c0:d3:ef:89:0b:5f:c5:8a:84:72:48:b6:64:08:c6:22:
4a:16:6e:77:62:1f:c0:c2:a7:8a:60:fa:54:28:56:c4:f5:06:
40:69:59:5d:cd:87:58:7b:f0:a9:d8:f3:66:4d:d1:8b:a9:8e:
5b:00:b0:fb:79:9b:5c:78:75:e1:2e:43:cb:e2:f7:20:e9:c5:
31:88:8f:47:68:3f:44:a3:61:58:6b:08:d8:eb:59:14:97:51:
cb:c8:25:a8:e3:38:27:82:d0:30:29:e7:38:84:c9:4f:06:38:
ba:99:1f:cd:36:d0:dd:95:c8:57:1c:c8:c3:14:e9:c6:3a:14:
b7:22:9f:64:cb:43:3e:3e:96:83:60:89:41:4e:a2:28:ce:b1:
23:1f:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 15:21:09 2026 by rpki-client